{"generated":"2026-10-15T11:37:45Z","source":{"msrc":"https://api.msrc.microsoft.com/cvrf/v3.0/updates","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","kev_catalog_version":"2026.10.14"},"scope_note":"Each CVE is counted once, in the first monthly CVRF document (from 2026-01) that lists it. MSRC documents also list third-party CNA CVEs (Linux kernel, Azure Linux/Mariner open-source packages, Chromium etc.); filter cna=Microsoft for Microsoft-issued CVEs.","classes":[{"id":"zero_click","label":"Network: unauthenticated, no user action","bucket":"zero"},{"id":"auth_net","label":"Network: authenticated","bucket":"creds"},{"id":"adjacent","label":"Adjacent network","bucket":"creds"},{"id":"file_preview","label":"Malicious file: Preview Pane is enough","bucket":"victim"},{"id":"file_open","label":"Malicious file: user must open it","bucket":"victim"},{"id":"mal_server","label":"User connects to a malicious server","bucket":"victim"},{"id":"web","label":"Web content / browser","bucket":"victim"},{"id":"user_assist","label":"Other user interaction required","bucket":"victim"},{"id":"vm_escape","label":"Guest-to-host (VM escape)","bucket":"other"},{"id":"local","label":"Local attacker","bucket":"local"},{"id":"physical","label":"Physical access","bucket":"local"},{"id":"no_cvss","label":"No CVSS vector","bucket":"none"}],"rules":["Rules run top to bottom; the first match wins. Inputs: Microsoft's CVSS 3.x vector, FAQ text (HTML stripped), product/component and title.","Physical: AV:P.","No CVSS vector: MSRC published no vector.","Guest-to-host (VM escape): S:C and (component/title mentions Hyper-V, or FAQ mentions guest/host/virtual machine escape).","Malicious file: Preview Pane is enough: FAQ states the Preview Pane IS an attack vector (answers like 'No, the Preview Pane is not an attack vector' are ignored).","User connects to a malicious server: FAQ says the victim/client connects to an attacker-controlled or malicious server (e.g. RDP client, SMB/SQL client, 'malicious server').","Zero-click network: AV:N, PR:N, UI:N.","Network: authenticated: AV:N with PR:L or PR:H and UI:N.","Adjacent network: AV:A.","Web content / browser: UI:R and (product is Edge/browser or FAQ mentions visiting/clicking a website, link or specially crafted web page/URL).","Malicious file: user must open it: UI:R and FAQ mentions opening a file/document/attachment; or AV:L with MS label Remote Code Execution (Microsoft's own note that 'Remote' refers to the attacker's location while the code runs locally after a file is opened).","Other user interaction required: any remaining UI:R.","Local attacker: remaining AV:L.","Anything left (e.g. AV:N/UI:N not covered) falls to Other user interaction / local only per vector; nothing is invented.","Overstated RCE = Microsoft labels it Remote Code Execution but our class is not zero-click network."],"months":{"2026-01":{"doc":"2026-Jan","entries":326,"released":"2026-10-12T02:13:53"},"2026-02":{"doc":"2026-Feb","entries":173,"released":"2026-10-10T02:18:51"},"2026-03":{"doc":"2026-Mar","entries":462,"released":"2026-10-15T02:10:28"},"2026-04":{"doc":"2026-Apr","entries":688,"released":"2026-10-14T07:00:00"},"2026-05":{"doc":"2026-May","entries":1129,"released":"2026-09-25T02:43:53"},"2026-06":{"doc":"2026-Jun","entries":1285,"released":"2026-10-12T02:15:13"},"2026-07":{"doc":"2026-Jul","entries":2005,"released":"2026-10-09T07:00:00"},"2026-08":{"doc":"2026-Aug","entries":1676,"released":"2026-10-15T02:44:06"},"2026-09":{"doc":"2026-Sep","entries":2778,"released":"2026-10-15T03:08:23"},"2026-10":{"doc":"2026-Oct","entries":1771,"released":"2026-10-15T03:08:45"}},"cves":[{"cve":"CVE-2025-11187","month":"2026-01","title":"Improper validation of PBMAC1 parameters in PKCS#12 MAC verification","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11187"},{"cve":"CVE-2025-13034","month":"2026-01","title":"No QUIC certificate pinning with GnuTLS","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-13034"},{"cve":"CVE-2025-13151","month":"2026-01","title":"CVE-2025-13151","family":"Other","component":"Mariner","cna":"certcc","label":"(none)","labels":[],"severity":"Low","cvss":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-13151"},{"cve":"CVE-2025-14017","month":"2026-01","title":"broken TLS options for threaded LDAPS","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-14017"},{"cve":"CVE-2025-14524","month":"2026-01","title":"bearer token leak on cross-protocol redirect","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-14524"},{"cve":"CVE-2025-15079","month":"2026-01","title":"libssh global known_hosts override","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U","cwe":["CWE-297"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-15079"},{"cve":"CVE-2025-15224","month":"2026-01","title":"libssh key passphrase bypass without agent set","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Low","cvss":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-15224"},{"cve":"CVE-2025-15281","month":"2026-01","title":"wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory","family":"Other","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Moderate","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-15281"},{"cve":"CVE-2025-15444","month":"2026-01","title":"Crypt::Sodium::XS module versions prior to\u00a00.000042,\u00a0for Perl, include a vulnerable version of libsodium","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:U","cwe":["CWE-1395"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-15444"},{"cve":"CVE-2025-15468","month":"2026-01","title":"NULL dereference in SSL_CIPHER_find() function on unknown cipher ID","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-15468"},{"cve":"CVE-2025-15469","month":"2026-01","title":"'openssl dgst' one-shot codepath silently truncates inputs >16MB","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-15469"},{"cve":"CVE-2025-15504","month":"2026-01","title":"lief-project LIEF ELF Binary Parser.tcc parse_binary null pointer dereference","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Moderate","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-15504"},{"cve":"CVE-2025-24528","month":"2026-01","title":"In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H/E:U","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24528"},{"cve":"CVE-2025-56226","month":"2026-01","title":"Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-56226"},{"cve":"CVE-2025-61726","month":"2026-01","title":"Memory exhaustion in query parameter parsing in net/url","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-61726"},{"cve":"CVE-2025-61728","month":"2026-01","title":"Excessive CPU consumption when building archive index in archive/zip","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-61728"},{"cve":"CVE-2025-61730","month":"2026-01","title":"Handshake messages may be processed at the incorrect encryption level in crypto/tls","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-61730"},{"cve":"CVE-2025-61731","month":"2026-01","title":"Arbitrary file write using cgo pkg-config directive in cmd/go","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-61731"},{"cve":"CVE-2025-62291","month":"2026-01","title":"In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62291"},{"cve":"CVE-2025-66199","month":"2026-01","title":"TLS 1.3 CompressedCertificate excessive memory allocation","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-66199"},{"cve":"CVE-2025-68119","month":"2026-01","title":"Unexpected code execution when invoking toolchain in cmd/go","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68119"},{"cve":"CVE-2025-68151","month":"2026-01","title":"CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68151"},{"cve":"CVE-2025-68160","month":"2026-01","title":"Heap out-of-bounds write in BIO_f_linebuffer on short writes","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68160"},{"cve":"CVE-2025-68276","month":"2026-01","title":"Avahi has a reachable assertion in avahi_wide_area_scan_cache","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68276"},{"cve":"CVE-2025-68468","month":"2026-01","title":"Avahi has a reachable assertion in lookup_multicast_callback","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68468"},{"cve":"CVE-2025-68471","month":"2026-01","title":"Avahi has a reachable assertion in lookup_start","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68471"},{"cve":"CVE-2025-68755","month":"2026-01","title":"staging: most: remove broken i2c driver","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68755"},{"cve":"CVE-2025-68756","month":"2026-01","title":"block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68756"},{"cve":"CVE-2025-68757","month":"2026-01","title":"drm/vgem-fence: Fix potential deadlock on release","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68757"},{"cve":"CVE-2025-68758","month":"2026-01","title":"backlight: led-bl: Add devlink to supplier LEDs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68758"},{"cve":"CVE-2025-68759","month":"2026-01","title":"wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68759"},{"cve":"CVE-2025-68763","month":"2026-01","title":"crypto: starfive - Correctly handle return of sg_nents_for_len","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68763"},{"cve":"CVE-2025-68764","month":"2026-01","title":"NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68764"},{"cve":"CVE-2025-68765","month":"2026-01","title":"mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68765"},{"cve":"CVE-2025-68767","month":"2026-01","title":"hfsplus: Verify inode mode when loading from disk","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68767"},{"cve":"CVE-2025-68768","month":"2026-01","title":"inet: frags: flush pending skbs in fqdir_pre_exit()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68768"},{"cve":"CVE-2025-68769","month":"2026-01","title":"f2fs: fix return value of f2fs_recover_fsync_data()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68769"},{"cve":"CVE-2025-68771","month":"2026-01","title":"ocfs2: fix kernel BUG in ocfs2_find_victim_chain","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68771"},{"cve":"CVE-2025-68772","month":"2026-01","title":"f2fs: fix to avoid updating compression context during writeback","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68772"},{"cve":"CVE-2025-68773","month":"2026-01","title":"spi: fsl-cpm: Check length parity before switching to 16 bit mode","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68773"},{"cve":"CVE-2025-68774","month":"2026-01","title":"hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68774"},{"cve":"CVE-2025-68775","month":"2026-01","title":"net/handshake: duplicate handshake cancellations leak socket","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68775"},{"cve":"CVE-2025-68776","month":"2026-01","title":"net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68776"},{"cve":"CVE-2025-68777","month":"2026-01","title":"Input: ti_am335x_tsc - fix off-by-one error in wire_order validation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68777"},{"cve":"CVE-2025-68778","month":"2026-01","title":"btrfs: don't log conflicting inode if it's a dir moved in the current transaction","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68778"},{"cve":"CVE-2025-68780","month":"2026-01","title":"sched/deadline: only set free_cpus for online runqueues","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68780"},{"cve":"CVE-2025-68781","month":"2026-01","title":"usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68781"},{"cve":"CVE-2025-68782","month":"2026-01","title":"scsi: target: Reset t_task_cdb pointer in error case","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68782"},{"cve":"CVE-2025-68783","month":"2026-01","title":"ALSA: usb-mixer: us16x08: validate meter packet indices","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68783"},{"cve":"CVE-2025-68785","month":"2026-01","title":"net: openvswitch: fix middle attribute validation in push_nsh() action","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68785"},{"cve":"CVE-2025-68786","month":"2026-01","title":"ksmbd: skip lock-range check on equal size to avoid size==0 underflow","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68786"},{"cve":"CVE-2025-68787","month":"2026-01","title":"netrom: Fix memory leak in nr_sendmsg()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68787"},{"cve":"CVE-2025-68788","month":"2026-01","title":"fsnotify: do not generate ACCESS/MODIFY events on child for special files","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68788"},{"cve":"CVE-2025-68789","month":"2026-01","title":"hwmon: (ibmpex) fix use-after-free in high/low store","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68789"},{"cve":"CVE-2025-68794","month":"2026-01","title":"iomap: adjust read range correctly for non-block-aligned positions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68794"},{"cve":"CVE-2025-68795","month":"2026-01","title":"ethtool: Avoid overflowing userspace buffer on stats query","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68795"},{"cve":"CVE-2025-68796","month":"2026-01","title":"f2fs: fix to avoid updating zero-sized extent in extent cache","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68796"},{"cve":"CVE-2025-68797","month":"2026-01","title":"char: applicom: fix NULL pointer dereference in ac_ioctl","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68797"},{"cve":"CVE-2025-68798","month":"2026-01","title":"perf/x86/amd: Check event before enable to avoid GPF","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68798"},{"cve":"CVE-2025-68799","month":"2026-01","title":"caif: fix integer underflow in cffrml_receive()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68799"},{"cve":"CVE-2025-68800","month":"2026-01","title":"mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68800"},{"cve":"CVE-2025-68801","month":"2026-01","title":"mlxsw: spectrum_router: Fix neighbour use-after-free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68801"},{"cve":"CVE-2025-68803","month":"2026-01","title":"NFSD: NFSv4 file creation neglects setting ACL","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68803"},{"cve":"CVE-2025-68806","month":"2026-01","title":"ksmbd: fix buffer validation by including null terminator size in EA length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68806"},{"cve":"CVE-2025-68809","month":"2026-01","title":"ksmbd: vfs: fix race on m_flags in vfs_cache","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68809"},{"cve":"CVE-2025-68814","month":"2026-01","title":"io_uring: fix filename leak in __io_openat_prep()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68814"},{"cve":"CVE-2025-68815","month":"2026-01","title":"net/sched: ets: Remove drr class from the active list if it changes to strict","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68815"},{"cve":"CVE-2025-68816","month":"2026-01","title":"net/mlx5: fw_tracer, Validate format string parameters","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68816"},{"cve":"CVE-2025-68817","month":"2026-01","title":"ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68817"},{"cve":"CVE-2025-68818","month":"2026-01","title":"scsi: Revert \"scsi: qla2xxx: Perform lockless command completion in abort path\"","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68818"},{"cve":"CVE-2025-68819","month":"2026-01","title":"media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68819"},{"cve":"CVE-2025-68822","month":"2026-01","title":"Input: alps - fix use-after-free bugs caused by dev3_register_work","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68822"},{"cve":"CVE-2025-68823","month":"2026-01","title":"ublk: fix deadlock when reading partition table","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68823"},{"cve":"CVE-2025-69194","month":"2026-01","title":"Wget2: arbitrary file write via metalink path traversal in gnu wget2","family":"Open Source Software","component":"Mariner","cna":"fedora","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69194"},{"cve":"CVE-2025-69195","month":"2026-01","title":"Wget2: gnu wget2: memory corruption and crash via filename sanitization logic with attacker-controlled urls","family":"Open Source Software","component":"Mariner","cna":"fedora","label":"(none)","labels":[],"severity":"Important","cvss":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69195"},{"cve":"CVE-2025-69418","month":"2026-01","title":"Unauthenticated/unencrypted trailing bytes with low-level OCB function calls","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-325"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69418"},{"cve":"CVE-2025-69419","month":"2026-01","title":"Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69419"},{"cve":"CVE-2025-69420","month":"2026-01","title":"Missing ASN1_TYPE validation in TS_RESP_verify_response() function","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-754"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69420"},{"cve":"CVE-2025-69421","month":"2026-01","title":"NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69421"},{"cve":"CVE-2025-71064","month":"2026-01","title":"net: hns3: using the num_tqps in the vf driver to apply for resources","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71064"},{"cve":"CVE-2025-71065","month":"2026-01","title":"f2fs: fix to avoid potential deadlock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71065"},{"cve":"CVE-2025-71068","month":"2026-01","title":"svcrdma: bound check rq_pages index in inline path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71068"},{"cve":"CVE-2025-71069","month":"2026-01","title":"f2fs: invalidate dentry cache on failed whiteout creation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71069"},{"cve":"CVE-2025-71072","month":"2026-01","title":"shmem: fix recovery on rename failures","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71072"},{"cve":"CVE-2025-71073","month":"2026-01","title":"Input: lkkbd - disable pending work before freeing device","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71073"},{"cve":"CVE-2025-71074","month":"2026-01","title":"functionfs: fix the open/removal races","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71074"},{"cve":"CVE-2025-71075","month":"2026-01","title":"scsi: aic94xx: fix use-after-free in device removal path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71075"},{"cve":"CVE-2025-71077","month":"2026-01","title":"tpm: Cap the number of PCR banks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71077"},{"cve":"CVE-2025-71078","month":"2026-01","title":"powerpc/64s/slb: Fix SLB multihit issue during SLB preload","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71078"},{"cve":"CVE-2025-71079","month":"2026-01","title":"net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71079"},{"cve":"CVE-2025-71081","month":"2026-01","title":"ASoC: stm32: sai: fix OF node leak on probe","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71081"},{"cve":"CVE-2025-71082","month":"2026-01","title":"Bluetooth: btusb: revert use of devm_kzalloc in btusb","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71082"},{"cve":"CVE-2025-71083","month":"2026-01","title":"drm/ttm: Avoid NULL pointer deref for evicted BOs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71083"},{"cve":"CVE-2025-71084","month":"2026-01","title":"RDMA/cm: Fix leaking the multicast GID table reference","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71084"},{"cve":"CVE-2025-71087","month":"2026-01","title":"iavf: fix off-by-one issues in iavf_config_rss_reg()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71087"},{"cve":"CVE-2025-71088","month":"2026-01","title":"mptcp: fallback earlier on simult connection","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71088"},{"cve":"CVE-2025-71089","month":"2026-01","title":"iommu: disable SVA when CONFIG_X86 is set","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71089"},{"cve":"CVE-2025-71091","month":"2026-01","title":"team: fix check for port enabled in team_queue_override_port_prio_changed()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71091"},{"cve":"CVE-2025-71093","month":"2026-01","title":"e1000: fix OOB in e1000_tbi_should_accept()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71093"},{"cve":"CVE-2025-71094","month":"2026-01","title":"net: usb: asix: validate PHY address before use","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.8,"vector":"CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71094"},{"cve":"CVE-2025-71095","month":"2026-01","title":"net: stmmac: fix the crash issue for zero copy XDP_TX action","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71095"},{"cve":"CVE-2025-71096","month":"2026-01","title":"RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71096"},{"cve":"CVE-2025-71097","month":"2026-01","title":"ipv4: Fix reference count leak when using error routes with nexthop objects","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71097"},{"cve":"CVE-2025-71098","month":"2026-01","title":"ip6_gre: make ip6gre_header() robust","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71098"},{"cve":"CVE-2025-71101","month":"2026-01","title":"platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71101"},{"cve":"CVE-2025-71102","month":"2026-01","title":"scs: fix a wrong parameter in __scs_magic","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71102"},{"cve":"CVE-2025-71105","month":"2026-01","title":"f2fs: use global inline_xattr_slab instead of per-sb slab cache","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71105"},{"cve":"CVE-2025-71107","month":"2026-01","title":"f2fs: ensure node page reads complete before f2fs_put_super() finishes","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71107"},{"cve":"CVE-2025-71108","month":"2026-01","title":"usb: typec: ucsi: Handle incorrect num_connectors capability","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71108"},{"cve":"CVE-2025-71109","month":"2026-01","title":"MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71109"},{"cve":"CVE-2025-71111","month":"2026-01","title":"hwmon: (w83791d) Convert macros to functions to avoid TOCTOU","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71111"},{"cve":"CVE-2025-71112","month":"2026-01","title":"net: hns3: add VLAN id validation before using","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71112"},{"cve":"CVE-2025-71113","month":"2026-01","title":"crypto: af_alg - zero initialize memory allocated via sock_kmalloc","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71113"},{"cve":"CVE-2025-71114","month":"2026-01","title":"via_wdt: fix critical boot hang due to unnamed resource allocation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71114"},{"cve":"CVE-2025-71116","month":"2026-01","title":"libceph: make decode_pool() more resilient against corrupted osdmaps","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71116"},{"cve":"CVE-2025-71118","month":"2026-01","title":"ACPICA: Avoid walking the Namespace if start_node is NULL","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71118"},{"cve":"CVE-2025-71119","month":"2026-01","title":"powerpc/kexec: Enable SMT before waking offline CPUs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71119"},{"cve":"CVE-2025-71120","month":"2026-01","title":"SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71120"},{"cve":"CVE-2025-71121","month":"2026-01","title":"parisc: Do not reprogram affinitiy on ASP chip","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71121"},{"cve":"CVE-2025-71122","month":"2026-01","title":"iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71122"},{"cve":"CVE-2025-71125","month":"2026-01","title":"tracing: Do not register unsupported perf events","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71125"},{"cve":"CVE-2025-71127","month":"2026-01","title":"wifi: mac80211: Discard Beacon frames to non-broadcast address","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71127"},{"cve":"CVE-2025-71129","month":"2026-01","title":"LoongArch: BPF: Sign extend kfunc call arguments","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71129"},{"cve":"CVE-2025-71130","month":"2026-01","title":"drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71130"},{"cve":"CVE-2025-71131","month":"2026-01","title":"crypto: seqiv - Do not use req->iv after crypto_aead_encrypt","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71131"},{"cve":"CVE-2025-71132","month":"2026-01","title":"smc91x: fix broken irq-context in PREEMPT_RT","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71132"},{"cve":"CVE-2025-71133","month":"2026-01","title":"RDMA/irdma: avoid invalid read in irdma_net_event","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71133"},{"cve":"CVE-2025-71136","month":"2026-01","title":"media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71136"},{"cve":"CVE-2025-71137","month":"2026-01","title":"octeontx2-pf: fix \"UBSAN: shift-out-of-bounds error\"","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71137"},{"cve":"CVE-2025-71138","month":"2026-01","title":"drm/msm/dpu: Add missing NULL pointer check for pingpong interface","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71138"},{"cve":"CVE-2025-71143","month":"2026-01","title":"clk: samsung: exynos-clkout: Assign .num before accessing .hws","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71143"},{"cve":"CVE-2025-71147","month":"2026-01","title":"KEYS: trusted: Fix a memory leak in tpm2_load_cmd","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71147"},{"cve":"CVE-2025-71150","month":"2026-01","title":"ksmbd: Fix refcount leak when invalid session is found on session lookup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71150"},{"cve":"CVE-2025-71152","month":"2026-01","title":"net: dsa: properly keep track of conduit reference","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71152"},{"cve":"CVE-2025-71154","month":"2026-01","title":"net: usb: rtl8150: fix memory leak on usb_submit_urb() failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71154"},{"cve":"CVE-2025-71160","month":"2026-01","title":"netfilter: nf_tables: avoid chain re-validation if possible","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71160"},{"cve":"CVE-2025-71161","month":"2026-01","title":"dm-verity: disable recursive forward error correction","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-193"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71161"},{"cve":"CVE-2025-71163","month":"2026-01","title":"dmaengine: idxd: fix device leaks on compat bind and unbind","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71163"},{"cve":"CVE-2025-71183","month":"2026-01","title":"btrfs: always detect conflicting inodes when logging inode refs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71183"},{"cve":"CVE-2025-71184","month":"2026-01","title":"btrfs: fix NULL dereference on root when tracing inode eviction","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71184"},{"cve":"CVE-2026-0716","month":"2026-01","title":"Libsoup: out-of-bounds read in libsoup websocket frame processing","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L/E:P","cwe":["CWE-805"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0716"},{"cve":"CVE-2026-0861","month":"2026-01","title":"Integer overflow in memalign leads to heap corruption","family":"Other","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Moderate","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:P","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0861"},{"cve":"CVE-2026-0897","month":"2026-01","title":"Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata","family":"Other","component":"Mariner","cna":"Google","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0897"},{"cve":"CVE-2026-0915","month":"2026-01","title":"getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler","family":"Other","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0915"},{"cve":"CVE-2026-0989","month":"2026-01","title":"Libxml2: unbounded relaxng include recursion leading to stack overflow","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0989"},{"cve":"CVE-2026-0990","month":"2026-01","title":"Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0990"},{"cve":"CVE-2026-0992","month":"2026-01","title":"Libxml2: libxml2: denial of service via crafted xml catalogs","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0992"},{"cve":"CVE-2026-21441","month":"2026-01","title":"urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)","family":"Mariner","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-409"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21441"},{"cve":"CVE-2026-21895","month":"2026-01","title":"rsa crate has potential panic on a prime being equal to 1","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-703"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21895"},{"cve":"CVE-2026-22184","month":"2026-01","title":"zlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()","family":"Open Source Software","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-120"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22184"},{"cve":"CVE-2026-22185","month":"2026-01","title":"OpenLDAP <= 2.6.10 LMDB mdb_load Heap Buffer Underflow in readline()","family":"Open Source Software","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22185"},{"cve":"CVE-2026-22693","month":"2026-01","title":"Null Pointer Dereference in SubtableUnicodesCache::create leading to DoS","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22693"},{"cve":"CVE-2026-22695","month":"2026-01","title":"LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22695"},{"cve":"CVE-2026-22701","month":"2026-01","title":"filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22701"},{"cve":"CVE-2026-22702","month":"2026-01","title":"virtualenv Has TOCTOU Vulnerabilities in Directory Creation","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22702"},{"cve":"CVE-2026-22795","month":"2026-01","title":"Missing ASN1_TYPE validation in PKCS#12 parsing","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-754"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22795"},{"cve":"CVE-2026-22796","month":"2026-01","title":"ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-754"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22796"},{"cve":"CVE-2026-22801","month":"2026-01","title":"LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22801"},{"cve":"CVE-2026-22976","month":"2026-01","title":"net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22976"},{"cve":"CVE-2026-22977","month":"2026-01","title":"net: sock: fix hardened usercopy panic in sock_recv_errqueue","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22977"},{"cve":"CVE-2026-22978","month":"2026-01","title":"wifi: avoid kernel-infoleak from struct iw_point","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22978"},{"cve":"CVE-2026-22979","month":"2026-01","title":"net: fix memory leak in skb_segment_list for GRO packets","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22979"},{"cve":"CVE-2026-22980","month":"2026-01","title":"nfsd: provide locking for v4_end_grace","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22980"},{"cve":"CVE-2026-22982","month":"2026-01","title":"net: mscc: ocelot: Fix crash when adding interface under a lag","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22982"},{"cve":"CVE-2026-22984","month":"2026-01","title":"libceph: prevent potential out-of-bounds reads in handle_auth_done()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22984"},{"cve":"CVE-2026-22990","month":"2026-01","title":"libceph: replace overzealous BUG_ON in osdmap_apply_incremental()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22990"},{"cve":"CVE-2026-22991","month":"2026-01","title":"libceph: make free_choose_arg_map() resilient to partial allocation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22991"},{"cve":"CVE-2026-22992","month":"2026-01","title":"libceph: return the handler error from mon_handle_auth_done()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22992"},{"cve":"CVE-2026-22996","month":"2026-01","title":"net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22996"},{"cve":"CVE-2026-22997","month":"2026-01","title":"net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22997"},{"cve":"CVE-2026-22998","month":"2026-01","title":"nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22998"},{"cve":"CVE-2026-22999","month":"2026-01","title":"net/sched: sch_qfq: do not free existing class in qfq_change_class()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22999"},{"cve":"CVE-2026-23000","month":"2026-01","title":"net/mlx5e: Fix crash on profile change rollback failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23000"},{"cve":"CVE-2026-23004","month":"2026-01","title":"dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23004"},{"cve":"CVE-2023-31096","month":"2026-01","title":"MITRE: CVE-2023-31096 Windows Agere Soft Modem Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Agere Windows Modem Driver","cna":"MITRE Corporation","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":true,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-31096"},{"cve":"CVE-2024-55414","month":"2026-01","title":"Windows Motorola Soft Modem Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Motorola Soft Modem Driver","cna":"MITRE Corporation","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-55414"},{"cve":"CVE-2026-0386","month":"2026-01","title":"Windows Deployment Services Remote Code Execution Vulnerability","family":"ESU","component":"Windows Deployment Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0386"},{"cve":"CVE-2026-0628","month":"2026-01","title":"Chromium: CVE-2026-0628 Insufficient policy enforcement in WebView tag","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0628"},{"cve":"CVE-2026-0899","month":"2026-01","title":"Chromium: CVE-2026-0899 Out of bounds memory access in V8","family":"Open Source Software","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0899"},{"cve":"CVE-2026-0900","month":"2026-01","title":"Chromium: CVE-2026-0900 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0900"},{"cve":"CVE-2026-0901","month":"2026-01","title":"Chromium: CVE-2026-0901 Inappropriate implementation in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0901"},{"cve":"CVE-2026-0902","month":"2026-01","title":"Chromium: CVE-2026-0902 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0902"},{"cve":"CVE-2026-0903","month":"2026-01","title":"Chromium: CVE-2026-0903 Insufficient validation of untrusted input in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0903"},{"cve":"CVE-2026-0904","month":"2026-01","title":"Chromium: CVE-2026-0904 Incorrect security UI in Digital Credentials","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0904"},{"cve":"CVE-2026-0905","month":"2026-01","title":"Chromium: CVE-2026-0905 Insufficient policy enforcement in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0905"},{"cve":"CVE-2026-0906","month":"2026-01","title":"Chromium: CVE-2026-0906 Incorrect security UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0906"},{"cve":"CVE-2026-0907","month":"2026-01","title":"Chromium: CVE-2026-0907 Incorrect security UI in Split View","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0907"},{"cve":"CVE-2026-0908","month":"2026-01","title":"Chromium: CVE-2026-0908 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0908"},{"cve":"CVE-2026-1220","month":"2026-01","title":"Chromium: CVE-2026-1220 Race in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-1220"},{"cve":"CVE-2026-1504","month":"2026-01","title":"Chromium: CVE-2026-1504 Inappropriate implementation in Background Fetch API","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-1504"},{"cve":"CVE-2026-20803","month":"2026-01","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20803"},{"cve":"CVE-2026-20804","month":"2026-01","title":"Windows Hello Tampering Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-266"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20804"},{"cve":"CVE-2026-20805","month":"2026-01","title":"Desktop Window Manager Information Disclosure Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":true,"disclosed":false,"kev":true,"kev_added":"2026-01-13","class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20805"},{"cve":"CVE-2026-20808","month":"2026-01","title":"Windows File Explorer Elevation of Privilege Vulnerability","family":"Windows","component":"Printer Association Object","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20808"},{"cve":"CVE-2026-20809","month":"2026-01","title":"Windows Kernel Memory Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel Memory","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20809"},{"cve":"CVE-2026-20810","month":"2026-01","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-590"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20810"},{"cve":"CVE-2026-20811","month":"2026-01","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - ICOMP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843","CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20811"},{"cve":"CVE-2026-20812","month":"2026-01","title":"LDAP\u00a0Tampering Vulnerability","family":"Windows","component":"Windows LDAP - Lightweight Directory Access Protocol","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20812"},{"cve":"CVE-2026-20814","month":"2026-01","title":"DirectX Graphics Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Graphics Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20814"},{"cve":"CVE-2026-20815","month":"2026-01","title":"Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability","family":"Windows","component":"Capability Access Management Service (camsvc)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20815"},{"cve":"CVE-2026-20816","month":"2026-01","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20816"},{"cve":"CVE-2026-20817","month":"2026-01","title":"Windows Error Reporting Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-280"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20817"},{"cve":"CVE-2026-20818","month":"2026-01","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-532"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20818"},{"cve":"CVE-2026-20819","month":"2026-01","title":"Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability","family":"Windows","component":"Windows Virtualization-Based Security (VBS) Enclave","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20819"},{"cve":"CVE-2026-20820","month":"2026-01","title":"Windows Common Log File System Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Common Log File System Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20820"},{"cve":"CVE-2026-20821","month":"2026-01","title":"Remote Procedure Call Information Disclosure Vulnerability","family":"Windows","component":"Windows Remote Procedure Call","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20821"},{"cve":"CVE-2026-20822","month":"2026-01","title":"Windows Graphics Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20822"},{"cve":"CVE-2026-20823","month":"2026-01","title":"Windows File Explorer Information Disclosure Vulnerability","family":"Windows","component":"Windows File Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20823"},{"cve":"CVE-2026-20824","month":"2026-01","title":"Windows Remote Assistance Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Remote Assistance","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20824"},{"cve":"CVE-2026-20825","month":"2026-01","title":"Windows Hyper-V Information Disclosure Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20825"},{"cve":"CVE-2026-20826","month":"2026-01","title":"Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability","family":"Windows","component":"Tablet Windows User Interface (TWINUI) Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20826"},{"cve":"CVE-2026-20827","month":"2026-01","title":"Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability","family":"Windows","component":"Tablet Windows User Interface (TWINUI) Subsystem","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20827"},{"cve":"CVE-2026-20828","month":"2026-01","title":"Windows rndismp6.sys Information Disclosure Vulnerability","family":"Windows","component":"Windows Internet Connection Sharing (ICS)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20828"},{"cve":"CVE-2026-20829","month":"2026-01","title":"TPM Trustlet Information Disclosure Vulnerability","family":"Windows","component":"Windows TPM","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20829"},{"cve":"CVE-2026-20830","month":"2026-01","title":"Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability","family":"Windows","component":"Capability Access Management Service (camsvc)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20830"},{"cve":"CVE-2026-20831","month":"2026-01","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20831"},{"cve":"CVE-2026-20832","month":"2026-01","title":"Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Procedure Call Interface Definition Language (IDL)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20832"},{"cve":"CVE-2026-20833","month":"2026-01","title":"Windows Kerberos Information Disclosure Vulnerability","family":"ESU","component":"Windows Kerberos","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-327"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20833"},{"cve":"CVE-2026-20834","month":"2026-01","title":"Windows Spoofing Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-36","CWE-359"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20834"},{"cve":"CVE-2026-20835","month":"2026-01","title":"Capability Access Management Service (camsvc) Information Disclosure Vulnerability","family":"Windows","component":"Capability Access Management Service (camsvc)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20835"},{"cve":"CVE-2026-20836","month":"2026-01","title":"DirectX Graphics Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Graphics Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20836"},{"cve":"CVE-2026-20837","month":"2026-01","title":"Windows Media Remote Code Execution Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20837"},{"cve":"CVE-2026-20838","month":"2026-01","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-209"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20838"},{"cve":"CVE-2026-20839","month":"2026-01","title":"Windows Client-Side Caching (CSC) Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Client-Side Caching (CSC) Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20839"},{"cve":"CVE-2026-20840","month":"2026-01","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20840"},{"cve":"CVE-2026-20842","month":"2026-01","title":"Microsoft DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20842"},{"cve":"CVE-2026-20843","month":"2026-01","title":"Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20843"},{"cve":"CVE-2026-20844","month":"2026-01","title":"Windows Clipboard Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Clipboard Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20844"},{"cve":"CVE-2026-20847","month":"2026-01","title":"Microsoft Windows File Explorer Spoofing Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20847"},{"cve":"CVE-2026-20848","month":"2026-01","title":"Windows SMB Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SMB Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20848"},{"cve":"CVE-2026-20849","month":"2026-01","title":"Windows Kerberos Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-807"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20849"},{"cve":"CVE-2026-20851","month":"2026-01","title":"Capability Access Management Service (camsvc) Information Disclosure Vulnerability","family":"Windows","component":"Capability Access Management Service (camsvc)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20851"},{"cve":"CVE-2026-20852","month":"2026-01","title":"Windows Hello Tampering Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-266"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20852"},{"cve":"CVE-2026-20853","month":"2026-01","title":"Windows WalletService Elevation of Privilege Vulnerability","family":"Windows","component":"Windows WalletService","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20853"},{"cve":"CVE-2026-20854","month":"2026-01","title":"Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Local Security Authority Subsystem Service (LSASS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20854"},{"cve":"CVE-2026-20856","month":"2026-01","title":"Windows Server Update Service (WSUS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Server Update Service","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20856"},{"cve":"CVE-2026-20857","month":"2026-01","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20857"},{"cve":"CVE-2026-20858","month":"2026-01","title":"Windows Management Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:T/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20858"},{"cve":"CVE-2026-20859","month":"2026-01","title":"Windows Kernel-Mode Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel-Mode Drivers","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20859"},{"cve":"CVE-2026-20860","month":"2026-01","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20860"},{"cve":"CVE-2026-20861","month":"2026-01","title":"Windows Management Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416","CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20861"},{"cve":"CVE-2026-20862","month":"2026-01","title":"Windows Management Services Information Disclosure Vulnerability","family":"Windows","component":"Windows Management Services","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20862"},{"cve":"CVE-2026-20863","month":"2026-01","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - ICOMP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20863"},{"cve":"CVE-2026-20864","month":"2026-01","title":"Windows Connected Devices Platform Service Elevation of Privilege Vulnerability","family":"Windows","component":"Connected Devices Platform Service (Cdpsvc)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20864"},{"cve":"CVE-2026-20865","month":"2026-01","title":"Windows Management Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20865"},{"cve":"CVE-2026-20866","month":"2026-01","title":"Windows Management Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20866"},{"cve":"CVE-2026-20867","month":"2026-01","title":"Windows Management Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416","CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20867"},{"cve":"CVE-2026-20868","month":"2026-01","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20868"},{"cve":"CVE-2026-20869","month":"2026-01","title":"Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Local Session Manager (LSM)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20869"},{"cve":"CVE-2026-20870","month":"2026-01","title":"Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - ICOMP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20870"},{"cve":"CVE-2026-20871","month":"2026-01","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20871"},{"cve":"CVE-2026-20872","month":"2026-01","title":"NTLM Hash Disclosure Spoofing Vulnerability","family":"Windows","component":"Windows NTLM","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20872"},{"cve":"CVE-2026-20873","month":"2026-01","title":"Windows Management Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20873"},{"cve":"CVE-2026-20874","month":"2026-01","title":"Windows Management Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20874"},{"cve":"CVE-2026-20875","month":"2026-01","title":"Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability","family":"Windows","component":"Windows Local Security Authority Subsystem Service (LSASS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20875"},{"cve":"CVE-2026-20876","month":"2026-01","title":"Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Virtualization-Based Security (VBS) Enclave","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20876"},{"cve":"CVE-2026-20877","month":"2026-01","title":"Windows Management Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20877"},{"cve":"CVE-2026-20918","month":"2026-01","title":"Windows Management Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20918"},{"cve":"CVE-2026-20919","month":"2026-01","title":"Windows SMB Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SMB Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20919"},{"cve":"CVE-2026-20920","month":"2026-01","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - ICOMP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20920"},{"cve":"CVE-2026-20921","month":"2026-01","title":"Windows SMB Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SMB Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20921"},{"cve":"CVE-2026-20922","month":"2026-01","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20922"},{"cve":"CVE-2026-20923","month":"2026-01","title":"Windows Management Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20923"},{"cve":"CVE-2026-20924","month":"2026-01","title":"Windows Management Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20924"},{"cve":"CVE-2026-20925","month":"2026-01","title":"NTLM Hash Disclosure Spoofing Vulnerability","family":"Windows","component":"Windows NTLM","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20925"},{"cve":"CVE-2026-20926","month":"2026-01","title":"Windows SMB Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SMB Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20926"},{"cve":"CVE-2026-20927","month":"2026-01","title":"Windows SMB Server Denial of Service Vulnerability","family":"Windows","component":"Windows SMB Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20927"},{"cve":"CVE-2026-20929","month":"2026-01","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20929"},{"cve":"CVE-2026-20931","month":"2026-01","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20931"},{"cve":"CVE-2026-20932","month":"2026-01","title":"Windows File Explorer Information Disclosure Vulnerability","family":"Windows","component":"Windows File Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20932"},{"cve":"CVE-2026-20934","month":"2026-01","title":"Windows SMB Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SMB Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20934"},{"cve":"CVE-2026-20935","month":"2026-01","title":"Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability","family":"Windows","component":"Windows Virtualization-Based Security (VBS) Enclave","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20935"},{"cve":"CVE-2026-20936","month":"2026-01","title":"Windows NDIS Information Disclosure Vulnerability","family":"Windows","component":"Windows NDIS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20936"},{"cve":"CVE-2026-20937","month":"2026-01","title":"Windows File Explorer Information Disclosure Vulnerability","family":"Windows","component":"Windows File Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20937"},{"cve":"CVE-2026-20938","month":"2026-01","title":"Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Virtualization-Based Security (VBS) Enclave","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20938"},{"cve":"CVE-2026-20939","month":"2026-01","title":"Windows File Explorer Information Disclosure Vulnerability","family":"Windows","component":"Windows File Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20939"},{"cve":"CVE-2026-20940","month":"2026-01","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20940"},{"cve":"CVE-2026-20941","month":"2026-01","title":"Host Process for Windows Tasks Elevation of Privilege Vulnerability","family":"Windows","component":"Host Process for Windows Tasks","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20941"},{"cve":"CVE-2026-20943","month":"2026-01","title":"Microsoft Office Click-To-Run Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20943"},{"cve":"CVE-2026-20944","month":"2026-01","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20944"},{"cve":"CVE-2026-20946","month":"2026-01","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20946"},{"cve":"CVE-2026-20947","month":"2026-01","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20947"},{"cve":"CVE-2026-20948","month":"2026-01","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20948"},{"cve":"CVE-2026-20949","month":"2026-01","title":"Microsoft Excel Security Feature Bypass Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20949"},{"cve":"CVE-2026-20950","month":"2026-01","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20950"},{"cve":"CVE-2026-20951","month":"2026-01","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20951"},{"cve":"CVE-2026-20952","month":"2026-01","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20952"},{"cve":"CVE-2026-20953","month":"2026-01","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20953"},{"cve":"CVE-2026-20955","month":"2026-01","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20955"},{"cve":"CVE-2026-20956","month":"2026-01","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20956"},{"cve":"CVE-2026-20957","month":"2026-01","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20957"},{"cve":"CVE-2026-20958","month":"2026-01","title":"Microsoft SharePoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20958"},{"cve":"CVE-2026-20959","month":"2026-01","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20959"},{"cve":"CVE-2026-20960","month":"2026-01","title":"PowerApps Desktop Client Remote Code Execution Vulnerability","family":"Azure","component":"Microsoft Power Apps","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20960"},{"cve":"CVE-2026-20962","month":"2026-01","title":"Dynamic Root of Trust for Measurement (DRTM) Information Disclosure Vulnerability","family":"Windows","component":"Dynamic Root of Trust for Measurement (DRTM)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20962"},{"cve":"CVE-2026-20963","month":"2026-01","title":"Microsoft SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":true,"kev_added":"2026-03-18","class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20963"},{"cve":"CVE-2026-20965","month":"2026-01","title":"Windows Admin Center Elevation of Privilege Vulnerability","family":"Azure","component":"Windows Admin Center","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20965"},{"cve":"CVE-2026-21219","month":"2026-01","title":"Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability","family":"Developer Tools","component":"Inbox COM Objects","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21219"},{"cve":"CVE-2026-21221","month":"2026-01","title":"Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability","family":"Windows","component":"Capability Access Management Service (camsvc)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21221"},{"cve":"CVE-2026-21223","month":"2026-01","title":"Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"(none)","labels":[],"severity":"(none)","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-269"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21223"},{"cve":"CVE-2026-21224","month":"2026-01","title":"Azure Connected Machine Agent Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Connected Machine Agent","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21224"},{"cve":"CVE-2026-21226","month":"2026-01","title":"Azure Core shared client library for Python Remote Code Execution Vulnerability","family":"Azure","component":"Azure Core shared client library for Python","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21226"},{"cve":"CVE-2026-21227","month":"2026-01","title":"Azure Logic Apps Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Logic Apps","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21227"},{"cve":"CVE-2026-21264","month":"2026-01","title":"Microsoft Account Spoofing Vulnerability","family":"Azure","component":"Microsoft Account","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21264"},{"cve":"CVE-2026-21265","month":"2026-01","title":"Secure Boot Certificate Expiration Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Secure Boot","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1329"],"exploited":false,"disclosed":true,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21265"},{"cve":"CVE-2026-21509","month":"2026-01","title":"Microsoft Office Security Feature Bypass Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C","cwe":["CWE-807"],"exploited":true,"disclosed":false,"kev":true,"kev_added":"2026-01-26","class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21509"},{"cve":"CVE-2026-21520","month":"2026-01","title":"Copilot Studio Information Disclosure Vulnerability","family":"Microsoft Office","component":"Copilot Studio","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C/CR:H/IR:L/AR:L","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21520"},{"cve":"CVE-2026-21521","month":"2026-01","title":"Word Copilot Information Disclosure Vulnerability","family":"Apps","component":"Microsoft Copilot","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-150"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21521"},{"cve":"CVE-2026-21524","month":"2026-01","title":"Azure Data Explorer Information Disclosure Vulnerability","family":"Azure","component":"Azure Data Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21524"},{"cve":"CVE-2026-24304","month":"2026-01","title":"Azure Resource Manager Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Resource Manager (ARM)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24304"},{"cve":"CVE-2026-24305","month":"2026-01","title":"Azure Entra ID Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Entra ID","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24305"},{"cve":"CVE-2026-24306","month":"2026-01","title":"Azure Front Door Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Front Door (AFD)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24306"},{"cve":"CVE-2026-24307","month":"2026-01","title":"M365 Copilot Information Disclosure Vulnerability","family":"Apps","component":"M365 Copilot","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-1287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24307"},{"cve":"CVE-2026-0719","month":"2026-01","title":"Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0719"},{"cve":"CVE-2025-71115","month":"2026-01","title":"um: init cpu_tasks[] earlier","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71115"},{"cve":"CVE-2026-23490","month":"2026-01","title":"pyasn1 has a DoS vulnerability in decoder","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23490"},{"cve":"CVE-2025-68753","month":"2026-01","title":"ALSA: firewire-motu: add bounds check in put_user loop for DSP events","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68753"},{"cve":"CVE-2025-68766","month":"2026-01","title":"irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68766"},{"cve":"CVE-2026-21444","month":"2026-01","title":"libtpms returns wrong initialization vector when certain symmetric ciphers are used","family":"Mariner","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-327"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21444"},{"cve":"CVE-2025-14819","month":"2026-01","title":"OpenSSL partial chain store policy bypass","family":"Open Source Software","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-14819"},{"cve":"CVE-2026-21860","month":"2026-01","title":"Werkzeug safe_join() allows Windows special device names with compound extensions","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-67"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21860"},{"cve":"CVE-2025-68808","month":"2026-01","title":"media: vidtv: initialize local pointers upon transfer of memory ownership","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68808"},{"cve":"CVE-2025-71066","month":"2026-01","title":"net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71066"},{"cve":"CVE-2025-71067","month":"2026-01","title":"ntfs: set dummy blocksize to read boot_block when mounting","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71067"},{"cve":"CVE-2025-71162","month":"2026-01","title":"dmaengine: tegra-adma: Fix use-after-free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71162"},{"cve":"CVE-2026-24821","month":"2026-01","title":"A heap-based buffer over-read that might affect a system that compiles untrusted Lua code in turanszkij/WickedEngine.","family":"Open Source Software","component":"Mariner","cna":"GovTech CSG","label":"(none)","labels":[],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24821"},{"cve":"CVE-2025-61143","month":"2026-02","title":"libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-61143"},{"cve":"CVE-2025-61144","month":"2026-02","title":"libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-119"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-61144"},{"cve":"CVE-2025-61145","month":"2026-02","title":"libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"(none)","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-61145"},{"cve":"CVE-2025-61732","month":"2026-02","title":"Potential code smuggling via doc comments in cmd/cgo","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-61732"},{"cve":"CVE-2025-67733","month":"2026-02","title":"Valkey Affected by RESP Protocol Injection via Lua error_reply","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H","cwe":["CWE-74"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-67733"},{"cve":"CVE-2025-68121","month":"2026-02","title":"Unexpected session resumption in crypto/tls","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68121"},{"cve":"CVE-2025-71202","month":"2026-02","title":"iommu/sva: invalidate stale IOTLB entries for kernel address space","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71202"},{"cve":"CVE-2025-71225","month":"2026-02","title":"md: suspend array while updating raid_disks via sysfs","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71225"},{"cve":"CVE-2025-71227","month":"2026-02","title":"wifi: mac80211: don't WARN for connections on invalid channels","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71227"},{"cve":"CVE-2025-71229","month":"2026-02","title":"wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71229"},{"cve":"CVE-2025-71232","month":"2026-02","title":"scsi: qla2xxx: Free sp in error path to fix system crash","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71232"},{"cve":"CVE-2025-71233","month":"2026-02","title":"PCI: endpoint: Avoid creating sub-groups asynchronously","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71233"},{"cve":"CVE-2025-71235","month":"2026-02","title":"scsi: qla2xxx: Delay module unload while fabric scan in progress","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71235"},{"cve":"CVE-2025-71236","month":"2026-02","title":"scsi: qla2xxx: Validate sp before freeing associated memory","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71236"},{"cve":"CVE-2025-71237","month":"2026-02","title":"nilfs2: Fix potential block overflow that cause system hang","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71237"},{"cve":"CVE-2026-1703","month":"2026-02","title":"Limited path traversal when installing wheel archives","family":"Open Source Software","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-1703"},{"cve":"CVE-2026-21620","month":"2026-02","title":"TFTP Path Traversal","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21620"},{"cve":"CVE-2026-21863","month":"2026-02","title":"Malformed Valkey Cluster bus message can lead to Remote DoS","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21863"},{"cve":"CVE-2026-2243","month":"2026-02","title":"Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2243"},{"cve":"CVE-2026-23066","month":"2026-02","title":"rxrpc: Fix recvmsg() unconditional requeue","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23066"},{"cve":"CVE-2026-23069","month":"2026-02","title":"vsock/virtio: fix potential underflow in virtio_transport_get_credit()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23069"},{"cve":"CVE-2026-23086","month":"2026-02","title":"vsock/virtio: cap TX credit to local buffer size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23086"},{"cve":"CVE-2026-23088","month":"2026-02","title":"tracing: Fix crash on synthetic stacktrace field usage","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23088"},{"cve":"CVE-2026-23100","month":"2026-02","title":"mm/hugetlb: fix hugetlb_pmd_shared()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23100"},{"cve":"CVE-2026-23110","month":"2026-02","title":"scsi: core: Wake up the error handler when final completions race against each other","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23110"},{"cve":"CVE-2026-23113","month":"2026-02","title":"io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23113"},{"cve":"CVE-2026-23118","month":"2026-02","title":"rxrpc: Fix data-race warning and potential load/store tearing","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23118"},{"cve":"CVE-2026-23126","month":"2026-02","title":"netdevsim: fix a race issue related to the operation on bpf_bound_progs list","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23126"},{"cve":"CVE-2026-23137","month":"2026-02","title":"of: unittest: Fix memory leak in unittest_data_add()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23137"},{"cve":"CVE-2026-23138","month":"2026-02","title":"tracing: Add recursion protection in kernel stack trace recording","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23138"},{"cve":"CVE-2026-23141","month":"2026-02","title":"btrfs: send: check for inline extents in range_is_hole_in_parent()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23141"},{"cve":"CVE-2026-23154","month":"2026-02","title":"net: fix segmentation of forwarding fraglist GRO","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23154"},{"cve":"CVE-2026-23157","month":"2026-02","title":"btrfs: do not strictly require dirty metadata threshold for metadata writepages","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23157"},{"cve":"CVE-2026-23169","month":"2026-02","title":"mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23169"},{"cve":"CVE-2026-23171","month":"2026-02","title":"bonding: fix use-after-free due to enslave fail after slave array update","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23171"},{"cve":"CVE-2026-23191","month":"2026-02","title":"ALSA: aloop: Fix racy access at PCM trigger","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23191"},{"cve":"CVE-2026-23204","month":"2026-02","title":"net/sched: cls_u32: use skb_header_pointer_careful()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23204"},{"cve":"CVE-2026-23207","month":"2026-02","title":"spi: tegra210-quad: Protect curr_xfer check in IRQ handler","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23207"},{"cve":"CVE-2026-23208","month":"2026-02","title":"ALSA: usb-audio: Prevent excessive number of frames","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23208"},{"cve":"CVE-2026-23212","month":"2026-02","title":"bonding: annotate data-races around slave->last_rx","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23212"},{"cve":"CVE-2026-23213","month":"2026-02","title":"drm/amd/pm: Disable MMIO access during SMU Mode 1 reset","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23213"},{"cve":"CVE-2026-23214","month":"2026-02","title":"btrfs: reject new transactions if the fs is fully read-only","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23214"},{"cve":"CVE-2026-23215","month":"2026-02","title":"x86/vmware: Fix hypercall clobbers","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23215"},{"cve":"CVE-2026-23216","month":"2026-02","title":"scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23216"},{"cve":"CVE-2026-23220","month":"2026-02","title":"ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23220"},{"cve":"CVE-2026-23221","month":"2026-02","title":"bus: fsl-mc: fix use-after-free in driver_override_show()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23221"},{"cve":"CVE-2026-23222","month":"2026-02","title":"crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23222"},{"cve":"CVE-2026-23223","month":"2026-02","title":"xfs: fix UAF in xchk_btree_check_block_owner","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23223"},{"cve":"CVE-2026-23225","month":"2026-02","title":"sched/mmcid: Don't assume CID is CPU owned on mode switch","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23225"},{"cve":"CVE-2026-23228","month":"2026-02","title":"smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23228"},{"cve":"CVE-2026-23229","month":"2026-02","title":"crypto: virtio - Add spinlock protection with virtqueue notification","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23229"},{"cve":"CVE-2026-2443","month":"2026-02","title":"Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2443"},{"cve":"CVE-2026-24834","month":"2026-02","title":"Kata Container to Guest micro VM privilege escalation","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Critical","cvss":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P","cwe":["CWE-732"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24834"},{"cve":"CVE-2026-2492","month":"2026-02","title":"TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability","family":"Open Source Software","component":"Mariner","cna":"zdi","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-427"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2492"},{"cve":"CVE-2026-25541","month":"2026-02","title":"Bytes is vulnerable to integer overflow in BytesMut::reserve","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-680"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25541"},{"cve":"CVE-2026-27141","month":"2026-02","title":"Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27141"},{"cve":"CVE-2026-27171","month":"2026-02","title":"zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.","family":"Mariner","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27171"},{"cve":"CVE-2026-27199","month":"2026-02","title":"Werkzeug safe_join() allows Windows special device names","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-67"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27199"},{"cve":"CVE-2026-27211","month":"2026-02","title":"Cloud Hypervisor: Host File Exfiltration via QCOW Backing File Abuse","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27211"},{"cve":"CVE-2026-2739","month":"2026-02","title":"This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.","family":"Open Source Software","component":"Mariner","cna":"snyk","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2739"},{"cve":"CVE-2026-27571","month":"2026-02","title":"nats-server websockets are vulnerable to pre-auth memory DoS","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-409"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27571"},{"cve":"CVE-2026-27965","month":"2026-02","title":"Vitess users with backup storage access can gain unauthorized access to production deployment environments","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27965"},{"cve":"CVE-2026-27969","month":"2026-02","title":"Vitess users with backup storage access can write to arbitrary file paths on restore","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27969"},{"cve":"CVE-2026-28364","month":"2026-02","title":"In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain. The vulnerability stems from missing bounds validation in the readblock() function, which performs unbounded memcpy() operations using attacker-controlled lengths from crafted Marshal data.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-28364"},{"cve":"CVE-2026-28417","month":"2026-02","title":"Vim has OS Command Injection in netrw","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U","cwe":["CWE-86"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-28417"},{"cve":"CVE-2026-28418","month":"2026-02","title":"Vim has Heap-based Buffer Overflow in Emacs tags parsing","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-28418"},{"cve":"CVE-2026-28419","month":"2026-02","title":"Vim has Heap-based Buffer Underflow in Emacs tags parsing","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U","cwe":["CWE-124"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-28419"},{"cve":"CVE-2026-28420","month":"2026-02","title":"Vim has Heap-based Buffer Overflow and OOB Read in :terminal","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-28420"},{"cve":"CVE-2026-28421","month":"2026-02","title":"Vim has a heap-buffer-overflow and a segmentation fault","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-28421"},{"cve":"CVE-2026-28422","month":"2026-02","title":"Vim has stack-buffer-overflow in build_stl_str_hl()","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":2.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N/E:U","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-28422"},{"cve":"CVE-2026-27903","month":"2026-02","title":"minimatch has a ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27903"},{"cve":"CVE-2026-0665","month":"2026-02","title":"Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq","family":"Other","component":"Mariner","cna":"fedora","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0665"},{"cve":"CVE-2026-21519","month":"2026-02","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":true,"disclosed":false,"kev":true,"kev_added":"2026-02-10","class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21519"},{"cve":"CVE-2026-21517","month":"2026-02","title":"Windows App for Mac Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows App for Mac","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21517"},{"cve":"CVE-2026-21512","month":"2026-02","title":"Azure DevOps Server Cross-Site Scripting Vulnerability","family":"Azure","component":"Azure DevOps Server","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21512"},{"cve":"CVE-2026-21259","month":"2026-02","title":"Microsoft Excel Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21259"},{"cve":"CVE-2026-21258","month":"2026-02","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-20","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21258"},{"cve":"CVE-2026-21260","month":"2026-02","title":"Microsoft Outlook Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21260"},{"cve":"CVE-2026-21248","month":"2026-02","title":"Windows Hyper-V Remote Code Execution Vulnerability","family":"Windows","component":"Role: Windows Hyper-V","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21248"},{"cve":"CVE-2026-21247","month":"2026-02","title":"Windows Hyper-V Remote Code Execution Vulnerability","family":"Windows","component":"Role: Windows Hyper-V","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20","CWE-122","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21247"},{"cve":"CVE-2026-21242","month":"2026-02","title":"Windows Subsystem for Linux Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Subsystem for Linux","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21242"},{"cve":"CVE-2026-21235","month":"2026-02","title":"Windows Graphics Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21235"},{"cve":"CVE-2026-21234","month":"2026-02","title":"Windows Connected Devices Platform Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Connected Devices Platform Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21234"},{"cve":"CVE-2026-21236","month":"2026-02","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21236"},{"cve":"CVE-2026-21218","month":"2026-02","title":".NET Spoofing Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-166"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21218"},{"cve":"CVE-2026-23655","month":"2026-02","title":"Microsoft ACI Confidential Containers Information Disclosure Vulnerability","family":"Azure","component":"Azure Compute Gallery","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-312"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23655"},{"cve":"CVE-2026-2320","month":"2026-02","title":"Chromium: CVE-2026-2320 Inappropriate implementation in File input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2320"},{"cve":"CVE-2026-21533","month":"2026-02","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Desktop","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C","cwe":["CWE-269"],"exploited":true,"disclosed":false,"kev":true,"kev_added":"2026-02-10","class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21533"},{"cve":"CVE-2026-21513","month":"2026-02","title":"MSHTML Framework Security Feature Bypass Vulnerability","family":"Windows","component":"MSHTML Framework","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-693"],"exploited":true,"disclosed":true,"kev":true,"kev_added":"2026-02-10","class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21513"},{"cve":"CVE-2026-0391","month":"2026-02","title":"Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge for Android","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0391"},{"cve":"CVE-2026-1861","month":"2026-02","title":"Chromium: CVE-2026-1861 Heap buffer overflow in libvpx","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-1861"},{"cve":"CVE-2026-24300","month":"2026-02","title":"Azure Front Door Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Front Door (AFD)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24300"},{"cve":"CVE-2026-21532","month":"2026-02","title":"Azure Function Information Disclosure Vulnerability","family":"Azure","component":"Azure Function","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21532"},{"cve":"CVE-2026-21522","month":"2026-02","title":"Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Compute Gallery","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21522"},{"cve":"CVE-2026-2441","month":"2026-02","title":"Chromium: CVE-2026-2441 Use after free in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":true,"kev_added":"2026-02-17","class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2441"},{"cve":"CVE-2026-2323","month":"2026-02","title":"Chromium: CVE-2026-2323 Inappropriate implementation in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2323"},{"cve":"CVE-2026-0102","month":"2026-02","title":"Microsoft Edge (Chromium-based) Defense in Depth Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Defense in Depth","labels":["Defense in Depth"],"severity":"Low","cvss":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-359"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0102"},{"cve":"CVE-2026-2319","month":"2026-02","title":"Chromium: CVE-2026-2319 Race in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2319"},{"cve":"CVE-2026-2316","month":"2026-02","title":"Chromium: CVE-2026-2316 Insufficient policy enforcement in Frames","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2316"},{"cve":"CVE-2026-2314","month":"2026-02","title":"Chromium: CVE-2026-2314 Heap buffer overflow in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2314"},{"cve":"CVE-2026-21535","month":"2026-02","title":"Microsoft Teams Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Teams","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21535"},{"cve":"CVE-2026-3063","month":"2026-02","title":"Chromium: CVE-2026-3063 Inappropriate implementation in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3063"},{"cve":"CVE-2026-21527","month":"2026-02","title":"Microsoft Exchange Server Spoofing Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-451","CWE-345","CWE-1286"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21527"},{"cve":"CVE-2026-21528","month":"2026-02","title":"Azure IoT Explorer Information Disclosure Vulnerability","family":"Azure","component":"Azure IoT Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-1327"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21528"},{"cve":"CVE-2026-21531","month":"2026-02","title":"Azure SDK for Python Remote Code Execution Vulnerability","family":"Azure","component":"Azure SDK","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21531"},{"cve":"CVE-2026-21510","month":"2026-02","title":"Windows Shell Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C","cwe":["CWE-693"],"exploited":true,"disclosed":true,"kev":true,"kev_added":"2026-02-10","class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21510"},{"cve":"CVE-2026-21537","month":"2026-02","title":"Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability","family":"System Center","component":"Microsoft Defender for Linux","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21537"},{"cve":"CVE-2026-21529","month":"2026-02","title":"Azure HDInsight Spoofing Vulnerability","family":"Azure","component":"Azure HDInsights","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21529"},{"cve":"CVE-2026-1862","month":"2026-02","title":"Chromium: CVE-2026-1862 Type Confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-1862"},{"cve":"CVE-2026-2318","month":"2026-02","title":"CVE-2026-2318","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2318"},{"cve":"CVE-2026-2313","month":"2026-02","title":"Chromium: CVE-2026-2313 Use after free in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2313"},{"cve":"CVE-2026-2322","month":"2026-02","title":"Chromium: CVE-2026-2322 Heap buffer overflow in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2322"},{"cve":"CVE-2026-2649","month":"2026-02","title":"Chromium: CVE-2026-2649 Integer overflow in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2649"},{"cve":"CVE-2026-2648","month":"2026-02","title":"Chromium: CVE-2026-2648 Heap buffer overflow in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2648"},{"cve":"CVE-2026-3062","month":"2026-02","title":"Chromium: CVE-2026-3062 Out of bounds read and write in Tint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3062"},{"cve":"CVE-2026-3061","month":"2026-02","title":"Chromium: CVE-2026-3061 Out of bounds read in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3061"},{"cve":"CVE-2026-21514","month":"2026-02","title":"Microsoft Word Security Feature Bypass Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C","cwe":["CWE-807"],"exploited":true,"disclosed":true,"kev":true,"kev_added":"2026-02-10","class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21514"},{"cve":"CVE-2026-21525","month":"2026-02","title":"Windows Remote Access Connection Manager Denial of Service Vulnerability","family":"Windows","component":"Windows Remote Access Connection Manager","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Moderate","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":true,"disclosed":false,"kev":true,"kev_added":"2026-02-10","class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21525"},{"cve":"CVE-2026-21516","month":"2026-02","title":"GitHub Copilot for Jetbrains Remote Code Execution Vulnerability","family":"Other","component":"Github Copilot","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21516"},{"cve":"CVE-2026-21511","month":"2026-02","title":"Microsoft Outlook Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21511"},{"cve":"CVE-2026-21508","month":"2026-02","title":"Windows Storage Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-287","CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21508"},{"cve":"CVE-2026-21261","month":"2026-02","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21261"},{"cve":"CVE-2026-21257","month":"2026-02","title":"GitHub Copilot and Visual Studio Elevation of Privilege Vulnerability","family":"Developer Tools","component":"GitHub Copilot and Visual Studio","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21257"},{"cve":"CVE-2026-21256","month":"2026-02","title":"GitHub Copilot and Visual Studio Remote Code Execution Vulnerability","family":"Developer Tools","component":"GitHub Copilot and Visual Studio","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77","CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21256"},{"cve":"CVE-2026-21255","month":"2026-02","title":"Windows Hyper-V Security Feature Bypass Vulnerability","family":"Windows","component":"Role: Windows Hyper-V","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21255"},{"cve":"CVE-2026-21253","month":"2026-02","title":"Mailslot File System Elevation of Privilege Vulnerability","family":"Windows","component":"Mailslot File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21253"},{"cve":"CVE-2023-2804","month":"2026-02","title":"Red Hat, Inc. CVE-2023-2804: Heap Based Overflow libjpeg-turbo","family":"Windows","component":"Windows Win32K - GRFX","cna":"Red Hat, Inc.","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2804"},{"cve":"CVE-2026-21251","month":"2026-02","title":"Cluster Client Failover (CCF) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cluster Client Failover","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21251"},{"cve":"CVE-2026-21250","month":"2026-02","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21250"},{"cve":"CVE-2026-21249","month":"2026-02","title":"Windows NTLM Spoofing Vulnerability","family":"Windows","component":"Windows NTLM","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21249"},{"cve":"CVE-2026-21245","month":"2026-02","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21245"},{"cve":"CVE-2026-21244","month":"2026-02","title":"Windows Hyper-V Remote Code Execution Vulnerability","family":"Windows","component":"Role: Windows Hyper-V","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21244"},{"cve":"CVE-2026-21243","month":"2026-02","title":"Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability","family":"Windows","component":"Windows LDAP - Lightweight Directory Access Protocol","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21243"},{"cve":"CVE-2026-21240","month":"2026-02","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21240"},{"cve":"CVE-2026-21241","month":"2026-02","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21241"},{"cve":"CVE-2026-21239","month":"2026-02","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21239"},{"cve":"CVE-2026-21238","month":"2026-02","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21238"},{"cve":"CVE-2026-21237","month":"2026-02","title":"Windows Subsystem for Linux Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Subsystem for Linux","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21237"},{"cve":"CVE-2026-21232","month":"2026-02","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21232"},{"cve":"CVE-2026-21231","month":"2026-02","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21231"},{"cve":"CVE-2026-21228","month":"2026-02","title":"Azure Local Remote Code Execution Vulnerability","family":"Azure","component":"Azure Local","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21228"},{"cve":"CVE-2026-21222","month":"2026-02","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-532"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21222"},{"cve":"CVE-2026-2317","month":"2026-02","title":"Chromium: CVE-2026-2317 Inappropriate implementation in Animation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2317"},{"cve":"CVE-2026-26119","month":"2026-02","title":"Windows Admin Center Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Admin Center","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26119"},{"cve":"CVE-2026-2650","month":"2026-02","title":"Chromium: CVE-2026-2650 Heap buffer overflow in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2650"},{"cve":"CVE-2025-71226","month":"2026-02","title":"wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71226"},{"cve":"CVE-2026-23230","month":"2026-02","title":"smb: client: split cached_fid bitfields to avoid shared-byte RMW races","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23230"},{"cve":"CVE-2025-71231","month":"2026-02","title":"crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71231"},{"cve":"CVE-2026-23226","month":"2026-02","title":"ksmbd: add chann_lock to protect ksmbd_chann_list xarray","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23226"},{"cve":"CVE-2025-69299","month":"2026-02","title":"WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability","family":"Mariner","component":"Mariner","cna":"Patchstack","label":"(none)","labels":[],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:U","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69299"},{"cve":"CVE-2025-71228","month":"2026-02","title":"LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71228"},{"cve":"CVE-2025-71234","month":"2026-02","title":"wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71234"},{"cve":"CVE-2026-23227","month":"2026-02","title":"drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23227"},{"cve":"CVE-2026-26960","month":"2026-02","title":"node-tar has Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in Extraction","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26960"},{"cve":"CVE-2026-21518","month":"2026-02","title":"GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"GitHub Copilot and Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21518"},{"cve":"CVE-2026-24302","month":"2026-02","title":"Azure Arc Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Arc","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24302"},{"cve":"CVE-2026-21523","month":"2026-02","title":"GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability","family":"Developer Tools","component":"GitHub Copilot and Visual Studio","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21523"},{"cve":"CVE-2026-20841","month":"2026-02","title":"Windows Notepad App Remote Code Execution Vulnerability","family":"Apps","component":"Windows Notepad App","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20841"},{"cve":"CVE-2026-21246","month":"2026-02","title":"Windows Graphics Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21246"},{"cve":"CVE-2026-20846","month":"2026-02","title":"GDI+ Denial of Service Vulnerability","family":"Windows","component":"Windows GDI+","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20846"},{"cve":"CVE-2026-21229","month":"2026-02","title":"Power BI Remote Code Execution Vulnerability","family":"SQL Server","component":"Power BI","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21229"},{"cve":"CVE-2026-23217","month":"2026-02","title":"riscv: trace: fix snapshot deadlock with sbi ecall","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23217"},{"cve":"CVE-2025-71230","month":"2026-02","title":"hfs: ensure sb->s_fs_info is always cleaned up","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71230"},{"cve":"CVE-2026-23224","month":"2026-02","title":"erofs: fix UAF issue for file-backed mounts w/ directio option","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23224"},{"cve":"CVE-2025-62878","month":"2026-02","title":"Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62878"},{"cve":"CVE-2026-23068","month":"2026-02","title":"spi: spi-sprd-adi: Fix double free in probe error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23068"},{"cve":"CVE-2025-71221","month":"2026-02","title":"dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71221"},{"cve":"CVE-2026-24051","month":"2026-02","title":"OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24051"},{"cve":"CVE-2026-25727","month":"2026-02","title":"time affected by a stack exhaustion denial of service attack","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25727"},{"cve":"CVE-2026-1979","month":"2026-02","title":"mruby JMPNOT-to-JMPIF Optimization vm.c mrb_vm_exec use after free","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-1979"},{"cve":"CVE-2025-11563","month":"2026-02","title":"wcurl path traversal with percent-encoded slashes","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"(none)","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11563"},{"cve":"CVE-2025-69873","month":"2026-02","title":"ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to the JavaScript RegExp() constructor without validation. An attacker can inject a malicious regex pattern (e.g., \"^(a|a)*$\") combined with crafted input to cause catastrophic backtracking. A 31-character payload causes approximately 44 seconds of CPU blocking, with each additional character doubling execution time. This enables complete denial of service with a single HTTP request against any API using ajv with $data: true for dynamic schema validation.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-1333"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69873"},{"cve":"CVE-2026-27623","month":"2026-02","title":"Valkey has Pre-Authentication DOS from malformed RESP request","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27623"},{"cve":"CVE-2006-10002","month":"2026-03","title":"XML::Parser versions through 2.47 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes","family":"Open Source Software","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2006-10002"},{"cve":"CVE-2006-10003","month":"2026-03","title":"XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack","family":"Open Source Software","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":["CWE-193"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2006-10003"},{"cve":"CVE-2024-14027","month":"2026-03","title":"xattr: switch to CLASS(fd)","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-14027"},{"cve":"CVE-2025-13462","month":"2026-03","title":"tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling","family":"Open Source Software","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-13462"},{"cve":"CVE-2025-49010","month":"2026-03","title":"OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":3.8,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49010"},{"cve":"CVE-2025-66037","month":"2026-03","title":"OpenSC: Out of Bounds vulnerability","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":3.9,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-66037"},{"cve":"CVE-2025-66038","month":"2026-03","title":"OpenSC: `sc_compacttlv_find_tag` can return out-of-bounds pointers","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":3.9,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-66038"},{"cve":"CVE-2025-66215","month":"2026-03","title":"OpenSC: Stack-buffer-overflow WRITE in card-oberthur","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":3.8,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-66215"},{"cve":"CVE-2025-67030","month":"2026-03","title":"Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-67030"},{"cve":"CVE-2025-69644","month":"2026-03","title":"An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and produce endless output until manually interrupted. This issue affects versions prior to the upstream fix and allows a local attacker to cause excessive resource consumption by supplying a malicious input file.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69644"},{"cve":"CVE-2025-69645","month":"2026-03","title":"Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the handling of DWARF compilation units can result in an invalid offset_size value being used inside byte_get_little_endian, leading to an abort (SIGABRT). The issue was observed in binutils 2.44. A local attacker can trigger the crash by supplying a malicious input file.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69645"},{"cve":"CVE-2025-69646","month":"2026-03","title":"Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data. A logic error in the handling of the debug_rnglists header can cause objdump to repeatedly print the same warning message and fail to terminate, resulting in an unbounded logging loop until the process is interrupted. The issue was observed in binutils 2.44. A local attacker can exploit this vulnerability by supplying a malicious input file, leading to excessive CPU and I/O usage and preventing completion of the objdump analysis.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69646"},{"cve":"CVE-2025-69647","month":"2026-03","title":"GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data. A logic flaw in the DWARF parsing code can cause readelf to repeatedly print the same table output without making forward progress, resulting in an unbounded output loop that never terminates unless externally interrupted. A local attacker can trigger this behavior by supplying a malicious input file, causing excessive CPU and I/O usage and preventing readelf from completing its analysis.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69647"},{"cve":"CVE-2025-69648","month":"2026-03","title":"GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw in the DWARF parsing path causes readelf to repeatedly print the same warning message without making forward progress, resulting in a non-terminating output loop that requires manual interruption. No evidence of memory corruption or code execution was observed.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69648"},{"cve":"CVE-2025-69649","month":"2026-03","title":"GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an invalid or null section pointer may be passed into display_relocations(), resulting in a segmentation fault (SIGSEGV) and abrupt termination. No evidence of memory corruption beyond the null pointer dereference, nor any possibility of code execution, was observed.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69649"},{"cve":"CVE-2025-69650","month":"2026-03","title":"GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dump_relocations may return early without initializing the all_relocations array. As a result, process_got_section_contents() may pass an uninitialized r_symbol pointer to free(), leading to a double free and terminating the program with SIGABRT. No evidence of exploitable memory corruption or code execution was observed; the impact is limited to denial of service.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69650"},{"cve":"CVE-2025-69651","month":"2026-03","title":"GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data. If dump_relocations returns early due to parsing errors, the internal all_relocations array may remain partially uninitialized. Later, process_got_section_contents() may attempt to free an invalid r_symbol pointer, triggering memory corruption checks in glibc and causing the program to terminate with SIGABRT. No evidence of further memory corruption or code execution was observed; the impact is limited to denial of service.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69651"},{"cve":"CVE-2025-69652","month":"2026-03","title":"GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-460"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69652"},{"cve":"CVE-2025-69720","month":"2026-03","title":"The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-69720"},{"cve":"CVE-2025-70888","month":"2026-03","title":"An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cwe":["CWE-269"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-70888"},{"cve":"CVE-2025-71238","month":"2026-03","title":"scsi: qla2xxx: Fix bsg_done() causing double free","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71238"},{"cve":"CVE-2025-71239","month":"2026-03","title":"audit: add fchmodat2() to change attributes class","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71239"},{"cve":"CVE-2025-71265","month":"2026-03","title":"fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71265"},{"cve":"CVE-2025-71266","month":"2026-03","title":"fs: ntfs3: check return value of indx_find to avoid infinite loop","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71266"},{"cve":"CVE-2025-71267","month":"2026-03","title":"fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71267"},{"cve":"CVE-2025-71269","month":"2026-03","title":"btrfs: do not free data reservation in fallback from inline due to -ENOSPC","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71269"},{"cve":"CVE-2026-0031","month":"2026-03","title":"In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","family":"Open Source Software","component":"Mariner","cna":"google_android","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0031"},{"cve":"CVE-2026-0032","month":"2026-03","title":"In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","family":"Open Source Software","component":"Mariner","cna":"google_android","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0032"},{"cve":"CVE-2026-0819","month":"2026-03","title":"Stack buffer overflow in PKCS7 SignedData encoding with custom signed attributes","family":"Open Source Software","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0819"},{"cve":"CVE-2026-0964","month":"2026-03","title":"Libssh: improper sanitation of paths received from scp servers","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0964"},{"cve":"CVE-2026-0965","month":"2026-03","title":"Libssh: libssh: denial of service via improper configuration file handling","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0965"},{"cve":"CVE-2026-0966","month":"2026-03","title":"Libssh: buffer underflow in ssh_get_hexa() on invalid input","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-124"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0966"},{"cve":"CVE-2026-0967","month":"2026-03","title":"Libssh: libssh: denial of service via inefficient regular expression processing","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":2.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L","cwe":["CWE-1333"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0967"},{"cve":"CVE-2026-0968","month":"2026-03","title":"Libssh: libssh: denial of service due to malformed sftp message","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0968"},{"cve":"CVE-2026-1005","month":"2026-03","title":"Integer underflow leads to out-of-bounds access in sniffer AES-GCM/CCM/ARIA-GCM decrypt path","family":"Open Source Software","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-1005"},{"cve":"CVE-2026-1519","month":"2026-03","title":"Excessive NSEC3 iterations cause high CPU load during insecure delegation validation","family":"Open Source Software","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-606"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-1519"},{"cve":"CVE-2026-1965","month":"2026-03","title":"bad reuse of HTTP Negotiate connection","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-1965"},{"cve":"CVE-2026-2100","month":"2026-03","title":"P11-kit: p11-kit: null dereference via c_derivekey with specific null parameters","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-824"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2100"},{"cve":"CVE-2026-21710","month":"2026-03","title":"A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `__proto__` and the application accesses `req.headersDistinct`.\n\nWhen this occurs, `dest[\"__proto__\"]` resolves to `Object.prototype` rather than `undefined`, causing `.push()` to be called on a non-array. This exception is thrown synchronously inside a property getter and cannot be intercepted by `error` event listeners, meaning it cannot be handled without wrapping every `req.headersDistinct` access in a `try/catch`.\n\n* This vulnerability affects all Node.js HTTP servers on **20.x, 22.x, 24.x, and v25.x**","family":"Open Source Software","component":"Mariner","cna":"hackerone","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21710"},{"cve":"CVE-2026-21711","month":"2026-03","title":"A flaw in Node.js Permission Model network enforcement leaves Unix Domain Socket (UDS) server operations without the required permission checks, while all comparable network paths correctly enforce them.\n\nAs a result, code running under `--permission` without `--allow-net` can create and expose local IPC endpoints, allowing communication with other processes on the same host outside of the intended network restriction boundary.\n\nThis vulnerability affects Node.js **25.x** processes using the Permission Model where `--allow-net` is intentionally omitted to restrict network access. Note that `--allow-net` is currently an experimental feature.","family":"Open Source Software","component":"Mariner","cna":"hackerone","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21711"},{"cve":"CVE-2026-21712","month":"2026-03","title":"A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized domain name (IDN) containing invalid characters, crashing the Node.js process.","family":"Open Source Software","component":"Mariner","cna":"hackerone","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21712"},{"cve":"CVE-2026-21713","month":"2026-03","title":"A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior could be exploited as a timing oracle to infer HMAC values.\n\nNode.js already provides timing-safe comparison primitives used elsewhere in the codebase, indicating this is an oversight rather than an intentional design decision.\n\nThis vulnerability affects **20.x, 22.x, 24.x, and 25.x**.","family":"Open Source Software","component":"Mariner","cna":"hackerone","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-208"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21713"},{"cve":"CVE-2026-21714","month":"2026-03","title":"A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream 0 (connection-level) that cause the flow control window to exceed the maximum value of 2\u00b3\u00b9-1. The server correctly sends a GOAWAY frame, but the Http2Session object is never cleaned up.\n\nThis vulnerability affects HTTP2 users on Node.js 20, 22, 24 and 25.","family":"Open Source Software","component":"Mariner","cna":"hackerone","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21714"},{"cve":"CVE-2026-21715","month":"2026-03","title":"A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync.native()` without the required read permission checks, while all comparable filesystem functions correctly enforce them.\n\nAs a result, code running under `--permission` with restricted `--allow-fs-read` can still use `fs.realpathSync.native()` to check file existence, resolve symlink targets, and enumerate filesystem paths outside of permitted directories.\n\nThis vulnerability affects **20.x, 22.x, 24.x, and 25.x** processes using the Permission Model where `--allow-fs-read` is intentionally restricted.","family":"Open Source Software","component":"Mariner","cna":"hackerone","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-732"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21715"},{"cve":"CVE-2026-21716","month":"2026-03","title":"An incomplete fix for CVE-2024-36137 leaves `FileHandle.chmod()` and `FileHandle.chown()` in the promises API without the required permission checks, while their callback-based equivalents (`fs.fchmod()`, `fs.fchown()`) were correctly patched.\n\nAs a result, code running under `--permission` with restricted `--allow-fs-write` can still use promise-based `FileHandle` methods to modify file permissions and ownership on already-open file descriptors, bypassing the intended write restrictions.\n\nThis vulnerability affects **20.x, 22.x, 24.x, and 25.x** processes using the Permission Model where `--allow-fs-write` is intentionally restricted.","family":"Open Source Software","component":"Mariner","cna":"hackerone","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21716"},{"cve":"CVE-2026-21717","month":"2026-03","title":"A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable. By crafting a request that causes many such collisions in V8's internal string table, an attacker can significantly degrade performance of the Node.js process.\n\nThe most common trigger is any endpoint that calls `JSON.parse()` on attacker-controlled input, as JSON parsing automatically internalizes short strings into the affected hash table.\n\nThis vulnerability affects **20.x, 22.x, 24.x, and 25.x**.","family":"Open Source Software","component":"Mariner","cna":"hackerone","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-328"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21717"},{"cve":"CVE-2026-2297","month":"2026-03","title":"SourcelessFileLoader does not use io.open_code()","family":"Open Source Software","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-668"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2297"},{"cve":"CVE-2026-23231","month":"2026-03","title":"netfilter: nf_tables: fix use-after-free in nf_tables_addchain()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23231"},{"cve":"CVE-2026-23236","month":"2026-03","title":"fbdev: smscufx: properly copy ioctl memory to kernelspace","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23236"},{"cve":"CVE-2026-23237","month":"2026-03","title":"platform/x86: classmate-laptop: Add missing NULL pointer checks","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23237"},{"cve":"CVE-2026-23238","month":"2026-03","title":"romfs: check sb_set_blocksize() return value","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23238"},{"cve":"CVE-2026-23240","month":"2026-03","title":"tls: Fix race condition in tls_sw_cancel_work_tx()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23240"},{"cve":"CVE-2026-23241","month":"2026-03","title":"audit: add missing syscalls to read class","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23241"},{"cve":"CVE-2026-23242","month":"2026-03","title":"RDMA/siw: Fix potential NULL pointer dereference in header processing","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23242"},{"cve":"CVE-2026-23243","month":"2026-03","title":"RDMA/umad: Reject negative data_len in ib_umad_write","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23243"},{"cve":"CVE-2026-23244","month":"2026-03","title":"nvme: fix memory allocation in nvme_pr_read_keys()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23244"},{"cve":"CVE-2026-23245","month":"2026-03","title":"net/sched: act_gate: snapshot parameters with RCU on replace","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23245"},{"cve":"CVE-2026-23246","month":"2026-03","title":"wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23246"},{"cve":"CVE-2026-23247","month":"2026-03","title":"tcp: secure_seq: add back ports to TS offset","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23247"},{"cve":"CVE-2026-23248","month":"2026-03","title":"perf/core: Fix refcount bug and potential UAF in perf_mmap","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23248"},{"cve":"CVE-2026-23253","month":"2026-03","title":"media: dvb-core: fix wrong reinitialization of ringbuffer on reopen","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23253"},{"cve":"CVE-2026-23255","month":"2026-03","title":"net: add proper RCU protection to /proc/net/ptype","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23255"},{"cve":"CVE-2026-23259","month":"2026-03","title":"io_uring/rw: free potentially allocated iovec on cache put failure","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23259"},{"cve":"CVE-2026-23266","month":"2026-03","title":"fbdev: rivafb: fix divide error in nv3_arb()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23266"},{"cve":"CVE-2026-23268","month":"2026-03","title":"apparmor: fix unprivileged local user can do privileged policy management","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23268"},{"cve":"CVE-2026-23269","month":"2026-03","title":"apparmor: validate DFA start states are in bounds in unpack_pdb","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23269"},{"cve":"CVE-2026-23271","month":"2026-03","title":"perf: Fix __perf_event_overflow() vs perf_remove_from_context() race","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23271"},{"cve":"CVE-2026-23272","month":"2026-03","title":"netfilter: nf_tables: unconditionally bump set->nelems before insertion","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23272"},{"cve":"CVE-2026-23274","month":"2026-03","title":"netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23274"},{"cve":"CVE-2026-23276","month":"2026-03","title":"net: add xmit recursion limit to tunnel xmit functions","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23276"},{"cve":"CVE-2026-23277","month":"2026-03","title":"net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23277"},{"cve":"CVE-2026-23278","month":"2026-03","title":"netfilter: nf_tables: always walk all pending catchall elements","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23278"},{"cve":"CVE-2026-23279","month":"2026-03","title":"wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23279"},{"cve":"CVE-2026-23281","month":"2026-03","title":"wifi: libertas: fix use-after-free in lbs_free_adapter()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23281"},{"cve":"CVE-2026-23285","month":"2026-03","title":"drbd: fix null-pointer dereference on local read error","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23285"},{"cve":"CVE-2026-23286","month":"2026-03","title":"atm: lec: fix null-ptr-deref in lec_arp_clear_vccs","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23286"},{"cve":"CVE-2026-23289","month":"2026-03","title":"IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23289"},{"cve":"CVE-2026-23290","month":"2026-03","title":"net: usb: pegasus: validate USB endpoints","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23290"},{"cve":"CVE-2026-23292","month":"2026-03","title":"scsi: target: Fix recursive locking in __configfs_open_file()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23292"},{"cve":"CVE-2026-23293","month":"2026-03","title":"net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23293"},{"cve":"CVE-2026-23296","month":"2026-03","title":"scsi: core: Fix refcount leak for tagset_refcnt","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23296"},{"cve":"CVE-2026-23298","month":"2026-03","title":"can: ucan: Fix infinite loop from zero-length messages","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23298"},{"cve":"CVE-2026-23300","month":"2026-03","title":"net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23300"},{"cve":"CVE-2026-23302","month":"2026-03","title":"net: annotate data-races around sk->sk_{data_ready,write_space}","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23302"},{"cve":"CVE-2026-23303","month":"2026-03","title":"smb: client: Don't log plaintext credentials in cifs_set_cifscreds","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23303"},{"cve":"CVE-2026-23304","month":"2026-03","title":"ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23304"},{"cve":"CVE-2026-23306","month":"2026-03","title":"scsi: pm8001: Fix use-after-free in pm8001_queue_command()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23306"},{"cve":"CVE-2026-23307","month":"2026-03","title":"can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23307"},{"cve":"CVE-2026-23310","month":"2026-03","title":"bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23310"},{"cve":"CVE-2026-23312","month":"2026-03","title":"net: usb: kaweth: validate USB endpoints","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23312"},{"cve":"CVE-2026-23313","month":"2026-03","title":"i40e: Fix preempt count leak in napi poll tracepoint","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23313"},{"cve":"CVE-2026-23315","month":"2026-03","title":"wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23315"},{"cve":"CVE-2026-23317","month":"2026-03","title":"drm/vmwgfx: Return the correct value in vmw_translate_ptr functions","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23317"},{"cve":"CVE-2026-23318","month":"2026-03","title":"ALSA: usb-audio: Use correct version for UAC3 header validation","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23318"},{"cve":"CVE-2026-23319","month":"2026-03","title":"bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23319"},{"cve":"CVE-2026-23320","month":"2026-03","title":"usb: gadget: f_ncm: align net_device lifecycle with bind/unbind","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23320"},{"cve":"CVE-2026-23324","month":"2026-03","title":"can: usb: etas_es58x: correctly anchor the urb in the read bulk callback","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23324"},{"cve":"CVE-2026-23330","month":"2026-03","title":"nfc: nci: complete pending data exchange on device close","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23330"},{"cve":"CVE-2026-23333","month":"2026-03","title":"netfilter: nft_set_rbtree: validate open interval overlap","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23333"},{"cve":"CVE-2026-23335","month":"2026-03","title":"RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23335"},{"cve":"CVE-2026-23336","month":"2026-03","title":"wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23336"},{"cve":"CVE-2026-23339","month":"2026-03","title":"nfc: nci: free skb on nci_transceive early error paths","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23339"},{"cve":"CVE-2026-23340","month":"2026-03","title":"net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23340"},{"cve":"CVE-2026-23343","month":"2026-03","title":"xdp: produce a warning when calculated tailroom is negative","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23343"},{"cve":"CVE-2026-23346","month":"2026-03","title":"arm64: io: Extract user memory type in ioremap_prot()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23346"},{"cve":"CVE-2026-23348","month":"2026-03","title":"cxl: Fix race of nvdimm_bus object when creating nvdimm objects","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23348"},{"cve":"CVE-2026-23351","month":"2026-03","title":"netfilter: nft_set_pipapo: split gc into unlink and reclaim phase","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23351"},{"cve":"CVE-2026-23352","month":"2026-03","title":"x86/efi: defer freeing of boot services memory","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23352"},{"cve":"CVE-2026-23356","month":"2026-03","title":"drbd: fix \"LOGIC BUG\" in drbd_al_begin_io_nonblock()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23356"},{"cve":"CVE-2026-23357","month":"2026-03","title":"can: mcp251x: fix deadlock in error path of mcp251x_open","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23357"},{"cve":"CVE-2026-23359","month":"2026-03","title":"bpf: Fix stack-out-of-bounds write in devmap","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23359"},{"cve":"CVE-2026-23360","month":"2026-03","title":"nvme: fix admin queue leak on controller reset","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23360"},{"cve":"CVE-2026-23361","month":"2026-03","title":"PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23361"},{"cve":"CVE-2026-23362","month":"2026-03","title":"can: bcm: fix locking for bcm_op runtime updates","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23362"},{"cve":"CVE-2026-23365","month":"2026-03","title":"net: usb: kalmia: validate USB endpoints","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23365"},{"cve":"CVE-2026-23367","month":"2026-03","title":"wifi: radiotap: reject radiotap with unknown bits","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23367"},{"cve":"CVE-2026-23368","month":"2026-03","title":"net: phy: register phy led_triggers during probe to avoid AB-BA deadlock","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23368"},{"cve":"CVE-2026-23370","month":"2026-03","title":"platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23370"},{"cve":"CVE-2026-23371","month":"2026-03","title":"sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23371"},{"cve":"CVE-2026-23374","month":"2026-03","title":"blktrace: fix __this_cpu_read/write in preemptible context","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23374"},{"cve":"CVE-2026-23377","month":"2026-03","title":"ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23377"},{"cve":"CVE-2026-23379","month":"2026-03","title":"net/sched: ets: fix divide by zero in the offload path","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23379"},{"cve":"CVE-2026-23381","month":"2026-03","title":"net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23381"},{"cve":"CVE-2026-23382","month":"2026-03","title":"HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23382"},{"cve":"CVE-2026-23383","month":"2026-03","title":"bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23383"},{"cve":"CVE-2026-23385","month":"2026-03","title":"netfilter: nf_tables: clone set on flush only","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23385"},{"cve":"CVE-2026-23388","month":"2026-03","title":"Squashfs: check metadata block offset is within range","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23388"},{"cve":"CVE-2026-23389","month":"2026-03","title":"ice: Fix memory leak in ice_set_ringparam()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23389"},{"cve":"CVE-2026-23390","month":"2026-03","title":"tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23390"},{"cve":"CVE-2026-23391","month":"2026-03","title":"netfilter: xt_CT: drop pending enqueued packets on template removal","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23391"},{"cve":"CVE-2026-23392","month":"2026-03","title":"netfilter: nf_tables: release flowtable after rcu grace period on error","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23392"},{"cve":"CVE-2026-23394","month":"2026-03","title":"af_unix: Give up GC if MSG_PEEK intervened.","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23394"},{"cve":"CVE-2026-23395","month":"2026-03","title":"Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23395"},{"cve":"CVE-2026-23396","month":"2026-03","title":"wifi: mac80211: fix NULL deref in mesh_matches_local()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23396"},{"cve":"CVE-2026-23397","month":"2026-03","title":"nfnetlink_osf: validate individual option lengths in fingerprints","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23397"},{"cve":"CVE-2026-23398","month":"2026-03","title":"icmp: fix NULL pointer dereference in icmp_tag_validation()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23398"},{"cve":"CVE-2026-23399","month":"2026-03","title":"nf_tables: nft_dynset: fix possible stateful expression memleak in error path","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23399"},{"cve":"CVE-2026-2369","month":"2026-03","title":"Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2369"},{"cve":"CVE-2026-23865","month":"2026-03","title":"An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.","family":"Open Source Software","component":"Mariner","cna":"Meta","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23865"},{"cve":"CVE-2026-23868","month":"2026-03","title":"Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.","family":"Mariner","component":"Mariner","cna":"Meta","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23868"},{"cve":"CVE-2026-23941","month":"2026-03","title":"Request smuggling via first-wins Content-Length parsing in inets httpd","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23941"},{"cve":"CVE-2026-23942","month":"2026-03","title":"SFTP root escape via component-agnostic prefix check in ssh_sftpd","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23942"},{"cve":"CVE-2026-23943","month":"2026-03","title":"Pre-auth SSH DoS via unbounded zlib inflate","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-409"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23943"},{"cve":"CVE-2026-2436","month":"2026-03","title":"Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-825"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2436"},{"cve":"CVE-2026-25075","month":"2026-03","title":"strongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow","family":"Open Source Software","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25075"},{"cve":"CVE-2026-25645","month":"2026-03","title":"Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cwe":["CWE-377"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25645"},{"cve":"CVE-2026-25679","month":"2026-03","title":"Incorrect parsing of IPv6 host literals in net/url","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25679"},{"cve":"CVE-2026-26017","month":"2026-03","title":"CoreDNS ACL Bypass","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26017"},{"cve":"CVE-2026-26018","month":"2026-03","title":"CoreDNS Loop Detection Denial of Service Vulnerability","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-337"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26018"},{"cve":"CVE-2026-2645","month":"2026-03","title":"Acceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2","family":"Open Source Software","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-358"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2645"},{"cve":"CVE-2026-2646","month":"2026-03","title":"Heap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function","family":"Open Source Software","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2646"},{"cve":"CVE-2026-2673","month":"2026-03","title":"OpenSSL TLS 1.3 server may choose unexpected key agreement group","family":"Open Source Software","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-757"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2673"},{"cve":"CVE-2026-27135","month":"2026-03","title":"nghttp2 Denial of service: Assertion failure due to the missing state validation","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27135"},{"cve":"CVE-2026-27137","month":"2026-03","title":"Incorrect enforcement of email constraints in crypto/x509","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27137"},{"cve":"CVE-2026-27138","month":"2026-03","title":"Panic in name constraint checking for malformed certificates in crypto/x509","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27138"},{"cve":"CVE-2026-27139","month":"2026-03","title":"FileInfo can escape from a Root in os","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27139"},{"cve":"CVE-2026-27142","month":"2026-03","title":"URLs in meta content attribute actions are not escaped in html/template","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27142"},{"cve":"CVE-2026-27448","month":"2026-03","title":"pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-636"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27448"},{"cve":"CVE-2026-27459","month":"2026-03","title":"pyOpenSSL DTLS cookie callback buffer overflow","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-120"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27459"},{"cve":"CVE-2026-27651","month":"2026-03","title":"NGINX ngx_mail_auth_http_module vulnerability","family":"Open Source Software","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27651"},{"cve":"CVE-2026-27654","month":"2026-03","title":"NGINX ngx_http_dav_module vulnerability","family":"Open Source Software","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27654"},{"cve":"CVE-2026-27784","month":"2026-03","title":"NGINX ngx_http_mp4_module vulnerability","family":"Open Source Software","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27784"},{"cve":"CVE-2026-28753","month":"2026-03","title":"NGINX ngx_mail_proxy_module vulnerability","family":"Open Source Software","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Moderate","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-93"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-28753"},{"cve":"CVE-2026-28755","month":"2026-03","title":"NGINX ngx_stream_ssl_module vulnerability","family":"Open Source Software","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-28755"},{"cve":"CVE-2026-29111","month":"2026-03","title":"systemd: Local unprivileged user can trigger an assert","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-269"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-29111"},{"cve":"CVE-2026-29785","month":"2026-03","title":"NATS Server panic via malicious compression on leafnode port","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-29785"},{"cve":"CVE-2026-29786","month":"2026-03","title":"node-tar: Hardlink Path Traversal via Drive-Relative Linkpath","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-29786"},{"cve":"CVE-2026-30922","month":"2026-03","title":"pyasn1 Vulnerable to Denial of Service via Unbounded Recursion","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-30922"},{"cve":"CVE-2026-3099","month":"2026-03","title":"Libsoup: libsoup: authentication bypass via digest authentication replay attack","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L","cwe":["CWE-323"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3099"},{"cve":"CVE-2026-3104","month":"2026-03","title":"Memory leak in code preparing DNSSEC proofs of non-existence","family":"Open Source Software","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-772"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3104"},{"cve":"CVE-2026-3119","month":"2026-03","title":"Authenticated query containing a TKEY record may cause named to terminate unexpectedly","family":"Open Source Software","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3119"},{"cve":"CVE-2026-31788","month":"2026-03","title":"xen/privcmd: restrict usage in unprivileged domU","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31788"},{"cve":"CVE-2026-31802","month":"2026-03","title":"node-tar Symlink Path Traversal via Drive-Relative Linkpath","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31802"},{"cve":"CVE-2026-32241","month":"2026-03","title":"Flannel vulnerable to cross-node remote code execution via extension backend BackendData injection","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32241"},{"cve":"CVE-2026-32249","month":"2026-03","title":"NFA regex engine NULL pointer dereference affects Vim < 9.2.0137","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32249"},{"cve":"CVE-2026-32287","month":"2026-03","title":"Infinite loop in github.com/antchfx/xpath","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32287"},{"cve":"CVE-2026-3229","month":"2026-03","title":"Integer Overflow in Certificate Chain Allocation","family":"Open Source Software","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3229"},{"cve":"CVE-2026-3230","month":"2026-03","title":"Improper key_share validation in TLS 1.3 HelloRetryRequest","family":"Open Source Software","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3230"},{"cve":"CVE-2026-32597","month":"2026-03","title":"PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-345"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32597"},{"cve":"CVE-2026-32647","month":"2026-03","title":"NGINX ngx_http_mp4_module vulnerability","family":"Open Source Software","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32647"},{"cve":"CVE-2026-32748","month":"2026-03","title":"Squid has Denial of Service in ICP Response handling","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-413"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32748"},{"cve":"CVE-2026-32766","month":"2026-03","title":"astral-tokio-tar insufficiently validates PAX extensions during extraction","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-436"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32766"},{"cve":"CVE-2026-32775","month":"2026-03","title":"libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32775"},{"cve":"CVE-2026-32776","month":"2026-03","title":"libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32776"},{"cve":"CVE-2026-32777","month":"2026-03","title":"libexpat before 2.7.5 allows an infinite loop while parsing DTD content.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32777"},{"cve":"CVE-2026-32778","month":"2026-03","title":"libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32778"},{"cve":"CVE-2026-33055","month":"2026-03","title":"tar-rs incorrectly ignores PAX size headers if header size is nonzero","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33055"},{"cve":"CVE-2026-33056","month":"2026-03","title":"tar-rs: unpack_in can chmod arbitrary directories by following symlinks","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-61"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33056"},{"cve":"CVE-2026-33186","month":"2026-03","title":"gRPC-Go has an authorization bypass via missing leading slash in :path","family":"Mariner","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33186"},{"cve":"CVE-2026-33216","month":"2026-03","title":"NATS has MQTT plaintext password disclosure","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cwe":["CWE-256"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33216"},{"cve":"CVE-2026-33343","month":"2026-03","title":"etcd: Nested etcd transactions bypass RBAC authorization checks","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33343"},{"cve":"CVE-2026-3336","month":"2026-03","title":"PKCS7_verify Certificate Chain Validation Bypass in AWS-LC","family":"Mariner","component":"Mariner","cna":"AMZN","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3336"},{"cve":"CVE-2026-3338","month":"2026-03","title":"PKCS7_verify Signature Validation Bypass in AWS-LC","family":"Mariner","component":"Mariner","cna":"AMZN","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3338"},{"cve":"CVE-2026-33412","month":"2026-03","title":"Vim affected by Command injection via newline in glob()","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33412"},{"cve":"CVE-2026-33413","month":"2026-03","title":"etcd: Authorization bypasses in multiple APIs","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33413"},{"cve":"CVE-2026-33416","month":"2026-03","title":"LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33416"},{"cve":"CVE-2026-33515","month":"2026-03","title":"Squid has issues in ICP message handling","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33515"},{"cve":"CVE-2026-33526","month":"2026-03","title":"Squid vulnerable to Denial of Service in ICP Request handling","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33526"},{"cve":"CVE-2026-33542","month":"2026-03","title":"Incus does not verify combined fingerprint when downloading images from simplestreams servers","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33542"},{"cve":"CVE-2026-33554","month":"2026-03","title":"ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Three subcommands were found to have exploitable buffer overflows on response messages. They are: \"ipmi-oem dell get-last-post-code - get the last POST code and string describing the error on some Dell servers,\" \"ipmi-oem supermicro extra-firmware-info - get extra firmware info on Supermic","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33554"},{"cve":"CVE-2026-33636","month":"2026-03","title":"LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33636"},{"cve":"CVE-2026-33671","month":"2026-03","title":"Picomatch has a ReDoS vulnerability via extglob quantifiers","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-1333"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33671"},{"cve":"CVE-2026-33672","month":"2026-03","title":"Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-1321"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33672"},{"cve":"CVE-2026-33750","month":"2026-03","title":"brace-expansion: Zero-step sequence causes process hang and memory exhaustion","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33750"},{"cve":"CVE-2026-3381","month":"2026-03","title":"Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib","family":"Open Source Software","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-1395"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3381"},{"cve":"CVE-2026-33936","month":"2026-03","title":"python-ecdsa: Denial of Service via improper DER length validation in crafted private keys","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33936"},{"cve":"CVE-2026-34043","month":"2026-03","title":"Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34043"},{"cve":"CVE-2026-34073","month":"2026-03","title":"cryptography has incomplete DNS name constraint enforcement on peer names","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34073"},{"cve":"CVE-2026-34085","month":"2026-03","title":"fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, and potentially a crash or code execution. This is in FcFontCapabilities in fcfreetype.c.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-193"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34085"},{"cve":"CVE-2026-34353","month":"2026-03","title":"In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34353"},{"cve":"CVE-2026-34714","month":"2026-03","title":"Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":9.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L/E:U","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34714"},{"cve":"CVE-2026-3479","month":"2026-03","title":"pkgutil.get_data() does not enforce documented restrictions","family":"Open Source Software","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3479"},{"cve":"CVE-2026-3494","month":"2026-03","title":"MariaDB Server Audit Plugin Comment Handling Bypass","family":"Open Source Software","component":"Mariner","cna":"AMZN","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-778"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3494"},{"cve":"CVE-2026-3503","month":"2026-03","title":"Fault injection attack with ML-DSA and ML-KEM on ARM","family":"Open Source Software","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-335"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3503"},{"cve":"CVE-2026-3579","month":"2026-03","title":"Non-constant time multiplication subroutine __muldi3 on RISC-V RV32I","family":"Open Source Software","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-203"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3579"},{"cve":"CVE-2026-3580","month":"2026-03","title":"Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V","family":"Open Source Software","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-203"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3580"},{"cve":"CVE-2026-3591","month":"2026-03","title":"A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass","family":"Open Source Software","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-562"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3591"},{"cve":"CVE-2026-3632","month":"2026-03","title":"Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":3.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L","cwe":["CWE-1286"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3632"},{"cve":"CVE-2026-3633","month":"2026-03","title":"Libsoup: libsoup: header and http request injection via crlf injection","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":3.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L/E:P","cwe":["CWE-93"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3633"},{"cve":"CVE-2026-3634","month":"2026-03","title":"Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":3.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L","cwe":["CWE-93"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3634"},{"cve":"CVE-2026-3644","month":"2026-03","title":"Incomplete control character validation in http.cookies","family":"Open Source Software","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3644"},{"cve":"CVE-2026-3713","month":"2026-03","title":"pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow","family":"Open Source Software","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3713"},{"cve":"CVE-2026-3731","month":"2026-03","title":"libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds","family":"Open Source Software","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3731"},{"cve":"CVE-2026-3783","month":"2026-03","title":"token leak with redirect and netrc","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3783"},{"cve":"CVE-2026-3784","month":"2026-03","title":"wrong proxy connection reuse with credentials","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3784"},{"cve":"CVE-2026-3849","month":"2026-03","title":"Buffer Overflow in HPKE via Oversized ECH Config","family":"Open Source Software","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3849"},{"cve":"CVE-2026-4046","month":"2026-03","title":"iconv crash due to assertion failure with untrusted input","family":"Open Source Software","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4046"},{"cve":"CVE-2026-4105","month":"2026-03","title":"Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4105"},{"cve":"CVE-2026-4111","month":"2026-03","title":"Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4111"},{"cve":"CVE-2026-4159","month":"2026-03","title":"wc_PKCS7_DecodeEnvelopedData 1 byte out-of-bounds read","family":"Open Source Software","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4159"},{"cve":"CVE-2026-4176","month":"2026-03","title":"Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib","family":"Open Source Software","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-1395"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4176"},{"cve":"CVE-2026-4224","month":"2026-03","title":"Stack overflow parsing XML with deeply nested DTD content models","family":"Open Source Software","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4224"},{"cve":"CVE-2026-4395","month":"2026-03","title":"Heap-based buffer overflow in wc_ecc_import_x963_ex KCAPI path","family":"Open Source Software","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4395"},{"cve":"CVE-2026-4424","month":"2026-03","title":"Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4424"},{"cve":"CVE-2026-4426","month":"2026-03","title":"Libarchive: libarchive: denial of service via malformed iso file processing","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-1335"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4426"},{"cve":"CVE-2026-4437","month":"2026-03","title":"gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response","family":"Open Source Software","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4437"},{"cve":"CVE-2026-4438","month":"2026-03","title":"gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames","family":"Open Source Software","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4438"},{"cve":"CVE-2026-4519","month":"2026-03","title":"webbrowser.open() allows leading dashes in URLs","family":"Open Source Software","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4519"},{"cve":"CVE-2026-4645","month":"2026-03","title":"Github.com/antchfx/xpath: xpath: denial of service via crafted boolean xpath expressions","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4645"},{"cve":"CVE-2026-4647","month":"2026-03","title":"Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4647"},{"cve":"CVE-2026-4746","month":"2026-03","title":"Heap Buffer Over-Write Vulenrabilty in timeplus-io/proton","family":"Open Source Software","component":"Mariner","cna":"GovTech CSG","label":"(none)","labels":[],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4746"},{"cve":"CVE-2026-4775","month":"2026-03","title":"Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4775"},{"cve":"CVE-2026-4833","month":"2026-03","title":"Orc discount Markdown markdown.c compile recursion","family":"Open Source Software","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Moderate","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4833"},{"cve":"CVE-2026-4897","month":"2026-03","title":"Polkit: polkit: denial of service via unbounded input processing through standard input","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4897"},{"cve":"CVE-2026-4948","month":"2026-03","title":"Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-279"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4948"},{"cve":"CVE-2026-5107","month":"2026-03","title":"FRRouting FRR EVPN Type-2 Route bgp_evpn.c process_type2_route access control","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Low","cvss":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:X/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5107"},{"cve":"CVE-2026-5119","month":"2026-03","title":"Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N","cwe":["CWE-319"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5119"},{"cve":"CVE-2026-5121","month":"2026-03","title":"Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5121"},{"cve":"CVE-2026-5201","month":"2026-03","title":"Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5201"},{"cve":"CVE-2026-0385","month":"2026-03","title":"Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge for Android","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Low","cvss":5.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0385"},{"cve":"CVE-2026-20967","month":"2026-03","title":"System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability","family":"System Center","component":"System Center Operations Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20967"},{"cve":"CVE-2026-21262","month":"2026-03","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-284"],"exploited":false,"disclosed":true,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21262"},{"cve":"CVE-2026-21536","month":"2026-03","title":"Microsoft Devices Pricing Program Remote Code Execution Vulnerability","family":"Device","component":"Microsoft Devices Pricing Program","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-434"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21536"},{"cve":"CVE-2026-23651","month":"2026-03","title":"Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Compute Gallery","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","cwe":["CWE-625"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23651"},{"cve":"CVE-2026-23654","month":"2026-03","title":"GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability","family":"Open Source Software","component":"GitHub Repo: zero-shot-scfoundation","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1395"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23654"},{"cve":"CVE-2026-23656","month":"2026-03","title":"Windows App Installer Spoofing Vulnerability","family":"Windows","component":"Windows App Installer","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-345"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23656"},{"cve":"CVE-2026-23658","month":"2026-03","title":"Azure DevOps: msazure Elevation of Privilege Vulnerability","family":"Azure","component":"Azure DevOps","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-522"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23658"},{"cve":"CVE-2026-23659","month":"2026-03","title":"Azure Data Factory Information Disclosure Vulnerability","family":"Azure","component":"Azure Data Factory","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23659"},{"cve":"CVE-2026-23660","month":"2026-03","title":"Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Portal Windows Admin Center","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23660"},{"cve":"CVE-2026-23661","month":"2026-03","title":"Azure IoT Explorer Information Disclosure Vulnerability","family":"Azure","component":"Azure IoT Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-319"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23661"},{"cve":"CVE-2026-23662","month":"2026-03","title":"Azure IoT Explorer Information Disclosure Vulnerability","family":"Azure","component":"Azure IoT Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-306","CWE-319"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23662"},{"cve":"CVE-2026-23664","month":"2026-03","title":"Azure IoT Explorer Information Disclosure Vulnerability","family":"Azure","component":"Azure IoT Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-923"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23664"},{"cve":"CVE-2026-23665","month":"2026-03","title":"Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Linux Virtual Machines","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23665"},{"cve":"CVE-2026-23667","month":"2026-03","title":"Broadcast DVR Elevation of Privilege Vulnerability","family":"Windows","component":"Broadcast DVR","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23667"},{"cve":"CVE-2026-23668","month":"2026-03","title":"Windows Graphics Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23668"},{"cve":"CVE-2026-23669","month":"2026-03","title":"RPC Runtime Library Remote Code Execution Vulnerability","family":"Windows","component":"RPC Runtime","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23669"},{"cve":"CVE-2026-23671","month":"2026-03","title":"Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bluetooth RFCOM Protocol Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23671"},{"cve":"CVE-2026-23672","month":"2026-03","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23672"},{"cve":"CVE-2026-23673","month":"2026-03","title":"Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23673"},{"cve":"CVE-2026-23674","month":"2026-03","title":"MapUrlToZone Security Feature Bypass Vulnerability","family":"Windows","component":"Windows MapUrlToZone","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-41"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23674"},{"cve":"CVE-2026-24282","month":"2026-03","title":"Push message Routing Service Elevation of Privilege Vulnerability","family":"Windows","component":"Push Message Routing Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24282"},{"cve":"CVE-2026-24283","month":"2026-03","title":"Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows File Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24283"},{"cve":"CVE-2026-24285","month":"2026-03","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24285"},{"cve":"CVE-2026-24287","month":"2026-03","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24287"},{"cve":"CVE-2026-24288","month":"2026-03","title":"Windows Mobile Broadband Driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows Mobile Broadband","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24288"},{"cve":"CVE-2026-24289","month":"2026-03","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24289"},{"cve":"CVE-2026-24290","month":"2026-03","title":"Windows Projected File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Projected File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24290"},{"cve":"CVE-2026-24291","month":"2026-03","title":"Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Accessibility Infrastructure (ATBroker.exe)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-732"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24291"},{"cve":"CVE-2026-24292","month":"2026-03","title":"Windows Connected Devices Platform Service Elevation of Privilege Vulnerability","family":"Windows","component":"Connected Devices Platform Service (Cdpsvc)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24292"},{"cve":"CVE-2026-24293","month":"2026-03","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24293"},{"cve":"CVE-2026-24294","month":"2026-03","title":"Windows SMB Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SMB Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24294"},{"cve":"CVE-2026-24295","month":"2026-03","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24295"},{"cve":"CVE-2026-24296","month":"2026-03","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24296"},{"cve":"CVE-2026-24297","month":"2026-03","title":"Windows Kerberos Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24297"},{"cve":"CVE-2026-24299","month":"2026-03","title":"M365 Copilot Information Disclosure Vulnerability","family":"Apps","component":"M365 Copilot","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24299"},{"cve":"CVE-2026-25165","month":"2026-03","title":"Performance Counters for Windows Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Performance Counters","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25165"},{"cve":"CVE-2026-25166","month":"2026-03","title":"Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability","family":"Developer Tools","component":"Windows System Image Manager","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25166"},{"cve":"CVE-2026-25167","month":"2026-03","title":"Microsoft Brokering File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Brokering File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25167"},{"cve":"CVE-2026-25168","month":"2026-03","title":"Windows Graphics Component Denial of Service Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25168"},{"cve":"CVE-2026-25169","month":"2026-03","title":"Windows Graphics Component Denial of Service Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-369"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25169"},{"cve":"CVE-2026-25170","month":"2026-03","title":"Windows Hyper-V Elevation of Privilege Vulnerability","family":"Windows","component":"Role: Windows Hyper-V","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25170"},{"cve":"CVE-2026-25171","month":"2026-03","title":"Windows Authentication Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Authentication Methods","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25171"},{"cve":"CVE-2026-25172","month":"2026-03","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25172"},{"cve":"CVE-2026-25173","month":"2026-03","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25173"},{"cve":"CVE-2026-25174","month":"2026-03","title":"Windows Extensible File Allocation Table Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Extensible File Allocation","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25174"},{"cve":"CVE-2026-25175","month":"2026-03","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25175"},{"cve":"CVE-2026-25176","month":"2026-03","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25176"},{"cve":"CVE-2026-25177","month":"2026-03","title":"Active Directory Domain Services Elevation of Privilege Vulnerability","family":"Windows","component":"Active Directory Domain Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-641"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25177"},{"cve":"CVE-2026-25178","month":"2026-03","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25178"},{"cve":"CVE-2026-25179","month":"2026-03","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25179"},{"cve":"CVE-2026-25180","month":"2026-03","title":"Windows Graphics Component Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25180"},{"cve":"CVE-2026-25181","month":"2026-03","title":"GDI+ Information Disclosure Vulnerability","family":"Windows","component":"Windows GDI+","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25181"},{"cve":"CVE-2026-25185","month":"2026-03","title":"Windows Shell Link Processing Spoofing Vulnerability","family":"Windows","component":"Windows Shell Link Processing","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25185"},{"cve":"CVE-2026-25186","month":"2026-03","title":"Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability","family":"Windows","component":"Windows Accessibility Infrastructure (ATBroker.exe)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25186"},{"cve":"CVE-2026-25187","month":"2026-03","title":"Winlogon Elevation of Privilege Vulnerability","family":"Windows","component":"Winlogon","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25187"},{"cve":"CVE-2026-25188","month":"2026-03","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25188"},{"cve":"CVE-2026-25189","month":"2026-03","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25189"},{"cve":"CVE-2026-25190","month":"2026-03","title":"Windows GDI Remote Code Execution Vulnerability","family":"Windows","component":"Windows GDI","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25190"},{"cve":"CVE-2026-26030","month":"2026-03","title":"GitHub: CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable","family":"Open Source Software","component":"Microsoft Semantic Kernel Python SDK","cna":"GitHub","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-749"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26030"},{"cve":"CVE-2026-26105","month":"2026-03","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26105"},{"cve":"CVE-2026-26106","month":"2026-03","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26106"},{"cve":"CVE-2026-26107","month":"2026-03","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26107"},{"cve":"CVE-2026-26108","month":"2026-03","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26108"},{"cve":"CVE-2026-26109","month":"2026-03","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26109"},{"cve":"CVE-2026-26110","month":"2026-03","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26110"},{"cve":"CVE-2026-26111","month":"2026-03","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26111"},{"cve":"CVE-2026-26112","month":"2026-03","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26112"},{"cve":"CVE-2026-26113","month":"2026-03","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26113"},{"cve":"CVE-2026-26114","month":"2026-03","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26114"},{"cve":"CVE-2026-26115","month":"2026-03","title":"SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26115"},{"cve":"CVE-2026-26116","month":"2026-03","title":"SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26116"},{"cve":"CVE-2026-26117","month":"2026-03","title":"Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Windows Virtual Machine Agent","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-288"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26117"},{"cve":"CVE-2026-26118","month":"2026-03","title":"Azure MCP Server Tools Elevation of Privilege Vulnerability","family":"Azure","component":"Azure MCP Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26118"},{"cve":"CVE-2026-26120","month":"2026-03","title":"Microsoft Bing Tampering Vulnerability","family":"Apps","component":"Microsoft Bing","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Critical","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:P/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26120"},{"cve":"CVE-2026-26121","month":"2026-03","title":"Azure IOT Explorer Spoofing Vulnerability","family":"Azure","component":"Azure IoT Explorer","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26121"},{"cve":"CVE-2026-26122","month":"2026-03","title":"Microsoft ACI Confidential Containers Information Disclosure Vulnerability","family":"Azure","component":"Azure Compute Gallery","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-1188"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26122"},{"cve":"CVE-2026-26123","month":"2026-03","title":"Microsoft Authenticator Information Disclosure Vulnerability","family":"Apps","component":"Microsoft Authenticator","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-939"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26123"},{"cve":"CVE-2026-26124","month":"2026-03","title":"Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Compute Gallery","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","cwe":["CWE-35"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26124"},{"cve":"CVE-2026-26125","month":"2026-03","title":"Payment Orchestrator Service Elevation of Privilege Vulnerability","family":"Other","component":"Payment Orchestrator Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26125"},{"cve":"CVE-2026-26127","month":"2026-03","title":".NET Denial of Service Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":true,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26127"},{"cve":"CVE-2026-26128","month":"2026-03","title":"Windows SMB Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SMB Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26128"},{"cve":"CVE-2026-26130","month":"2026-03","title":"ASP.NET Core Denial of Service Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26130"},{"cve":"CVE-2026-26131","month":"2026-03","title":".NET Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-276"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26131"},{"cve":"CVE-2026-26132","month":"2026-03","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26132"},{"cve":"CVE-2026-26133","month":"2026-03","title":"M365 Copilot Information Disclosure Vulnerability","family":"Microsoft Office","component":"M365 Copilot","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26133"},{"cve":"CVE-2026-26134","month":"2026-03","title":"Microsoft Office Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26134"},{"cve":"CVE-2026-26136","month":"2026-03","title":"Microsoft Copilot Information Disclosure Vulnerability","family":"Other","component":"Microsoft Copilot","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26136"},{"cve":"CVE-2026-26137","month":"2026-03","title":"Microsoft Exchange Elevation of Privilege Vulnerability","family":"Server Software","component":"Microsoft Exchange","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26137"},{"cve":"CVE-2026-26138","month":"2026-03","title":"Microsoft Purview Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Purview","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26138"},{"cve":"CVE-2026-26139","month":"2026-03","title":"Microsoft Purview Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Purview","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26139"},{"cve":"CVE-2026-26141","month":"2026-03","title":"Hybrid Worker Extension (Arc\u2011enabled Windows VMs) Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Arc","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26141"},{"cve":"CVE-2026-26144","month":"2026-03","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26144"},{"cve":"CVE-2026-26148","month":"2026-03","title":"Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Entra ID","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C","cwe":["CWE-454"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26148"},{"cve":"CVE-2026-32169","month":"2026-03","title":"Azure Cloud Shell Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Cloud Shell","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32169"},{"cve":"CVE-2026-32187","month":"2026-03","title":"Microsoft Edge (Chromium-based) Defense in Depth Vulnerability - Rejected","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Defense in Depth","labels":["Defense in Depth"],"severity":"Low","cvss":0.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:N/E:U/RL:O/RC:C","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32187"},{"cve":"CVE-2026-32191","month":"2026-03","title":"Microsoft Bing Images Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Bing Images","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32191"},{"cve":"CVE-2026-32194","month":"2026-03","title":"Microsoft Bing Images Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Bing Images","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32194"},{"cve":"CVE-2026-3536","month":"2026-03","title":"Chromium: CVE-2026-3536 Integer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3536"},{"cve":"CVE-2026-3537","month":"2026-03","title":"Chromium: CVE-2026-3537 Object lifecycle issue in PowerVR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3537"},{"cve":"CVE-2026-3538","month":"2026-03","title":"Chromium: CVE-2026-3538 Integer overflow in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3538"},{"cve":"CVE-2026-3539","month":"2026-03","title":"Chromium: CVE-2026-3539 Object lifecycle issue in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3539"},{"cve":"CVE-2026-3540","month":"2026-03","title":"Chromium: CVE-2026-3540 Inappropriate implementation in WebAudio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3540"},{"cve":"CVE-2026-3541","month":"2026-03","title":"Chromium: CVE-2026-3541 Inappropriate implementation in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3541"},{"cve":"CVE-2026-3542","month":"2026-03","title":"Chromium: CVE-2026-3542 Inappropriate implementation in WebAssembly","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3542"},{"cve":"CVE-2026-3543","month":"2026-03","title":"Chromium: CVE-2026-3543 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3543"},{"cve":"CVE-2026-3544","month":"2026-03","title":"Chromium: CVE-2026-3544 Heap buffer overflow in WebCodecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3544"},{"cve":"CVE-2026-3545","month":"2026-03","title":"Chromium: CVE-2026-3545 Insufficient data validation in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3545"},{"cve":"CVE-2026-3909","month":"2026-03","title":"Chromium: CVE-2026-3909 Out of bounds write in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":true,"kev_added":"2026-03-13","class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3909"},{"cve":"CVE-2026-3910","month":"2026-03","title":"Chromium: CVE-2026-3910 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":true,"kev_added":"2026-03-13","class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3910"},{"cve":"CVE-2026-3913","month":"2026-03","title":"Chromium: CVE-2026-3913 Heap buffer overflow in WebML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3913"},{"cve":"CVE-2026-3914","month":"2026-03","title":"Chromium: CVE-2026-3914 Integer overflow in WebML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3914"},{"cve":"CVE-2026-3915","month":"2026-03","title":"Chromium: CVE-2026-3915 Heap buffer overflow in WebML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3915"},{"cve":"CVE-2026-3916","month":"2026-03","title":"Chromium: CVE-2026-3916 Out of bounds read in Web Speech","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3916"},{"cve":"CVE-2026-3917","month":"2026-03","title":"Chromium: CVE-2026-3917 Use after free in Agents","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3917"},{"cve":"CVE-2026-3918","month":"2026-03","title":"Chromium: CVE-2026-3918 Use after free in WebMCP","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3918"},{"cve":"CVE-2026-3919","month":"2026-03","title":"Chromium: CVE-2026-3919 Use after free in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3919"},{"cve":"CVE-2026-3920","month":"2026-03","title":"Chromium: CVE-2026-3920 Out of bounds memory access in WebML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3920"},{"cve":"CVE-2026-3921","month":"2026-03","title":"Chromium: CVE-2026-3921 Use after free in TextEncoding","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3921"},{"cve":"CVE-2026-3922","month":"2026-03","title":"Chromium: CVE-2026-3922 Use after free in MediaStream","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3922"},{"cve":"CVE-2026-3923","month":"2026-03","title":"Chromium: CVE-2026-3923 Use after free in WebMIDI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3923"},{"cve":"CVE-2026-3924","month":"2026-03","title":"Chromium: CVE-2026-3924 Use after free in WindowDialog","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3924"},{"cve":"CVE-2026-3925","month":"2026-03","title":"Chromium: CVE-2026-3925 Incorrect security UI in LookalikeChecks","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3925"},{"cve":"CVE-2026-3926","month":"2026-03","title":"Chromium: CVE-2026-3926 Out of bounds read in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3926"},{"cve":"CVE-2026-3927","month":"2026-03","title":"Chromium: CVE-2026-3927 Incorrect security UI in PictureInPicture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3927"},{"cve":"CVE-2026-3928","month":"2026-03","title":"Chromium: CVE-2026-3928 Insufficient policy enforcement in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3928"},{"cve":"CVE-2026-3929","month":"2026-03","title":"Chromium: CVE-2026-3929 Side-channel information leakage in ResourceTiming","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3929"},{"cve":"CVE-2026-3930","month":"2026-03","title":"Chromium: CVE-2026-3930 Unsafe navigation in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3930"},{"cve":"CVE-2026-3931","month":"2026-03","title":"Chromium: CVE-2026-3931 Heap buffer overflow in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3931"},{"cve":"CVE-2026-3932","month":"2026-03","title":"Chromium: CVE-2026-3932 Insufficient policy enforcement in PDF","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3932"},{"cve":"CVE-2026-3934","month":"2026-03","title":"Chromium: CVE-2026-3934 Insufficient policy enforcement in ChromeDriver","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3934"},{"cve":"CVE-2026-3935","month":"2026-03","title":"Chromium: CVE-2026-3935 Incorrect security UI in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3935"},{"cve":"CVE-2026-3936","month":"2026-03","title":"Chromium: CVE-2026-3936 Use after free in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3936"},{"cve":"CVE-2026-3937","month":"2026-03","title":"Chromium: CVE-2026-3937 Incorrect security UI in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3937"},{"cve":"CVE-2026-3938","month":"2026-03","title":"Chromium: CVE-2026-3938 Insufficient policy enforcement in Clipboard","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3938"},{"cve":"CVE-2026-3939","month":"2026-03","title":"Chromium: CVE-2026-3939 Use after free in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3939"},{"cve":"CVE-2026-3940","month":"2026-03","title":"Chromium: CVE-2026-3940 Insufficient policy enforcement in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3940"},{"cve":"CVE-2026-3941","month":"2026-03","title":"Chromium: CVE-2026-3941 Insufficient policy enforcement in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3941"},{"cve":"CVE-2026-3942","month":"2026-03","title":"Chromium: CVE-2026-3942 Incorrect security UI in PictureInPicture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3942"},{"cve":"CVE-2026-4440","month":"2026-03","title":"Chromium: CVE-2026-4440 Out of bounds read and write in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4440"},{"cve":"CVE-2026-4441","month":"2026-03","title":"Chromium: CVE-2026-4441 Use after free in Base","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4441"},{"cve":"CVE-2026-4442","month":"2026-03","title":"Chromium: CVE-2026-4442 Heap buffer overflow in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4442"},{"cve":"CVE-2026-4443","month":"2026-03","title":"Chromium: CVE-2026-4443 Heap buffer overflow in WebAudio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4443"},{"cve":"CVE-2026-4444","month":"2026-03","title":"Chromium: CVE-2026-4444 Stack buffer overflow in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4444"},{"cve":"CVE-2026-4445","month":"2026-03","title":"Chromium: CVE-2026-4445 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4445"},{"cve":"CVE-2026-4446","month":"2026-03","title":"Chromium: CVE-2026-4446 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4446"},{"cve":"CVE-2026-4447","month":"2026-03","title":"Chromium: CVE-2026-4447 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4447"},{"cve":"CVE-2026-4448","month":"2026-03","title":"Chromium: CVE-2026-4448 Heap buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4448"},{"cve":"CVE-2026-4449","month":"2026-03","title":"Chromium: CVE-2026-4449 Use after free in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4449"},{"cve":"CVE-2026-4450","month":"2026-03","title":"Chromium: CVE-2026-4450 Out of bounds write in V8","family":"Open Source Software","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4450"},{"cve":"CVE-2026-4451","month":"2026-03","title":"Chromium: CVE-2026-4451 Insufficient validation of untrusted input in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4451"},{"cve":"CVE-2026-4452","month":"2026-03","title":"Chromium: CVE-2026-4452 Integer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4452"},{"cve":"CVE-2026-4453","month":"2026-03","title":"Chromium: CVE-2026-4453 Integer overflow in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4453"},{"cve":"CVE-2026-4454","month":"2026-03","title":"Chromium: CVE-2026-4454 Use after free in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4454"},{"cve":"CVE-2026-4455","month":"2026-03","title":"Chromium: CVE-2026-4455 Heap buffer overflow in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4455"},{"cve":"CVE-2026-4456","month":"2026-03","title":"Chromium: CVE-2026-4456 Use after free in Digital Credentials API","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4456"},{"cve":"CVE-2026-4457","month":"2026-03","title":"Chromium: CVE-2026-4457 Type Confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4457"},{"cve":"CVE-2026-4458","month":"2026-03","title":"Chromium: CVE-2026-4458 Use after free in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4458"},{"cve":"CVE-2026-4459","month":"2026-03","title":"Chromium: CVE-2026-4459 Out of bounds read and write in WebAudio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4459"},{"cve":"CVE-2026-4460","month":"2026-03","title":"Chromium: CVE-2026-4460 Out of bounds read in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4460"},{"cve":"CVE-2026-4461","month":"2026-03","title":"Chromium: CVE-2026-4461 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4461"},{"cve":"CVE-2026-4462","month":"2026-03","title":"Chromium: CVE-2026-4462 Out of bounds read in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4462"},{"cve":"CVE-2026-4463","month":"2026-03","title":"Chromium: CVE-2026-4463 Heap buffer overflow in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4463"},{"cve":"CVE-2026-4464","month":"2026-03","title":"Chromium: CVE-2026-4464 Integer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4464"},{"cve":"CVE-2026-4673","month":"2026-03","title":"Chromium: CVE-2026-4673 Heap buffer overflow in WebAudio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4673"},{"cve":"CVE-2026-4674","month":"2026-03","title":"Chromium: CVE-2026-4674 Out of bounds read in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4674"},{"cve":"CVE-2026-4675","month":"2026-03","title":"Chromium: CVE-2026-4675 Heap buffer overflow in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4675"},{"cve":"CVE-2026-4676","month":"2026-03","title":"Chromium: CVE-2026-4676 Use after free in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4676"},{"cve":"CVE-2026-4677","month":"2026-03","title":"Chromium: CVE-2026-4677 Out of bounds read in WebAudio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4677"},{"cve":"CVE-2026-4678","month":"2026-03","title":"Chromium: CVE-2026-4678 Use after free in WebGPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4678"},{"cve":"CVE-2026-4679","month":"2026-03","title":"Chromium: CVE-2026-4679 Integer overflow in Fonts","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4679"},{"cve":"CVE-2026-4680","month":"2026-03","title":"Chromium: CVE-2026-4680 Use after free in FedCM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4680"},{"cve":"CVE-2025-70873","month":"2026-03","title":"An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-244"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-70873"},{"cve":"CVE-2026-23234","month":"2026-03","title":"f2fs: fix to avoid UAF in f2fs_write_end_io()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23234"},{"cve":"CVE-2026-23235","month":"2026-03","title":"f2fs: fix out-of-bounds access in sysfs attribute read/write","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23235"},{"cve":"CVE-2026-0038","month":"2026-03","title":"In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","family":"Open Source Software","component":"Mariner","cna":"google_android","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0038"},{"cve":"CVE-2026-27601","month":"2026-03","title":"Underscore.js has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27601"},{"cve":"CVE-2025-66413","month":"2026-03","title":"Git for Windows leaks NTLM hash when cloning from an attacker-controlled server","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-66413"},{"cve":"CVE-2026-23233","month":"2026-03","title":"f2fs: fix to avoid mapping wrong physical block for swapfile","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23233"},{"cve":"CVE-2026-23265","month":"2026-03","title":"f2fs: fix to do sanity check on node footer in {read,write}_end_io","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23265"},{"cve":"CVE-2026-3549","month":"2026-03","title":"ECH parsing heap buffer overflow","family":"Open Source Software","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3549"},{"cve":"CVE-2026-23325","month":"2026-03","title":"wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23325"},{"cve":"CVE-2026-23378","month":"2026-03","title":"net/sched: act_ife: Fix metalist update behavior","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23378"},{"cve":"CVE-2026-23284","month":"2026-03","title":"net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23284"},{"cve":"CVE-2026-33938","month":"2026-03","title":"Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33938"},{"cve":"CVE-2026-33939","month":"2026-03","title":"Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-754"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33939"},{"cve":"CVE-2026-33937","month":"2026-03","title":"Handlebars.js has JavaScript Injection via AST Type Confusion","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33937"},{"cve":"CVE-2026-23239","month":"2026-03","title":"espintcp: Fix race condition in espintcp_close()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23239"},{"cve":"CVE-2026-3904","month":"2026-03","title":"Calling NSS-backed functions that support caching via nscd may call the \nnscd client side code and in the GNU C Library version 2.36 under high \nload on x86_64 systems, the client may call memcmp on inputs that are \nconcurrently modified by other processes or threads and crash.\n\n\n\n\nThe nscd client in the GNU C Library uses the memcmp function with \ninputs that may be concurrently modified by another thread, potentially \nresulting in spurious cache misses, which in itself is not a security \nissue.\u00a0 However in the GNU C Library version 2.36 an optimized \nimplementation of memcmp was introduced for x86_64 which could crash \nwhen invoked with such undefined behaviour, turning this into a \npotential crash of the nscd client and the application that uses it. \nThis implementation was backported to the 2.35 branch, making the nscd \nclient in that branch vulnerable as well.\u00a0 Subsequently, the fix for \nthis issue was backported to all vulnerable branches in the GNU C \nLibrary repository.\n\n\nIt is","family":"Open Source Software","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Moderate","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-366"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3904"},{"cve":"CVE-2026-3805","month":"2026-03","title":"use after free in SMB connection reuse","family":"Open Source Software","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3805"},{"cve":"CVE-2026-23267","month":"2026-03","title":"f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23267"},{"cve":"CVE-2026-3548","month":"2026-03","title":"Buffer overflow in CRL number parsing in wolfSSL","family":"Open Source Software","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3548"},{"cve":"CVE-2026-3547","month":"2026-03","title":"wolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validation","family":"Open Source Software","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3547"},{"cve":"CVE-2026-32141","month":"2026-03","title":"flatted: Unbounded recursion DoS in parse() revive phase","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32141"},{"cve":"CVE-2026-33228","month":"2026-03","title":"flatted: Prototype Pollution via parse()","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-1321"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33228"},{"cve":"CVE-2026-23372","month":"2026-03","title":"nfc: rawsock: cancel tx_work before socket teardown","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23372"},{"cve":"CVE-2026-23364","month":"2026-03","title":"ksmbd: Compare MACs in constant time","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23364"},{"cve":"CVE-2026-23334","month":"2026-03","title":"can: usb: f81604: handle short interrupt urb messages properly","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23334"},{"cve":"CVE-2026-23386","month":"2026-03","title":"gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23386"},{"cve":"CVE-2026-23308","month":"2026-03","title":"pinctrl: equilibrium: fix warning trace on load","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23308"},{"cve":"CVE-2026-23291","month":"2026-03","title":"nfc: pn533: properly drop the usb interface reference on disconnect","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23291"},{"cve":"CVE-2026-23287","month":"2026-03","title":"irqchip/sifive-plic: Fix frozen interrupt due to affinity setting","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23287"},{"cve":"CVE-2026-23347","month":"2026-03","title":"can: usb: f81604: correctly anchor the urb in the read bulk callback","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23347"},{"cve":"CVE-2026-23327","month":"2026-03","title":"cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23327"},{"cve":"CVE-2026-23393","month":"2026-03","title":"bridge: cfm: Fix race condition in peer_mep deletion","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23393"},{"cve":"CVE-2026-33895","month":"2026-03","title":"Forge has signature forgery in Ed25519 due to missing S > L check","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33895"},{"cve":"CVE-2026-33896","month":"2026-03","title":"Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33896"},{"cve":"CVE-2026-33891","month":"2026-03","title":"Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33891"},{"cve":"CVE-2026-33941","month":"2026-03","title":"Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33941"},{"cve":"CVE-2026-33916","month":"2026-03","title":"Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33916"},{"cve":"CVE-2026-33940","month":"2026-03","title":"Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33940"},{"cve":"CVE-2026-4739","month":"2026-03","title":"Integer overflow vulnerabilities in InsightSoftwareConsortium/ITK","family":"Other","component":"Mariner","cna":"GovTech CSG","label":"(none)","labels":[],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4739"},{"cve":"CVE-2026-4732","month":"2026-03","title":"Out-of-bounds Read Overflow in tildearrow/furnace","family":"Other","component":"Mariner","cna":"GovTech CSG","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4732"},{"cve":"CVE-2023-20585","month":"2026-04","title":"AMD: CVE-2023-20585 IOMMU Write Buffer Vulnerability","family":"Windows","component":"Input-Output Memory Management Unit (IOMMU)","cna":"AMD","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-20585"},{"cve":"CVE-2026-0390","month":"2026-04","title":"UEFI Secure Boot Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Boot Loader","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-807"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0390"},{"cve":"CVE-2026-20806","month":"2026-04","title":"Windows COM Server Information Disclosure Vulnerability","family":"Windows","component":"Windows COM","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20806"},{"cve":"CVE-2026-20928","month":"2026-04","title":"Windows Recovery Environment Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Recovery Environment Agent","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-212"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20928"},{"cve":"CVE-2026-20930","month":"2026-04","title":"Windows Management Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20930"},{"cve":"CVE-2026-20945","month":"2026-04","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20945"},{"cve":"CVE-2026-21515","month":"2026-04","title":"Azure IoT Central Elevation of Privilege Vulnerability","family":"Azure","component":"Azure IOT Central","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21515"},{"cve":"CVE-2026-21637","month":"2026-04","title":"HackerOne: CVE-2026-21637 TLS PSK/ALPN Callback Exceptions Bypass Error Handlers","family":"Developer Tools","component":"Node.js","cna":"HackerOne","label":"Denial of Service","labels":["Denial of Service"],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21637"},{"cve":"CVE-2026-23653","month":"2026-04","title":"GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability","family":"Developer Tools","component":"GitHub Copilot and Visual Studio Code","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23653"},{"cve":"CVE-2026-23657","month":"2026-04","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23657"},{"cve":"CVE-2026-23666","month":"2026-04","title":".NET Framework Denial of Service Vulnerability","family":"Developer Tools","component":".NET Framework","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C","cwe":["CWE-755"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23666"},{"cve":"CVE-2026-23670","month":"2026-04","title":"Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Virtualization-Based Security (VBS) Enclave","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23670"},{"cve":"CVE-2026-24303","month":"2026-04","title":"Microsoft Partner Center Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft Partner Center","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24303"},{"cve":"CVE-2026-25184","month":"2026-04","title":"Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Applocker Filter Driver (applockerfltr.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25184"},{"cve":"CVE-2026-25250","month":"2026-04","title":"MITRE: CVE-2026-25250 Secure Boot disable Eazy Fix","family":"Windows","component":"Windows Secure Boot","cna":"MITRE","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-325"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25250"},{"cve":"CVE-2026-26135","month":"2026-04","title":"Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Custom Locations Resource Provider (RP)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26135"},{"cve":"CVE-2026-26143","month":"2026-04","title":"Microsoft PowerShell Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Microsoft PowerShell","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26143"},{"cve":"CVE-2026-26149","month":"2026-04","title":"Microsoft Power Apps Desktop Client Spoofing Vulnerability","family":"Azure","component":"Microsoft Power Apps","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":9.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:T/RC:C","cwe":["CWE-150"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26149"},{"cve":"CVE-2026-26150","month":"2026-04","title":"Microsoft Purview eDiscovery Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft Purview","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26150"},{"cve":"CVE-2026-26151","month":"2026-04","title":"Remote Desktop Spoofing Vulnerability","family":"Windows","component":"Windows Remote Desktop","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-357"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26151"},{"cve":"CVE-2026-26152","month":"2026-04","title":"Microsoft Cryptographic Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cryptographic Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-922"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26152"},{"cve":"CVE-2026-26153","month":"2026-04","title":"Windows Encrypted File System (EFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Encrypting File System (EFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26153"},{"cve":"CVE-2026-26154","month":"2026-04","title":"Windows Server Update Service (WSUS) Tampering Vulnerability","family":"Windows","component":"Windows Server Update Service","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26154"},{"cve":"CVE-2026-26155","month":"2026-04","title":"Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Local Security Authority Subsystem Service (LSASS)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26155"},{"cve":"CVE-2026-26156","month":"2026-04","title":"Windows Hyper-V Remote Code Execution Vulnerability","family":"Windows","component":"Role: Windows Hyper-V","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-125","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26156"},{"cve":"CVE-2026-26159","month":"2026-04","title":"Remote Desktop Licensing Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Desktop Licensing Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26159"},{"cve":"CVE-2026-26160","month":"2026-04","title":"Remote Desktop Licensing Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Desktop Licensing Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26160"},{"cve":"CVE-2026-26161","month":"2026-04","title":"Windows Sensor Data Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Sensor Data Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26161"},{"cve":"CVE-2026-26162","month":"2026-04","title":"Windows OLE Elevation of Privilege Vulnerability","family":"Windows","component":"Windows OLE","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26162"},{"cve":"CVE-2026-26163","month":"2026-04","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26163"},{"cve":"CVE-2026-26165","month":"2026-04","title":"Windows Shell Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26165"},{"cve":"CVE-2026-26166","month":"2026-04","title":"Windows Shell Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26166"},{"cve":"CVE-2026-26167","month":"2026-04","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26167"},{"cve":"CVE-2026-26168","month":"2026-04","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26168"},{"cve":"CVE-2026-26169","month":"2026-04","title":"Windows Kernel Memory Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel Memory","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26169"},{"cve":"CVE-2026-26170","month":"2026-04","title":"PowerShell Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft PowerShell","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26170"},{"cve":"CVE-2026-26171","month":"2026-04","title":".NET Denial of Service Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-400","CWE-611"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26171"},{"cve":"CVE-2026-26172","month":"2026-04","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26172"},{"cve":"CVE-2026-26173","month":"2026-04","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416","CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26173"},{"cve":"CVE-2026-26174","month":"2026-04","title":"Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Server Update Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26174"},{"cve":"CVE-2026-26175","month":"2026-04","title":"Windows Boot Manager Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Boot Manager","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26175"},{"cve":"CVE-2026-26176","month":"2026-04","title":"Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Client Side Caching driver (csc.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26176"},{"cve":"CVE-2026-26177","month":"2026-04","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26177"},{"cve":"CVE-2026-26178","month":"2026-04","title":"Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Advanced Rasterization Platform","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-681","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26178"},{"cve":"CVE-2026-26179","month":"2026-04","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26179"},{"cve":"CVE-2026-26180","month":"2026-04","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26180"},{"cve":"CVE-2026-26181","month":"2026-04","title":"Microsoft Brokering File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Brokering File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26181"},{"cve":"CVE-2026-26182","month":"2026-04","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26182"},{"cve":"CVE-2026-26183","month":"2026-04","title":"Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows RPC API","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26183"},{"cve":"CVE-2026-26184","month":"2026-04","title":"Windows Projected File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Projected File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26184"},{"cve":"CVE-2026-27906","month":"2026-04","title":"Windows Hello Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27906"},{"cve":"CVE-2026-27907","month":"2026-04","title":"Windows Storage Spaces Controller Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage Spaces Controller","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27907"},{"cve":"CVE-2026-27908","month":"2026-04","title":"Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TDI Translation Driver (tdx.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27908"},{"cve":"CVE-2026-27909","month":"2026-04","title":"Windows Search Service Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27909"},{"cve":"CVE-2026-27910","month":"2026-04","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-280"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27910"},{"cve":"CVE-2026-27911","month":"2026-04","title":"Windows User Interface Core Elevation of Privilege Vulnerability","family":"Windows","component":"Windows User Interface Core","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27911"},{"cve":"CVE-2026-27912","month":"2026-04","title":"Windows Kerberos Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27912"},{"cve":"CVE-2026-27913","month":"2026-04","title":"Windows BitLocker Security Feature Bypass Vulnerability","family":"Windows","component":"Windows BitLocker","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27913"},{"cve":"CVE-2026-27914","month":"2026-04","title":"Microsoft Management Console Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Management Console","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27914"},{"cve":"CVE-2026-27915","month":"2026-04","title":"Windows UPnP Device Host Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Plug and Play (UPnP) Device Host","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27915"},{"cve":"CVE-2026-27916","month":"2026-04","title":"Windows UPnP Device Host Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Plug and Play (UPnP) Device Host","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27916"},{"cve":"CVE-2026-27917","month":"2026-04","title":"Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27917"},{"cve":"CVE-2026-27918","month":"2026-04","title":"Windows Shell Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27918"},{"cve":"CVE-2026-27919","month":"2026-04","title":"Windows UPnP Device Host Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Plug and Play (UPnP) Device Host","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27919"},{"cve":"CVE-2026-27920","month":"2026-04","title":"Windows UPnP Device Host Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Plug and Play (UPnP) Device Host","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27920"},{"cve":"CVE-2026-27921","month":"2026-04","title":"Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27921"},{"cve":"CVE-2026-27922","month":"2026-04","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27922"},{"cve":"CVE-2026-27923","month":"2026-04","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27923"},{"cve":"CVE-2026-27924","month":"2026-04","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27924"},{"cve":"CVE-2026-27925","month":"2026-04","title":"Windows UPnP Device Host Information Disclosure Vulnerability","family":"Windows","component":"Windows Universal Plug and Play (UPnP) Device Host","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27925"},{"cve":"CVE-2026-27926","month":"2026-04","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27926"},{"cve":"CVE-2026-27927","month":"2026-04","title":"Windows Projected File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Projected File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27927"},{"cve":"CVE-2026-27928","month":"2026-04","title":"Windows Hello Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27928"},{"cve":"CVE-2026-27929","month":"2026-04","title":"Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows LUAFV","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27929"},{"cve":"CVE-2026-27930","month":"2026-04","title":"Windows GDI Information Disclosure Vulnerability","family":"Windows","component":"Windows GDI","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27930"},{"cve":"CVE-2026-27931","month":"2026-04","title":"Windows GDI Information Disclosure Vulnerability","family":"Windows","component":"Windows GDI","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27931"},{"cve":"CVE-2026-32068","month":"2026-04","title":"Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SSDP Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32068"},{"cve":"CVE-2026-32069","month":"2026-04","title":"Windows Projected File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Projected File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32069"},{"cve":"CVE-2026-32070","month":"2026-04","title":"Windows Common Log File System Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Common Log File System Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32070"},{"cve":"CVE-2026-32071","month":"2026-04","title":"Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability","family":"Windows","component":"Windows Local Security Authority Subsystem Service (LSASS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32071"},{"cve":"CVE-2026-32072","month":"2026-04","title":"Active Directory Spoofing Vulnerability","family":"Windows","component":"Windows Active Directory","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32072"},{"cve":"CVE-2026-32073","month":"2026-04","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32073"},{"cve":"CVE-2026-32074","month":"2026-04","title":"Windows Projected File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Projected File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32074"},{"cve":"CVE-2026-32075","month":"2026-04","title":"Windows UPnP Device Host Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Plug and Play (UPnP) Device Host","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32075"},{"cve":"CVE-2026-32076","month":"2026-04","title":"Windows Storage Spaces Controller Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage Spaces Controller","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32076"},{"cve":"CVE-2026-32077","month":"2026-04","title":"Windows UPnP Device Host Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Plug and Play (UPnP) Device Host","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32077"},{"cve":"CVE-2026-32078","month":"2026-04","title":"Windows Projected File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Projected File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32078"},{"cve":"CVE-2026-32079","month":"2026-04","title":"Web Account Manager Information Disclosure Vulnerability","family":"Windows","component":"Windows File Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32079"},{"cve":"CVE-2026-32080","month":"2026-04","title":"Windows WalletService Elevation of Privilege Vulnerability","family":"Windows","component":"Windows WalletService","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32080"},{"cve":"CVE-2026-32081","month":"2026-04","title":"Package Catalog Information Disclosure Vulnerability","family":"Windows","component":"Windows File Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32081"},{"cve":"CVE-2026-32082","month":"2026-04","title":"Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SSDP Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32082"},{"cve":"CVE-2026-32083","month":"2026-04","title":"Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SSDP Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32083"},{"cve":"CVE-2026-32084","month":"2026-04","title":"Windows Print Spooler Information Disclosure Vulnerability","family":"Windows","component":"Windows File Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32084"},{"cve":"CVE-2026-32085","month":"2026-04","title":"Remote Procedure Call Information Disclosure Vulnerability","family":"Windows","component":"Windows Remote Procedure Call","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32085"},{"cve":"CVE-2026-32086","month":"2026-04","title":"Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability","family":"Windows","component":"Function Discovery Service (fdwsd.dll)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32086"},{"cve":"CVE-2026-32087","month":"2026-04","title":"Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability","family":"Windows","component":"Function Discovery Service (fdwsd.dll)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32087"},{"cve":"CVE-2026-32088","month":"2026-04","title":"Windows Biometric Service Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32088"},{"cve":"CVE-2026-32089","month":"2026-04","title":"Windows Speech Brokered Api Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Speech Brokered Api","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32089"},{"cve":"CVE-2026-32090","month":"2026-04","title":"Windows Speech Brokered Api Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Speech Brokered Api","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32090"},{"cve":"CVE-2026-32091","month":"2026-04","title":"Microsoft Brokering File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Brokering File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32091"},{"cve":"CVE-2026-32093","month":"2026-04","title":"Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability","family":"Windows","component":"Function Discovery Service (fdwsd.dll)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-367","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32093"},{"cve":"CVE-2026-32149","month":"2026-04","title":"Windows Hyper-V Remote Code Execution Vulnerability","family":"Windows","component":"Role: Windows Hyper-V","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20","CWE-191","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32149"},{"cve":"CVE-2026-32150","month":"2026-04","title":"Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability","family":"Windows","component":"Function Discovery Service (fdwsd.dll)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32150"},{"cve":"CVE-2026-32151","month":"2026-04","title":"Windows Shell Information Disclosure Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32151"},{"cve":"CVE-2026-32152","month":"2026-04","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32152"},{"cve":"CVE-2026-32153","month":"2026-04","title":"Windows Speech Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Speech","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32153"},{"cve":"CVE-2026-32154","month":"2026-04","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32154"},{"cve":"CVE-2026-32155","month":"2026-04","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32155"},{"cve":"CVE-2026-32156","month":"2026-04","title":"Windows UPnP Device Host Remote Code Execution Vulnerability","family":"Windows","component":"Windows Universal Plug and Play (UPnP) Device Host","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32156"},{"cve":"CVE-2026-32157","month":"2026-04","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32157"},{"cve":"CVE-2026-32158","month":"2026-04","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32158"},{"cve":"CVE-2026-32159","month":"2026-04","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32159"},{"cve":"CVE-2026-32160","month":"2026-04","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32160"},{"cve":"CVE-2026-32162","month":"2026-04","title":"Windows COM Elevation of Privilege Vulnerability","family":"Windows","component":"Windows COM","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-349"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32162"},{"cve":"CVE-2026-32163","month":"2026-04","title":"Windows User Interface Core Elevation of Privilege Vulnerability","family":"Windows","component":"Windows User Interface Core","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32163"},{"cve":"CVE-2026-32164","month":"2026-04","title":"Windows User Interface Core Elevation of Privilege Vulnerability","family":"Windows","component":"Windows User Interface Core","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32164"},{"cve":"CVE-2026-32165","month":"2026-04","title":"Windows User Interface Core Elevation of Privilege Vulnerability","family":"Windows","component":"Windows User Interface Core","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32165"},{"cve":"CVE-2026-32167","month":"2026-04","title":"SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32167"},{"cve":"CVE-2026-32168","month":"2026-04","title":"Azure Monitor Agent Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Monitor Agent","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32168"},{"cve":"CVE-2026-32171","month":"2026-04","title":"Azure Logic Apps Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Logic Apps","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-522"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32171"},{"cve":"CVE-2026-32172","month":"2026-04","title":"Microsoft Power Apps Remote Code Execution Vulnerability","family":"Microsoft Dynamics","component":"Microsoft Power Apps","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-427"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32172"},{"cve":"CVE-2026-32173","month":"2026-04","title":"Azure SRE Agent Information Disclosure Vulnerability","family":"Azure","component":"Azure SRE Agent","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32173"},{"cve":"CVE-2026-32176","month":"2026-04","title":"SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege","Information Disclosure"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32176"},{"cve":"CVE-2026-32178","month":"2026-04","title":".NET Spoofing Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-138"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32178"},{"cve":"CVE-2026-32181","month":"2026-04","title":"Connected User Experiences and Telemetry Service Denial of Service Vulnerability","family":"Windows","component":"Microsoft Windows","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-269"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32181"},{"cve":"CVE-2026-32183","month":"2026-04","title":"Windows Snipping Tool Remote Code Execution Vulnerability","family":"Windows","component":"Windows Snipping Tool","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32183"},{"cve":"CVE-2026-32184","month":"2026-04","title":"Microsoft High Performance Compute (HPC) Pack Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft High Performance Compute Pack (HPC)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32184"},{"cve":"CVE-2026-32186","month":"2026-04","title":"Microsoft Bing Elevation of Privilege Vulnerability","family":"Apps","component":"Microsoft Bing","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32186"},{"cve":"CVE-2026-32188","month":"2026-04","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32188"},{"cve":"CVE-2026-32189","month":"2026-04","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32189"},{"cve":"CVE-2026-32190","month":"2026-04","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32190"},{"cve":"CVE-2026-32192","month":"2026-04","title":"Azure Monitor Agent Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Monitor Agent","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32192"},{"cve":"CVE-2026-32195","month":"2026-04","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32195"},{"cve":"CVE-2026-32196","month":"2026-04","title":"Windows Admin Center Spoofing Vulnerability","family":"Windows","component":"Windows Admin Center","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32196"},{"cve":"CVE-2026-32197","month":"2026-04","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32197"},{"cve":"CVE-2026-32198","month":"2026-04","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32198"},{"cve":"CVE-2026-32199","month":"2026-04","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32199"},{"cve":"CVE-2026-32200","month":"2026-04","title":"Microsoft PowerPoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32200"},{"cve":"CVE-2026-32201","month":"2026-04","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:F/RL:O/RC:C","cwe":["CWE-20"],"exploited":true,"disclosed":false,"kev":true,"kev_added":"2026-04-14","class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32201"},{"cve":"CVE-2026-32202","month":"2026-04","title":"Windows Shell Spoofing Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C","cwe":["CWE-693"],"exploited":true,"disclosed":false,"kev":true,"kev_added":"2026-04-28","class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202"},{"cve":"CVE-2026-32203","month":"2026-04","title":".NET and Visual Studio Denial of Service Vulnerability","family":"Developer Tools","component":".NET and Visual Studio","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-121","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32203"},{"cve":"CVE-2026-32210","month":"2026-04","title":"Microsoft Dynamics 365 (online) Spoofing Vulnerability","family":"Microsoft Dynamics","component":"Microsoft Dynamics 365 (Online)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32210"},{"cve":"CVE-2026-32211","month":"2026-04","title":"Azure MCP Server Information Disclosure Vulnerability","family":"Azure","component":"Azure MCP Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32211"},{"cve":"CVE-2026-32212","month":"2026-04","title":"Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability","family":"Windows","component":"Universal Plug and Play (upnp.dll)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-59","CWE-269"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32212"},{"cve":"CVE-2026-32213","month":"2026-04","title":"Azure AI Foundry Elevation of Privilege Vulnerability","family":"Azure","component":"Azure AI Foundry","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32213"},{"cve":"CVE-2026-32214","month":"2026-04","title":"Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability","family":"Windows","component":"Universal Plug and Play (upnp.dll)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32214"},{"cve":"CVE-2026-32215","month":"2026-04","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-532"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32215"},{"cve":"CVE-2026-32216","month":"2026-04","title":"Windows Redirected Drive Buffering System Denial of Service Vulnerability","family":"Windows","component":"Windows Redirected Drive Buffering","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32216"},{"cve":"CVE-2026-32217","month":"2026-04","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-532"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32217"},{"cve":"CVE-2026-32218","month":"2026-04","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-532"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32218"},{"cve":"CVE-2026-32219","month":"2026-04","title":"Microsoft Brokering File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Brokering File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32219"},{"cve":"CVE-2026-32220","month":"2026-04","title":"UEFI Secure Boot Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Virtualization-Based Security (VBS) Enclave","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32220"},{"cve":"CVE-2026-32221","month":"2026-04","title":"Windows Graphics Component Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32221"},{"cve":"CVE-2026-32222","month":"2026-04","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - ICOMP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32222"},{"cve":"CVE-2026-32223","month":"2026-04","title":"Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Print Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32223"},{"cve":"CVE-2026-32224","month":"2026-04","title":"Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Server Update Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32224"},{"cve":"CVE-2026-32225","month":"2026-04","title":"Windows Shell Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32225"},{"cve":"CVE-2026-32226","month":"2026-04","title":".NET Framework Denial of Service Vulnerability","family":"Developer Tools","component":".NET Framework","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32226"},{"cve":"CVE-2026-32631","month":"2026-04","title":"GitHub: CVE-2026-32631 'git clone' from manipulated repositories can leak NTLM hashes","family":"Developer Tools","component":"GitHub Repo: Git for Windows","cna":"GitHub","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-359"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32631"},{"cve":"CVE-2026-33095","month":"2026-04","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33095"},{"cve":"CVE-2026-33096","month":"2026-04","title":"HTTP.sys Denial of Service Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33096"},{"cve":"CVE-2026-33098","month":"2026-04","title":"Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Container Isolation FS Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33098"},{"cve":"CVE-2026-33099","month":"2026-04","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33099"},{"cve":"CVE-2026-33100","month":"2026-04","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33100"},{"cve":"CVE-2026-33101","month":"2026-04","title":"Windows Print Spooler Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33101"},{"cve":"CVE-2026-33102","month":"2026-04","title":"Microsoft 365 Copilot Elevation of Privilege Vulnerability","family":"Apps","component":"M365 Copilot","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-601"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33102"},{"cve":"CVE-2026-33103","month":"2026-04","title":"Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability","family":"Microsoft Dynamics","component":"Microsoft Dynamics 365 (on-premises)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33103"},{"cve":"CVE-2026-33104","month":"2026-04","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - GRFX","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33104"},{"cve":"CVE-2026-33105","month":"2026-04","title":"Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft Azure Kubernetes Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33105"},{"cve":"CVE-2026-33107","month":"2026-04","title":"Azure Databricks Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Databricks","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33107"},{"cve":"CVE-2026-33114","month":"2026-04","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33114"},{"cve":"CVE-2026-33115","month":"2026-04","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33115"},{"cve":"CVE-2026-33116","month":"2026-04","title":".NET, .NET Framework, and Visual Studio Denial of Service Vulnerability","family":"Developer Tools","component":".NET, .NET Framework, Visual Studio","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-835","CWE-400","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33116"},{"cve":"CVE-2026-33118","month":"2026-04","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Low","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33118"},{"cve":"CVE-2026-33119","month":"2026-04","title":"Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33119"},{"cve":"CVE-2026-33120","month":"2026-04","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33120"},{"cve":"CVE-2026-33819","month":"2026-04","title":"Microsoft Bing Remote Code Execution Vulnerability","family":"Apps","component":"Microsoft Bing","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33819"},{"cve":"CVE-2026-33822","month":"2026-04","title":"Microsoft Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33822"},{"cve":"CVE-2026-33824","month":"2026-04","title":"Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability","family":"Windows","component":"Windows IKE Extension","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":true,"kev_added":"2026-08-18","class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33824"},{"cve":"CVE-2026-33825","month":"2026-04","title":"Microsoft Defender Elevation of Privilege Vulnerability","family":"System Center","component":"Microsoft Defender","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","cwe":["CWE-1220"],"exploited":false,"disclosed":true,"kev":true,"kev_added":"2026-04-22","class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33825"},{"cve":"CVE-2026-33826","month":"2026-04","title":"Windows Active Directory Remote Code Execution Vulnerability","family":"Windows","component":"Windows Active Directory","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.0,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33826"},{"cve":"CVE-2026-33827","month":"2026-04","title":"Windows TCP/IP Remote Code Execution Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33827"},{"cve":"CVE-2026-33829","month":"2026-04","title":"Windows Snipping Tool Spoofing Vulnerability","family":"Windows","component":"Windows Snipping Tool","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33829"},{"cve":"CVE-2026-35431","month":"2026-04","title":"Microsoft Entra ID Entitlement Management Spoofing Vulnerability","family":"Azure","component":"Microsoft Entra ID Entitlement Management","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35431"},{"cve":"CVE-2026-40372","month":"2026-04","title":"ASP.NET Core Elevation of Privilege Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40372"},{"cve":"CVE-2026-5272","month":"2026-04","title":"Chromium: CVE-2026-5272 Heap buffer overflow in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5272"},{"cve":"CVE-2026-5273","month":"2026-04","title":"Chromium: CVE-2026-5273 Use after free in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5273"},{"cve":"CVE-2026-5274","month":"2026-04","title":"Chromium: CVE-2026-5274 Integer overflow in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5274"},{"cve":"CVE-2026-5275","month":"2026-04","title":"Chromium: CVE-2026-5275 Heap buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5275"},{"cve":"CVE-2026-5276","month":"2026-04","title":"Chromium: CVE-2026-5276 Insufficient policy enforcement in WebUSB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5276"},{"cve":"CVE-2026-5277","month":"2026-04","title":"Chromium: CVE-2026-5277 Integer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5277"},{"cve":"CVE-2026-5279","month":"2026-04","title":"Chromium: CVE-2026-5279 Object corruption in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5279"},{"cve":"CVE-2026-5280","month":"2026-04","title":"Chromium: CVE-2026-5280 Use after free in WebCodecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5280"},{"cve":"CVE-2026-5281","month":"2026-04","title":"Chromium: CVE-2026-5281 Use after free in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":true,"kev_added":"2026-04-01","class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5281"},{"cve":"CVE-2026-5283","month":"2026-04","title":"Chromium: CVE-2026-5283 Inappropriate implementation in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5283"},{"cve":"CVE-2026-5284","month":"2026-04","title":"Chromium: CVE-2026-5284 Use after free in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5284"},{"cve":"CVE-2026-5285","month":"2026-04","title":"Chromium: CVE-2026-5285 Use after free in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5285"},{"cve":"CVE-2026-5286","month":"2026-04","title":"Chromium: CVE-2026-5286 Use after free in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5286"},{"cve":"CVE-2026-5287","month":"2026-04","title":"Chromium: CVE-2026-5287 Use after free in PDF","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5287"},{"cve":"CVE-2026-5289","month":"2026-04","title":"Chromium: CVE-2026-5289 Use after free in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5289"},{"cve":"CVE-2026-5290","month":"2026-04","title":"Chromium: CVE-2026-5290 Use after free in Compositing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5290"},{"cve":"CVE-2026-5291","month":"2026-04","title":"Chromium: CVE-2026-5291 Inappropriate implementation in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5291"},{"cve":"CVE-2026-5292","month":"2026-04","title":"Chromium: CVE-2026-5292 Out of bounds read in WebCodecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5292"},{"cve":"CVE-2026-5858","month":"2026-04","title":"Chromium: CVE-2026-5858 Heap buffer overflow in WebML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5858"},{"cve":"CVE-2026-5859","month":"2026-04","title":"Chromium: CVE-2026-5859 Integer overflow in WebML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5859"},{"cve":"CVE-2026-5860","month":"2026-04","title":"Chromium: CVE-2026-5860 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5860"},{"cve":"CVE-2026-5861","month":"2026-04","title":"Chromium: CVE-2026-5861 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5861"},{"cve":"CVE-2026-5862","month":"2026-04","title":"Chromium: CVE-2026-5862 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5862"},{"cve":"CVE-2026-5863","month":"2026-04","title":"Chromium: CVE-2026-5863 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5863"},{"cve":"CVE-2026-5864","month":"2026-04","title":"Chromium: CVE-2026-5864 Heap buffer overflow in WebAudio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5864"},{"cve":"CVE-2026-5865","month":"2026-04","title":"Chromium: CVE-2026-5865 Type Confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5865"},{"cve":"CVE-2026-5866","month":"2026-04","title":"Chromium: CVE-2026-5866 Use after free in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5866"},{"cve":"CVE-2026-5867","month":"2026-04","title":"Chromium: CVE-2026-5867 Heap buffer overflow in WebML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5867"},{"cve":"CVE-2026-5868","month":"2026-04","title":"Chromium: CVE-2026-5868 Heap buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5868"},{"cve":"CVE-2026-5869","month":"2026-04","title":"Chromium: CVE-2026-5869 Heap buffer overflow in WebML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5869"},{"cve":"CVE-2026-5870","month":"2026-04","title":"Chromium: CVE-2026-5870 Integer overflow in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5870"},{"cve":"CVE-2026-5871","month":"2026-04","title":"Chromium: CVE-2026-5871 Type Confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5871"},{"cve":"CVE-2026-5872","month":"2026-04","title":"Chromium: CVE-2026-5872 Use after free in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5872"},{"cve":"CVE-2026-5873","month":"2026-04","title":"Chromium: CVE-2026-5873 Out of bounds read and write in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5873"},{"cve":"CVE-2026-5874","month":"2026-04","title":"Chromium: CVE-2026-5874 Use after free in PrivateAI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5874"},{"cve":"CVE-2026-5875","month":"2026-04","title":"Chromium: CVE-2026-5875 Policy bypass in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5875"},{"cve":"CVE-2026-5876","month":"2026-04","title":"Chromium: CVE-2026-5876 Side-channel information leakage in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5876"},{"cve":"CVE-2026-5877","month":"2026-04","title":"Chromium: CVE-2026-5877 Use after free in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5877"},{"cve":"CVE-2026-5878","month":"2026-04","title":"Chromium: CVE-2026-5878 Incorrect security UI in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5878"},{"cve":"CVE-2026-5879","month":"2026-04","title":"Chromium: CVE-2026-5879 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5879"},{"cve":"CVE-2026-5880","month":"2026-04","title":"Chromium: CVE-2026-5880 Incorrect security UI in browser UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5880"},{"cve":"CVE-2026-5881","month":"2026-04","title":"Chromium: CVE-2026-5881 Policy bypass in LocalNetworkAccess","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5881"},{"cve":"CVE-2026-5882","month":"2026-04","title":"Chromium: CVE-2026-5882 Incorrect security UI in Fullscreen","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5882"},{"cve":"CVE-2026-5883","month":"2026-04","title":"Chromium: CVE-2026-5883 Use after free in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5883"},{"cve":"CVE-2026-5884","month":"2026-04","title":"Chromium: CVE-2026-5884 Insufficient validation of untrusted input in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5884"},{"cve":"CVE-2026-5885","month":"2026-04","title":"Chromium: CVE-2026-5885 Insufficient validation of untrusted input in WebML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5885"},{"cve":"CVE-2026-5886","month":"2026-04","title":"Chromium: CVE-2026-5886 Out of bounds read in WebAudio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5886"},{"cve":"CVE-2026-5887","month":"2026-04","title":"Chromium: CVE-2026-5887 Insufficient validation of untrusted input in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5887"},{"cve":"CVE-2026-5888","month":"2026-04","title":"Chromium: CVE-2026-5888 Uninitialized Use in WebCodecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5888"},{"cve":"CVE-2026-5889","month":"2026-04","title":"Chromium: CVE-2026-5889 Cryptographic Flaw in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5889"},{"cve":"CVE-2026-5890","month":"2026-04","title":"Chromium: CVE-2026-5890 Race in WebCodecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5890"},{"cve":"CVE-2026-5891","month":"2026-04","title":"Chromium: CVE-2026-5891 Insufficient policy enforcement in browser UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5891"},{"cve":"CVE-2026-5892","month":"2026-04","title":"Chromium: CVE-2026-5892 Insufficient policy enforcement in PWAs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5892"},{"cve":"CVE-2026-5893","month":"2026-04","title":"Chromium: CVE-2026-5893 Race in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5893"},{"cve":"CVE-2026-5894","month":"2026-04","title":"Chromium: CVE-2026-5894 Inappropriate implementation in PDF","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5894"},{"cve":"CVE-2026-5895","month":"2026-04","title":"Chromium: CVE-2026-5895 Incorrect security UI in Omnibox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5895"},{"cve":"CVE-2026-5896","month":"2026-04","title":"Chromium: CVE-2026-5896 Policy bypass in Audio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5896"},{"cve":"CVE-2026-5897","month":"2026-04","title":"Chromium: CVE-2026-5897 Incorrect security UI in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5897"},{"cve":"CVE-2026-5898","month":"2026-04","title":"Chromium: CVE-2026-5898 Incorrect security UI in Omnibox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5898"},{"cve":"CVE-2026-5899","month":"2026-04","title":"Chromium: CVE-2026-5899 Incorrect security UI in History Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5899"},{"cve":"CVE-2026-5900","month":"2026-04","title":"Chromium: CVE-2026-5900 Policy bypass in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5900"},{"cve":"CVE-2026-5901","month":"2026-04","title":"Chromium: CVE-2026-5901 Policy bypass in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5901"},{"cve":"CVE-2026-5902","month":"2026-04","title":"Chromium: CVE-2026-5902 Race in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5902"},{"cve":"CVE-2026-5903","month":"2026-04","title":"Chromium: CVE-2026-5903 Policy bypass in IFrameSandbox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5903"},{"cve":"CVE-2026-5904","month":"2026-04","title":"Chromium: CVE-2026-5904 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5904"},{"cve":"CVE-2026-5905","month":"2026-04","title":"Chromium: CVE-2026-5905 Incorrect security UI in Permissions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5905"},{"cve":"CVE-2026-5906","month":"2026-04","title":"Chromium: CVE-2026-5906 Incorrect security UI in Omnibox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5906"},{"cve":"CVE-2026-5907","month":"2026-04","title":"Chromium: CVE-2026-5907 Insufficient data validation in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5907"},{"cve":"CVE-2026-5908","month":"2026-04","title":"Chromium: CVE-2026-5908 Integer overflow in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5908"},{"cve":"CVE-2026-5909","month":"2026-04","title":"Chromium: CVE-2026-5909 Integer overflow in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5909"},{"cve":"CVE-2026-5910","month":"2026-04","title":"Chromium: CVE-2026-5910 Integer overflow in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5910"},{"cve":"CVE-2026-5911","month":"2026-04","title":"Chromium: CVE-2026-5911 Policy bypass in ServiceWorkers","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5911"},{"cve":"CVE-2026-5912","month":"2026-04","title":"Chromium: CVE-2026-5912 Integer overflow in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5912"},{"cve":"CVE-2026-5913","month":"2026-04","title":"Chromium: CVE-2026-5913 Out of bounds read in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5913"},{"cve":"CVE-2026-5914","month":"2026-04","title":"Chromium: CVE-2026-5914 Type Confusion in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5914"},{"cve":"CVE-2026-5915","month":"2026-04","title":"Chromium: CVE-2026-5915 Insufficient validation of untrusted input in WebML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5915"},{"cve":"CVE-2026-5918","month":"2026-04","title":"Chromium: CVE-2026-5918 Inappropriate implementation in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5918"},{"cve":"CVE-2026-5919","month":"2026-04","title":"Chromium: CVE-2026-5919 Insufficient validation of untrusted input in WebSockets","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5919"},{"cve":"CVE-2026-6296","month":"2026-04","title":"Chromium: CVE-2026-6296 Heap buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6296"},{"cve":"CVE-2026-6297","month":"2026-04","title":"Chromium: CVE-2026-6297 Use after free in Proxy","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6297"},{"cve":"CVE-2026-6298","month":"2026-04","title":"Chromium: CVE-2026-6298 Heap buffer overflow in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6298"},{"cve":"CVE-2026-6299","month":"2026-04","title":"Chromium: CVE-2026-6299 Use after free in Prerender","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6299"},{"cve":"CVE-2026-6300","month":"2026-04","title":"Chromium: CVE-2026-6300 Use after free in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6300"},{"cve":"CVE-2026-6301","month":"2026-04","title":"Chromium: CVE-2026-6301 Type Confusion in Turbofan","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6301"},{"cve":"CVE-2026-6302","month":"2026-04","title":"Chromium: CVE-2026-6302 Use after free in Video","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6302"},{"cve":"CVE-2026-6303","month":"2026-04","title":"Chromium: CVE-2026-6303 Use after free in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6303"},{"cve":"CVE-2026-6304","month":"2026-04","title":"Chromium: CVE-2026-6304 Use after free in Graphite","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6304"},{"cve":"CVE-2026-6305","month":"2026-04","title":"Chromium: CVE-2026-6305 Heap buffer overflow in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6305"},{"cve":"CVE-2026-6306","month":"2026-04","title":"Chromium: CVE-2026-6306 Heap buffer overflow in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6306"},{"cve":"CVE-2026-6307","month":"2026-04","title":"Chromium: CVE-2026-6307 Type Confusion in Turbofan","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6307"},{"cve":"CVE-2026-6308","month":"2026-04","title":"Chromium: CVE-2026-6308 Out of bounds read in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6308"},{"cve":"CVE-2026-6309","month":"2026-04","title":"Chromium: CVE-2026-6309 Use after free in Viz","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6309"},{"cve":"CVE-2026-6310","month":"2026-04","title":"Chromium: CVE-2026-6310 Use after free in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6310"},{"cve":"CVE-2026-6311","month":"2026-04","title":"Chromium: CVE-2026-6311 Uninitialized Use in Accessibility","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6311"},{"cve":"CVE-2026-6312","month":"2026-04","title":"Chromium: CVE-2026-6312 Insufficient policy enforcement in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6312"},{"cve":"CVE-2026-6313","month":"2026-04","title":"Chromium: CVE-2026-6313 Insufficient policy enforcement in CORS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6313"},{"cve":"CVE-2026-6314","month":"2026-04","title":"Chromium: CVE-2026-6314 Out of bounds write in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6314"},{"cve":"CVE-2026-6316","month":"2026-04","title":"Chromium: CVE-2026-6316 Use after free in Forms","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6316"},{"cve":"CVE-2026-6317","month":"2026-04","title":"Chromium: CVE-2026-6317 Use after free in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6317"},{"cve":"CVE-2026-6318","month":"2026-04","title":"Chromium: CVE-2026-6318 Use after free in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6318"},{"cve":"CVE-2026-6359","month":"2026-04","title":"Chromium: CVE-2026-6359 Use after free in Video","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6359"},{"cve":"CVE-2026-6360","month":"2026-04","title":"Chromium: CVE-2026-6360 Use after free in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6360"},{"cve":"CVE-2026-6361","month":"2026-04","title":"Chromium: CVE-2026-6361 Heap buffer overflow in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6361"},{"cve":"CVE-2026-6362","month":"2026-04","title":"Chromium: CVE-2026-6362 Use after free in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6362"},{"cve":"CVE-2026-6363","month":"2026-04","title":"Chromium: CVE-2026-6363 Type Confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6363"},{"cve":"CVE-2026-6364","month":"2026-04","title":"Chromium: CVE-2026-6364 Out of bounds read in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6364"},{"cve":"CVE-2026-6919","month":"2026-04","title":"Chromium: CVE-2026-6919 Use after free in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6919"},{"cve":"CVE-2026-6920","month":"2026-04","title":"Chromium: CVE-2026-6920 Out of bounds read in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6920"},{"cve":"CVE-2026-6921","month":"2026-04","title":"Chromium: CVE-2026-6921 Race in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6921"},{"cve":"CVE-2017-20230","month":"2026-04","title":"Storable versions before 3.05 for Perl has a stack overflow","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-20230"},{"cve":"CVE-2025-13763","month":"2026-04","title":"Libopensc: opensc: multiple uses of uninitialized variable","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-13763"},{"cve":"CVE-2025-48431","month":"2026-04","title":"Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.","family":"Mariner","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-762"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48431"},{"cve":"CVE-2026-1502","month":"2026-04","title":"HTTP client proxy tunnel headers not validated for CR/LF","family":"Open Source Software","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-1502"},{"cve":"CVE-2026-21998","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21998"},{"cve":"CVE-2026-22001","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Low","cvss":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22001"},{"cve":"CVE-2026-22002","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22002"},{"cve":"CVE-2026-22004","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22004"},{"cve":"CVE-2026-22005","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22005"},{"cve":"CVE-2026-22009","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22009"},{"cve":"CVE-2026-22015","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22015"},{"cve":"CVE-2026-22017","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-22017"},{"cve":"CVE-2026-23401","month":"2026-04","title":"KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23401"},{"cve":"CVE-2026-23403","month":"2026-04","title":"apparmor: fix memory leak in verify_header","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23403"},{"cve":"CVE-2026-23404","month":"2026-04","title":"apparmor: replace recursive profile removal with iterative approach","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23404"},{"cve":"CVE-2026-23405","month":"2026-04","title":"apparmor: fix: limit the number of levels of policy namespaces","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23405"},{"cve":"CVE-2026-23406","month":"2026-04","title":"apparmor: fix side-effect bug in match_char() macro usage","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23406"},{"cve":"CVE-2026-23407","month":"2026-04","title":"apparmor: fix missing bounds check on DEFAULT table in verify_dfa()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23407"},{"cve":"CVE-2026-23408","month":"2026-04","title":"apparmor: Fix double free of ns_name in aa_replace_profiles()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23408"},{"cve":"CVE-2026-23409","month":"2026-04","title":"apparmor: fix differential encoding verification","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23409"},{"cve":"CVE-2026-23410","month":"2026-04","title":"apparmor: fix race on rawdata dereference","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23410"},{"cve":"CVE-2026-23411","month":"2026-04","title":"apparmor: fix race between freeing data and fs accessing it","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23411"},{"cve":"CVE-2026-23414","month":"2026-04","title":"tls: Purge async_hold in tls_decrypt_async_wait()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23414"},{"cve":"CVE-2026-23420","month":"2026-04","title":"wifi: wlcore: Fix a locking bug","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23420"},{"cve":"CVE-2026-23434","month":"2026-04","title":"mtd: rawnand: serialize lock/unlock against other NAND operations","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23434"},{"cve":"CVE-2026-23438","month":"2026-04","title":"net: mvpp2: guard flow control update with global_tx_fc in buffer switching","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23438"},{"cve":"CVE-2026-23439","month":"2026-04","title":"udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23439"},{"cve":"CVE-2026-23442","month":"2026-04","title":"ipv6: add NULL checks for idev in SRv6 paths","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23442"},{"cve":"CVE-2026-23444","month":"2026-04","title":"wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23444"},{"cve":"CVE-2026-23446","month":"2026-04","title":"net: usb: aqc111: Do not perform PM inside suspend callback","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23446"},{"cve":"CVE-2026-23447","month":"2026-04","title":"net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23447"},{"cve":"CVE-2026-23459","month":"2026-04","title":"ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23459"},{"cve":"CVE-2026-23468","month":"2026-04","title":"drm/amdgpu: Limit BO list entry count to prevent resource exhaustion","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23468"},{"cve":"CVE-2026-23472","month":"2026-04","title":"serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23472"},{"cve":"CVE-2026-23473","month":"2026-04","title":"io_uring/poll: fix multishot recv missing EOF on wakeup race","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23473"},{"cve":"CVE-2026-2708","month":"2026-04","title":"Libsoup: libsoup: http request smuggling via duplicate content-length headers","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U","cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2708"},{"cve":"CVE-2026-27140","month":"2026-04","title":"Code execution vulnerability in SWIG code generation in cmd/go","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27140"},{"cve":"CVE-2026-27143","month":"2026-04","title":"Missing bound checks can lead to memory corruption in safe Go in cmd/compile","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27143"},{"cve":"CVE-2026-27144","month":"2026-04","title":"Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27144"},{"cve":"CVE-2026-27447","month":"2026-04","title":"OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N/E:P","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27447"},{"cve":"CVE-2026-27456","month":"2026-04","title":"util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27456"},{"cve":"CVE-2026-27820","month":"2026-04","title":"zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-120"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27820"},{"cve":"CVE-2026-28387","month":"2026-04","title":"Potential Use-after-free in DANE Client Code","family":"Open Source Software","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-28387"},{"cve":"CVE-2026-28388","month":"2026-04","title":"NULL Pointer Dereference When Processing a Delta CRL","family":"Open Source Software","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-28388"},{"cve":"CVE-2026-28389","month":"2026-04","title":"Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo","family":"Open Source Software","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-28389"},{"cve":"CVE-2026-28390","month":"2026-04","title":"Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo","family":"Open Source Software","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-28390"},{"cve":"CVE-2026-28532","month":"2026-04","title":"FRRouting < 10.5.3 Integer Overflow in OSPF TLV Parser Functions","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-28532"},{"cve":"CVE-2026-28808","month":"2026-04","title":"ScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch)","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-28808"},{"cve":"CVE-2026-28810","month":"2026-04","title":"Predictable DNS Transaction IDs Enable Cache Poisoning in Built-in Resolver","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-340"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-28810"},{"cve":"CVE-2026-29181","month":"2026-04","title":"OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-29181"},{"cve":"CVE-2026-30656","month":"2026-04","title":"A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-30656"},{"cve":"CVE-2026-3087","month":"2026-04","title":"shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs","family":"Open Source Software","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3087"},{"cve":"CVE-2026-31394","month":"2026-04","title":"mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31394"},{"cve":"CVE-2026-31407","month":"2026-04","title":"netfilter: conntrack: add missing netlink policy validations","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31407"},{"cve":"CVE-2026-31408","month":"2026-04","title":"Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31408"},{"cve":"CVE-2026-31410","month":"2026-04","title":"ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31410"},{"cve":"CVE-2026-31414","month":"2026-04","title":"netfilter: nf_conntrack_expect: use expect->helper","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31414"},{"cve":"CVE-2026-31416","month":"2026-04","title":"netfilter: nfnetlink_log: account for netlink header size","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31416"},{"cve":"CVE-2026-31417","month":"2026-04","title":"net/x25: Fix overflow when accumulating packets","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31417"},{"cve":"CVE-2026-31418","month":"2026-04","title":"netfilter: ipset: drop logically empty buckets in mtype_del","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31418"},{"cve":"CVE-2026-31419","month":"2026-04","title":"net: bonding: fix use-after-free in bond_xmit_broadcast()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31419"},{"cve":"CVE-2026-31420","month":"2026-04","title":"bridge: mrp: reject zero test interval to avoid OOM panic","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31420"},{"cve":"CVE-2026-31421","month":"2026-04","title":"net/sched: cls_fw: fix NULL pointer dereference on shared blocks","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31421"},{"cve":"CVE-2026-31422","month":"2026-04","title":"net/sched: cls_flow: fix NULL pointer dereference on shared blocks","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31422"},{"cve":"CVE-2026-31423","month":"2026-04","title":"net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31423"},{"cve":"CVE-2026-31424","month":"2026-04","title":"netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31424"},{"cve":"CVE-2026-31426","month":"2026-04","title":"ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31426"},{"cve":"CVE-2026-31427","month":"2026-04","title":"netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31427"},{"cve":"CVE-2026-31428","month":"2026-04","title":"netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31428"},{"cve":"CVE-2026-31429","month":"2026-04","title":"net: skb: fix cross-cache free of KFENCE-allocated skb head","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31429"},{"cve":"CVE-2026-31430","month":"2026-04","title":"X.509: Fix out-of-bounds access when parsing extensions","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31430"},{"cve":"CVE-2026-31431","month":"2026-04","title":"crypto: algif_aead - Revert to operating out-of-place","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-669"],"exploited":false,"disclosed":false,"kev":true,"kev_added":"2026-05-01","class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31431"},{"cve":"CVE-2026-31432","month":"2026-04","title":"ksmbd: fix OOB write in QUERY_INFO for compound requests","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31432"},{"cve":"CVE-2026-31439","month":"2026-04","title":"dmaengine: xilinx: xdma: Fix regmap init error handling","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31439"},{"cve":"CVE-2026-31440","month":"2026-04","title":"dmaengine: idxd: Fix leaking event log memory","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31440"},{"cve":"CVE-2026-31441","month":"2026-04","title":"dmaengine: idxd: Fix memory leak when a wq is reset","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31441"},{"cve":"CVE-2026-31444","month":"2026-04","title":"ksmbd: fix use-after-free and NULL deref in smb_grant_oplock()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31444"},{"cve":"CVE-2026-31446","month":"2026-04","title":"ext4: fix use-after-free in update_super_work when racing with umount","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31446"},{"cve":"CVE-2026-31447","month":"2026-04","title":"ext4: reject mount if bigalloc with s_first_data_block != 0","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31447"},{"cve":"CVE-2026-31448","month":"2026-04","title":"ext4: avoid infinite loops caused by residual data","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31448"},{"cve":"CVE-2026-31449","month":"2026-04","title":"ext4: validate p_idx bounds in ext4_ext_correct_indexes","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31449"},{"cve":"CVE-2026-31450","month":"2026-04","title":"ext4: publish jinode after initialization","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31450"},{"cve":"CVE-2026-31451","month":"2026-04","title":"ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31451"},{"cve":"CVE-2026-31452","month":"2026-04","title":"ext4: convert inline data to extents when truncate exceeds inline size","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31452"},{"cve":"CVE-2026-31453","month":"2026-04","title":"xfs: avoid dereferencing log items after push callbacks","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31453"},{"cve":"CVE-2026-31454","month":"2026-04","title":"xfs: save ailp before dropping the AIL lock in push callbacks","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31454"},{"cve":"CVE-2026-31455","month":"2026-04","title":"xfs: stop reclaim before pushing AIL during unmount","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31455"},{"cve":"CVE-2026-31458","month":"2026-04","title":"mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0]","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31458"},{"cve":"CVE-2026-31461","month":"2026-04","title":"drm/amd/display: Fix drm_edid leak in amdgpu_dm","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31461"},{"cve":"CVE-2026-31462","month":"2026-04","title":"drm/amdgpu: prevent immediate PASID reuse case","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31462"},{"cve":"CVE-2026-31467","month":"2026-04","title":"erofs: add GFP_NOIO in the bio completion if needed","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31467"},{"cve":"CVE-2026-31469","month":"2026-04","title":"virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31469"},{"cve":"CVE-2026-31473","month":"2026-04","title":"media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31473"},{"cve":"CVE-2026-31474","month":"2026-04","title":"can: isotp: fix tx.buf use-after-free in isotp_sendmsg()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31474"},{"cve":"CVE-2026-31476","month":"2026-04","title":"ksmbd: do not expire session on binding failure","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31476"},{"cve":"CVE-2026-31480","month":"2026-04","title":"tracing: Fix potential deadlock in cpu hotplug with osnoise","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31480"},{"cve":"CVE-2026-31483","month":"2026-04","title":"s390/syscalls: Add spectre boundary for syscall dispatch table","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31483"},{"cve":"CVE-2026-31485","month":"2026-04","title":"spi: spi-fsl-lpspi: fix teardown order issue (UAF)","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31485"},{"cve":"CVE-2026-31486","month":"2026-04","title":"hwmon: (pmbus/core) Protect regulator operations with mutex","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31486"},{"cve":"CVE-2026-31487","month":"2026-04","title":"spi: use generic driver_override infrastructure","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31487"},{"cve":"CVE-2026-31488","month":"2026-04","title":"drm/amd/display: Do not skip unrelated mode changes in DSC validation","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31488"},{"cve":"CVE-2026-31489","month":"2026-04","title":"spi: meson-spicc: Fix double-put in remove path","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31489"},{"cve":"CVE-2026-31492","month":"2026-04","title":"RDMA/irdma: Initialize free_qp completion before using it","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31492"},{"cve":"CVE-2026-31493","month":"2026-04","title":"RDMA/efa: Fix use of completion ctx after free","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31493"},{"cve":"CVE-2026-31494","month":"2026-04","title":"net: macb: use the current queue number for stats","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31494"},{"cve":"CVE-2026-31495","month":"2026-04","title":"netfilter: ctnetlink: use netlink policy range checks","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31495"},{"cve":"CVE-2026-31496","month":"2026-04","title":"netfilter: nf_conntrack_expect: skip expectations in other netns via proc","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31496"},{"cve":"CVE-2026-31497","month":"2026-04","title":"Bluetooth: btusb: clamp SCO altsetting table indices","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31497"},{"cve":"CVE-2026-31498","month":"2026-04","title":"Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31498"},{"cve":"CVE-2026-31499","month":"2026-04","title":"Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-667"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31499"},{"cve":"CVE-2026-31500","month":"2026-04","title":"Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31500"},{"cve":"CVE-2026-31502","month":"2026-04","title":"team: fix header_ops type confusion with non-Ethernet ports","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31502"},{"cve":"CVE-2026-31503","month":"2026-04","title":"udp: Fix wildcard bind conflict check when using hash2","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31503"},{"cve":"CVE-2026-31504","month":"2026-04","title":"net: fix fanout UAF in packet_release() via NETDEV_UP race","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31504"},{"cve":"CVE-2026-31505","month":"2026-04","title":"iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31505"},{"cve":"CVE-2026-31506","month":"2026-04","title":"net: bcmasp: fix double free of WoL irq","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31506"},{"cve":"CVE-2026-31507","month":"2026-04","title":"net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31507"},{"cve":"CVE-2026-31508","month":"2026-04","title":"net: openvswitch: Avoid releasing netdev before teardown completes","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31508"},{"cve":"CVE-2026-31509","month":"2026-04","title":"nfc: nci: fix circular locking dependency in nci_close_device","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31509"},{"cve":"CVE-2026-31510","month":"2026-04","title":"Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31510"},{"cve":"CVE-2026-31512","month":"2026-04","title":"Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31512"},{"cve":"CVE-2026-31515","month":"2026-04","title":"af_key: validate families in pfkey_send_migrate()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31515"},{"cve":"CVE-2026-31516","month":"2026-04","title":"xfrm: prevent policy_hthresh.work from racing with netns teardown","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31516"},{"cve":"CVE-2026-31518","month":"2026-04","title":"esp: fix skb leak with espintcp and async crypto","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31518"},{"cve":"CVE-2026-31519","month":"2026-04","title":"btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31519"},{"cve":"CVE-2026-31520","month":"2026-04","title":"HID: apple: avoid memory leak in apple_report_fixup()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31520"},{"cve":"CVE-2026-31521","month":"2026-04","title":"module: Fix kernel panic when a symbol st_shndx is out of bounds","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31521"},{"cve":"CVE-2026-31522","month":"2026-04","title":"HID: magicmouse: avoid memory leak in magicmouse_report_fixup()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31522"},{"cve":"CVE-2026-31523","month":"2026-04","title":"nvme-pci: ensure we're polling a polled queue","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31523"},{"cve":"CVE-2026-31524","month":"2026-04","title":"HID: asus: avoid memory leak in asus_report_fixup()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31524"},{"cve":"CVE-2026-31525","month":"2026-04","title":"bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31525"},{"cve":"CVE-2026-31527","month":"2026-04","title":"driver core: platform: use generic driver_override infrastructure","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31527"},{"cve":"CVE-2026-31528","month":"2026-04","title":"perf: Make sure to use pmu_ctx->pmu for groups","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31528"},{"cve":"CVE-2026-31530","month":"2026-04","title":"cxl/port: Fix use after free of parent_port in cxl_detach_ep()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31530"},{"cve":"CVE-2026-31531","month":"2026-04","title":"ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31531"},{"cve":"CVE-2026-31532","month":"2026-04","title":"can: raw: fix ro->uniq use-after-free in raw_rcv()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31532"},{"cve":"CVE-2026-31533","month":"2026-04","title":"net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31533"},{"cve":"CVE-2026-31536","month":"2026-04","title":"smb: server: let send_done handle a completion without IB_SEND_SIGNALED","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31536"},{"cve":"CVE-2026-31537","month":"2026-04","title":"smb: server: make use of smbdirect_socket.send_io.bcredits","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31537"},{"cve":"CVE-2026-31540","month":"2026-04","title":"drm/i915/gt: Check set_default_submission() before deferencing","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31540"},{"cve":"CVE-2026-31545","month":"2026-04","title":"NFC: nxp-nci: allow GPIOs to sleep","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31545"},{"cve":"CVE-2026-31546","month":"2026-04","title":"net: bonding: fix NULL deref in bond_debug_rlb_hash_show","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31546"},{"cve":"CVE-2026-31548","month":"2026-04","title":"wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31548"},{"cve":"CVE-2026-31549","month":"2026-04","title":"i2c: cp2615: fix serial string NULL-deref at probe","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31549"},{"cve":"CVE-2026-31550","month":"2026-04","title":"pmdomain: bcm: bcm2835-power: Increase ASB control timeout","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31550"},{"cve":"CVE-2026-31551","month":"2026-04","title":"wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31551"},{"cve":"CVE-2026-31552","month":"2026-04","title":"wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31552"},{"cve":"CVE-2026-31555","month":"2026-04","title":"futex: Clear stale exiting pointer in futex_lock_pi() retry path","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31555"},{"cve":"CVE-2026-31557","month":"2026-04","title":"nvmet: move async event work off nvmet-wq","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31557"},{"cve":"CVE-2026-31560","month":"2026-04","title":"spi: spi-dw-dma: fix print error log when wait finish transaction","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31560"},{"cve":"CVE-2026-31563","month":"2026-04","title":"net: macb: Use dev_consume_skb_any() to free TX SKBs","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31563"},{"cve":"CVE-2026-31565","month":"2026-04","title":"RDMA/irdma: Fix deadlock during netdev reset with active connections","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31565"},{"cve":"CVE-2026-31566","month":"2026-04","title":"drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31566"},{"cve":"CVE-2026-31568","month":"2026-04","title":"s390/mm: Add missing secure storage access fixups for donated memory","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31568"},{"cve":"CVE-2026-31570","month":"2026-04","title":"can: gw: fix OOB heap access in cgw_csum_crc8_rel()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31570"},{"cve":"CVE-2026-31574","month":"2026-04","title":"clockevents: Add missing resets of the next_event_forced flag","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31574"},{"cve":"CVE-2026-31575","month":"2026-04","title":"mm/userfaultfd: fix hugetlb fault mutex hash calculation","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31575"},{"cve":"CVE-2026-31576","month":"2026-04","title":"media: hackrf: fix to not free memory after the device is registered in hackrf_probe()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31576"},{"cve":"CVE-2026-31577","month":"2026-04","title":"nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31577"},{"cve":"CVE-2026-31578","month":"2026-04","title":"media: as102: fix to not free memory after the device is registered in as102_usb_probe()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31578"},{"cve":"CVE-2026-31579","month":"2026-04","title":"wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31579"},{"cve":"CVE-2026-31580","month":"2026-04","title":"bcache: fix cached_dev.sb_bio use-after-free and crash","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31580"},{"cve":"CVE-2026-31581","month":"2026-04","title":"ALSA: 6fire: fix use-after-free on disconnect","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31581"},{"cve":"CVE-2026-31582","month":"2026-04","title":"hwmon: (powerz) Fix use-after-free on USB disconnect","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31582"},{"cve":"CVE-2026-31583","month":"2026-04","title":"media: em28xx: fix use-after-free in em28xx_v4l2_open()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31583"},{"cve":"CVE-2026-31584","month":"2026-04","title":"media: mediatek: vcodec: fix use-after-free in encoder release path","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31584"},{"cve":"CVE-2026-31585","month":"2026-04","title":"media: vidtv: fix nfeeds state corruption on start_streaming failure","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31585"},{"cve":"CVE-2026-31586","month":"2026-04","title":"mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31586"},{"cve":"CVE-2026-31587","month":"2026-04","title":"ASoC: qcom: q6apm: move component registration to unmanaged version","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31587"},{"cve":"CVE-2026-31588","month":"2026-04","title":"KVM: x86: Use scratch field in MMIO fragment to hold small write values","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31588"},{"cve":"CVE-2026-31589","month":"2026-04","title":"mm: call ->free_folio() directly in folio_unmap_invalidate()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31589"},{"cve":"CVE-2026-31590","month":"2026-04","title":"KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31590"},{"cve":"CVE-2026-31591","month":"2026-04","title":"KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31591"},{"cve":"CVE-2026-31592","month":"2026-04","title":"KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31592"},{"cve":"CVE-2026-31593","month":"2026-04","title":"KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31593"},{"cve":"CVE-2026-31594","month":"2026-04","title":"PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31594"},{"cve":"CVE-2026-31595","month":"2026-04","title":"PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31595"},{"cve":"CVE-2026-31596","month":"2026-04","title":"ocfs2: handle invalid dinode in ocfs2_group_extend","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31596"},{"cve":"CVE-2026-31597","month":"2026-04","title":"ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31597"},{"cve":"CVE-2026-31598","month":"2026-04","title":"ocfs2: fix possible deadlock between unlink and dio_end_io_write","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31598"},{"cve":"CVE-2026-31599","month":"2026-04","title":"media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31599"},{"cve":"CVE-2026-31600","month":"2026-04","title":"arm64: mm: Handle invalid large leaf mappings correctly","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31600"},{"cve":"CVE-2026-31601","month":"2026-04","title":"vfio/xe: Reorganize the init to decouple migration from reset","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31601"},{"cve":"CVE-2026-31602","month":"2026-04","title":"ALSA: ctxfi: Limit PTP to a single page","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31602"},{"cve":"CVE-2026-31603","month":"2026-04","title":"staging: sm750fb: fix division by zero in ps_to_hz()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31603"},{"cve":"CVE-2026-31604","month":"2026-04","title":"wifi: rtw88: fix device leak on probe failure","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31604"},{"cve":"CVE-2026-31605","month":"2026-04","title":"fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31605"},{"cve":"CVE-2026-31606","month":"2026-04","title":"usb: gadget: f_hid: don't call cdev_init while cdev in use","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31606"},{"cve":"CVE-2026-31607","month":"2026-04","title":"usbip: validate number_of_packets in usbip_pack_ret_submit()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31607"},{"cve":"CVE-2026-31608","month":"2026-04","title":"smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31608"},{"cve":"CVE-2026-31609","month":"2026-04","title":"smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31609"},{"cve":"CVE-2026-31610","month":"2026-04","title":"ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31610"},{"cve":"CVE-2026-31611","month":"2026-04","title":"ksmbd: require 3 sub-authorities before reading sub_auth[2]","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31611"},{"cve":"CVE-2026-31612","month":"2026-04","title":"ksmbd: validate EaNameLength in smb2_get_ea()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31612"},{"cve":"CVE-2026-31613","month":"2026-04","title":"smb: client: fix OOB reads parsing symlink error response","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31613"},{"cve":"CVE-2026-31615","month":"2026-04","title":"usb: gadget: renesas_usb3: validate endpoint index in standard request handlers","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31615"},{"cve":"CVE-2026-31616","month":"2026-04","title":"usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31616"},{"cve":"CVE-2026-31617","month":"2026-04","title":"usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31617"},{"cve":"CVE-2026-31618","month":"2026-04","title":"fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31618"},{"cve":"CVE-2026-31619","month":"2026-04","title":"ALSA: fireworks: bound device-supplied status before string array lookup","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31619"},{"cve":"CVE-2026-31620","month":"2026-04","title":"ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31620"},{"cve":"CVE-2026-31621","month":"2026-04","title":"bnge: return after auxiliary_device_uninit() in error path","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31621"},{"cve":"CVE-2026-31622","month":"2026-04","title":"NFC: digital: Bounds check NFC-A cascade depth in SDD response handler","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31622"},{"cve":"CVE-2026-31623","month":"2026-04","title":"net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31623"},{"cve":"CVE-2026-31624","month":"2026-04","title":"HID: core: clamp report_size in s32ton() to avoid undefined shift","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31624"},{"cve":"CVE-2026-31625","month":"2026-04","title":"HID: alps: fix NULL pointer dereference in alps_raw_event()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31625"},{"cve":"CVE-2026-31626","month":"2026-04","title":"staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31626"},{"cve":"CVE-2026-31627","month":"2026-04","title":"i2c: s3c24xx: check the size of the SMBUS message before using it","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31627"},{"cve":"CVE-2026-31628","month":"2026-04","title":"x86/CPU: Fix FPDSS on Zen1","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31628"},{"cve":"CVE-2026-31629","month":"2026-04","title":"nfc: llcp: add missing return after LLCP_CLOSED checks","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31629"},{"cve":"CVE-2026-31630","month":"2026-04","title":"rxrpc: proc: size address buffers for %pISpc output","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31630"},{"cve":"CVE-2026-31634","month":"2026-04","title":"rxrpc: fix reference count leak in rxrpc_server_keyring()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31634"},{"cve":"CVE-2026-31637","month":"2026-04","title":"rxrpc: reject undecryptable rxkad response tickets","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31637"},{"cve":"CVE-2026-31638","month":"2026-04","title":"rxrpc: Only put the call ref if one was acquired","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31638"},{"cve":"CVE-2026-31639","month":"2026-04","title":"rxrpc: Fix key reference count leak from call->key","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31639"},{"cve":"CVE-2026-31642","month":"2026-04","title":"rxrpc: Fix call removal to use RCU safe deletion","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31642"},{"cve":"CVE-2026-31645","month":"2026-04","title":"net: lan966x: fix page pool leak in error paths","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31645"},{"cve":"CVE-2026-31646","month":"2026-04","title":"net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31646"},{"cve":"CVE-2026-31648","month":"2026-04","title":"mm: filemap: fix nr_pages calculation overflow in filemap_map_pages()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31648"},{"cve":"CVE-2026-31649","month":"2026-04","title":"net: stmmac: fix integer underflow in chain mode","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31649"},{"cve":"CVE-2026-31651","month":"2026-04","title":"mmc: vub300: fix NULL-deref on disconnect","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31651"},{"cve":"CVE-2026-31655","month":"2026-04","title":"pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31655"},{"cve":"CVE-2026-31656","month":"2026-04","title":"drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31656"},{"cve":"CVE-2026-31657","month":"2026-04","title":"batman-adv: hold claim backbone gateways by reference","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31657"},{"cve":"CVE-2026-31658","month":"2026-04","title":"net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31658"},{"cve":"CVE-2026-31659","month":"2026-04","title":"batman-adv: reject oversized global TT response buffers","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31659"},{"cve":"CVE-2026-31660","month":"2026-04","title":"nfc: pn533: allocate rx skb before consuming bytes","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31660"},{"cve":"CVE-2026-31661","month":"2026-04","title":"wifi: brcmsmac: Fix dma_free_coherent() size","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31661"},{"cve":"CVE-2026-31662","month":"2026-04","title":"tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31662"},{"cve":"CVE-2026-31663","month":"2026-04","title":"xfrm: hold dev ref until after transport_finish NF_HOOK","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31663"},{"cve":"CVE-2026-31664","month":"2026-04","title":"xfrm: clear trailing padding in build_polexpire()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31664"},{"cve":"CVE-2026-31665","month":"2026-04","title":"netfilter: nft_ct: fix use-after-free in timeout object destroy","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31665"},{"cve":"CVE-2026-31667","month":"2026-04","title":"Input: uinput - fix circular locking dependency with ff-core","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31667"},{"cve":"CVE-2026-31668","month":"2026-04","title":"seg6: separate dst_cache for input and output paths in seg6 lwtunnel","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31668"},{"cve":"CVE-2026-31669","month":"2026-04","title":"mptcp: fix slab-use-after-free in __inet_lookup_established","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31669"},{"cve":"CVE-2026-31670","month":"2026-04","title":"net: rfkill: prevent unlimited numbers of rfkill events from being created","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31670"},{"cve":"CVE-2026-31671","month":"2026-04","title":"xfrm_user: fix info leak in build_report()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31671"},{"cve":"CVE-2026-31672","month":"2026-04","title":"wifi: rt2x00usb: fix devres lifetime","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31672"},{"cve":"CVE-2026-31673","month":"2026-04","title":"af_unix: read UNIX_DIAG_VFS data under unix_state_lock","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31673"},{"cve":"CVE-2026-31674","month":"2026-04","title":"netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31674"},{"cve":"CVE-2026-31675","month":"2026-04","title":"net/sched: sch_netem: fix out-of-bounds access in packet corruption","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31675"},{"cve":"CVE-2026-31676","month":"2026-04","title":"rxrpc: only handle RESPONSE during service challenge","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31676"},{"cve":"CVE-2026-31677","month":"2026-04","title":"crypto: af_alg - limit RX SG extraction by receive buffer budget","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31677"},{"cve":"CVE-2026-31678","month":"2026-04","title":"openvswitch: defer tunnel netdev_put to RCU release","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31678"},{"cve":"CVE-2026-31679","month":"2026-04","title":"openvswitch: validate MPLS set/set_masked payload length","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31679"},{"cve":"CVE-2026-31680","month":"2026-04","title":"net: ipv6: flowlabel: defer exclusive option free until RCU teardown","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31680"},{"cve":"CVE-2026-31681","month":"2026-04","title":"netfilter: xt_multiport: validate range encoding in checkentry","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31681"},{"cve":"CVE-2026-31682","month":"2026-04","title":"bridge: br_nd_send: linearize skb before parsing ND options","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31682"},{"cve":"CVE-2026-31684","month":"2026-04","title":"net: sched: act_csum: validate nested VLAN headers","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31684"},{"cve":"CVE-2026-31685","month":"2026-04","title":"netfilter: ip6t_eui64: reject invalid MAC header for all packets","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31685"},{"cve":"CVE-2026-31686","month":"2026-04","title":"mm/kasan: fix double free for kasan pXds","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31686"},{"cve":"CVE-2026-31688","month":"2026-04","title":"driver core: enforce device_lock for driver_match_device()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31688"},{"cve":"CVE-2026-31689","month":"2026-04","title":"EDAC/mc: Fix error path ordering in edac_mc_alloc()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31689"},{"cve":"CVE-2026-31692","month":"2026-04","title":"rtnetlink: add missing netlink_ns_capable() check for peer netns","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31692"},{"cve":"CVE-2026-31789","month":"2026-04","title":"Heap Buffer Overflow in Hexadecimal Conversion","family":"Open Source Software","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31789"},{"cve":"CVE-2026-31790","month":"2026-04","title":"Incorrect Failure Handling in RSA KEM RSASVE Encapsulation","family":"Open Source Software","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-754"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31790"},{"cve":"CVE-2026-3184","month":"2026-04","title":"Util-linux: util-linux: access control bypass due to improper hostname canonicalization","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U","cwe":["CWE-289"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3184"},{"cve":"CVE-2026-32147","month":"2026-04","title":"SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32147"},{"cve":"CVE-2026-32148","month":"2026-04","title":"Lockfile checksums not verified in Hex allows dependency integrity bypass","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-354"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32148"},{"cve":"CVE-2026-3219","month":"2026-04","title":"pip doesn't reject concatenated ZIP and tar archives","family":"Open Source Software","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3219"},{"cve":"CVE-2026-32280","month":"2026-04","title":"Unexpected work during chain building in crypto/x509","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32280"},{"cve":"CVE-2026-32281","month":"2026-04","title":"Inefficient policy validation in crypto/x509","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32281"},{"cve":"CVE-2026-32282","month":"2026-04","title":"TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32282"},{"cve":"CVE-2026-32283","month":"2026-04","title":"Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32283"},{"cve":"CVE-2026-32288","month":"2026-04","title":"Unbounded allocation for old GNU sparse in archive/tar","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32288"},{"cve":"CVE-2026-32289","month":"2026-04","title":"JsBraceDepth Context Tracking Bugs (XSS) in html/template","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32289"},{"cve":"CVE-2026-32316","month":"2026-04","title":"jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32316"},{"cve":"CVE-2026-33555","month":"2026-04","title":"An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced content-length when the stream is closed via a frame with an empty payload. This can cause desynchronization issues with the backend server and could be used for request smuggling. The earliest affected version is 2.6.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","cwe":["CWE-130"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33555"},{"cve":"CVE-2026-33810","month":"2026-04","title":"Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33810"},{"cve":"CVE-2026-33845","month":"2026-04","title":"Gnutls: gnutls: denial of service via dtls zero-length fragment","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:U","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33845"},{"cve":"CVE-2026-33947","month":"2026-04","title":"jq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted()","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33947"},{"cve":"CVE-2026-33948","month":"2026-04","title":"jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-170"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33948"},{"cve":"CVE-2026-33999","month":"2026-04","title":"Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handling","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33999"},{"cve":"CVE-2026-34001","month":"2026-04","title":"Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-825"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34001"},{"cve":"CVE-2026-34003","month":"2026-04","title":"Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory access","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34003"},{"cve":"CVE-2026-34267","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34267"},{"cve":"CVE-2026-34270","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34270"},{"cve":"CVE-2026-34271","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34271"},{"cve":"CVE-2026-34276","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34276"},{"cve":"CVE-2026-34278","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34278"},{"cve":"CVE-2026-34293","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).  Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34293"},{"cve":"CVE-2026-34303","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34303"},{"cve":"CVE-2026-34304","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34304"},{"cve":"CVE-2026-34308","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34308"},{"cve":"CVE-2026-34317","month":"2026-04","title":"Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Shell. CVSS 3.1 Base Score 5.0 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":5.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-404"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34317"},{"cve":"CVE-2026-34445","month":"2026-04","title":"ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34445"},{"cve":"CVE-2026-34446","month":"2026-04","title":"ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34446"},{"cve":"CVE-2026-34591","month":"2026-04","title":"Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34591"},{"cve":"CVE-2026-34743","month":"2026-04","title":"XZ Utils: Buffer overflow in lzma_index_append()","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34743"},{"cve":"CVE-2026-34757","month":"2026-04","title":"LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34757"},{"cve":"CVE-2026-34933","month":"2026-04","title":"Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemon","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34933"},{"cve":"CVE-2026-34978","month":"2026-04","title":"OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache)","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34978"},{"cve":"CVE-2026-34979","month":"2026-04","title":"OpenPrinting CUPS: Heap overflow in `get_options()`","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34979"},{"cve":"CVE-2026-34980","month":"2026-04","title":"OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34980"},{"cve":"CVE-2026-34982","month":"2026-04","title":"Vim modeline bypass via various options affects Vim < 9.2.0276","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34982"},{"cve":"CVE-2026-34990","month":"2026-04","title":"OpenPrinting CUPS: Local print admin token disclosure using temporary printers","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34990"},{"cve":"CVE-2026-35177","month":"2026-04","title":"Path traversal issue with zip.vim in Vim","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35177"},{"cve":"CVE-2026-35199","month":"2026-04","title":"SymCrypt SymCryptXmssSign function - Heap overflow via 64->32-bit leaf-count truncation","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35199"},{"cve":"CVE-2026-35201","month":"2026-04","title":"Discount has an Out-of-bounds Read in rdiscount","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35201"},{"cve":"CVE-2026-35206","month":"2026-04","title":"Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segment","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35206"},{"cve":"CVE-2026-35236","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35236"},{"cve":"CVE-2026-35237","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35237"},{"cve":"CVE-2026-35238","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35238"},{"cve":"CVE-2026-35239","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35239"},{"cve":"CVE-2026-35240","month":"2026-04","title":"Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","family":"Open Source Software","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35240"},{"cve":"CVE-2026-35385","month":"2026-04","title":"In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (preserve mode).","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-281"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35385"},{"cve":"CVE-2026-35386","month":"2026-04","title":"In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in ssh_config.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-696"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35386"},{"cve":"CVE-2026-35387","month":"2026-04","title":"OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-670"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35387"},{"cve":"CVE-2026-35388","month":"2026-04","title":"OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U","cwe":["CWE-420"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35388"},{"cve":"CVE-2026-35414","month":"2026-04","title":"OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-670"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35414"},{"cve":"CVE-2026-35469","month":"2026-04","title":"SpdyStream: DOS on CRI","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35469"},{"cve":"CVE-2026-35535","month":"2026-04","title":"In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-271"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35535"},{"cve":"CVE-2026-35611","month":"2026-04","title":"Addressable has a Regular Expression Denial of Service in Addressable templates","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-1333"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35611"},{"cve":"CVE-2026-37555","month":"2026-04","title":"An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-37555"},{"cve":"CVE-2026-3832","month":"2026-04","title":"Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":["CWE-179"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3832"},{"cve":"CVE-2026-39314","month":"2026-04","title":"CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39314"},{"cve":"CVE-2026-39316","month":"2026-04","title":"CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39316"},{"cve":"CVE-2026-39853","month":"2026-04","title":"osslsigncode has a Stack Buffer Overflow via Unbounded Digest Copy During Signature Verification","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39853"},{"cve":"CVE-2026-39855","month":"2026-04","title":"osslsigncode has an Integer Underflow in PE Page Hash Calculation Can Cause Out-of-Bounds Read","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39855"},{"cve":"CVE-2026-39856","month":"2026-04","title":"osslsigncode has an Out-of-Bounds Read via Unvalidated Section Bounds in PE Page Hash Calculation","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39856"},{"cve":"CVE-2026-39881","month":"2026-04","title":"Vim Ex command injection in Vims NetBeans integration","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:N","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39881"},{"cve":"CVE-2026-39882","month":"2026-04","title":"OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodies","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39882"},{"cve":"CVE-2026-39956","month":"2026-04","title":"jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39956"},{"cve":"CVE-2026-39979","month":"2026-04","title":"jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39979"},{"cve":"CVE-2026-40024","month":"2026-04","title":"Sleuth Kit tsk_recover Path Traversal","family":"Open Source Software","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40024"},{"cve":"CVE-2026-40025","month":"2026-04","title":"Sleuth Kit APFS Keybag Parser Out-of-Bounds Read","family":"Open Source Software","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40025"},{"cve":"CVE-2026-40026","month":"2026-04","title":"Sleuth Kit ISO9660 SUSP Extension Reference Out-of-Bounds Read","family":"Open Source Software","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40026"},{"cve":"CVE-2026-40164","month":"2026-04","title":"jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed","family":"Mariner","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-328"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40164"},{"cve":"CVE-2026-40179","month":"2026-04","title":"Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40179"},{"cve":"CVE-2026-40225","month":"2026-04","title":"In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-669"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40225"},{"cve":"CVE-2026-40226","month":"2026-04","title":"In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-348"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40226"},{"cve":"CVE-2026-40355","month":"2026-04","title":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parse_nego_message.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40355"},{"cve":"CVE-2026-40356","month":"2026-04","title":"In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40356"},{"cve":"CVE-2026-40385","month":"2026-04","title":"In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40385"},{"cve":"CVE-2026-40386","month":"2026-04","title":"In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40386"},{"cve":"CVE-2026-40393","month":"2026-04","title":"In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40393"},{"cve":"CVE-2026-40706","month":"2026-04","title":"In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs_build_permissions_posix() in acls.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered on the READ path (stat, readdir, open) when processing a security descriptor with multiple ACCESS_DENIED ACEs containing WRITE_OWNER from distinct group SIDs.","family":"Mariner","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40706"},{"cve":"CVE-2026-40890","month":"2026-04","title":"github.com/gomarkdown/markdown: Out-of-bounds Read in SmartypantsRenderer","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40890"},{"cve":"CVE-2026-41035","month":"2026-04","title":"In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","cwe":["CWE-130"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41035"},{"cve":"CVE-2026-41066","month":"2026-04","title":"lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-611"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41066"},{"cve":"CVE-2026-41079","month":"2026-04","title":"OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41079"},{"cve":"CVE-2026-41080","month":"2026-04","title":"libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-331"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41080"},{"cve":"CVE-2026-41140","month":"2026-04","title":"Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41140"},{"cve":"CVE-2026-41205","month":"2026-04","title":"Mako: Path traversal via double-slash URI prefix in TemplateLookup","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41205"},{"cve":"CVE-2026-41254","month":"2026-04","title":"Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-696"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41254"},{"cve":"CVE-2026-41411","month":"2026-04","title":"Vim: Command injection via backtick expansion in tag filenames","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41411"},{"cve":"CVE-2026-41526","month":"2026-04","title":"In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a shell command. This parsing does not adequately handle metacharacters, leading to an escape from the shell. All applications relying on this method in a security-critical path to handle user input are affected and could be exploited. In particular, because sendInput() sends a string to a terminal, a control character such as \\x01 can be used during injection.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cwe":["CWE-150"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41526"},{"cve":"CVE-2026-41602","month":"2026-04","title":"Apache Thrift: Go TFramedTransport uint32 overflow","family":"Open Source Software","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41602"},{"cve":"CVE-2026-41603","month":"2026-04","title":"Apache Thrift: Java TSSLTransportFactory hostname verification","family":"Mariner","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-297"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41603"},{"cve":"CVE-2026-41604","month":"2026-04","title":"Apache Thrift: Swift Range crash in skip()","family":"Mariner","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41604"},{"cve":"CVE-2026-41605","month":"2026-04","title":"Apache Thrift: Swift Compact Protocol integer overflow","family":"Mariner","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41605"},{"cve":"CVE-2026-41606","month":"2026-04","title":"Apache Thrift: c_glib dispatch stack overflow","family":"Mariner","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41606"},{"cve":"CVE-2026-41607","month":"2026-04","title":"Apache Thrift: C++ JSON OOB read","family":"Mariner","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41607"},{"cve":"CVE-2026-41636","month":"2026-04","title":"Apache Thrift: Node.js skip() recursion","family":"Mariner","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41636"},{"cve":"CVE-2026-41676","month":"2026-04","title":"rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41676"},{"cve":"CVE-2026-41677","month":"2026-04","title":"rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41677"},{"cve":"CVE-2026-41678","month":"2026-04","title":"rust-openssl: Incorrect bounds assertion in aes key wrap","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41678"},{"cve":"CVE-2026-41681","month":"2026-04","title":"rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41681"},{"cve":"CVE-2026-41898","month":"2026-04","title":"rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41898"},{"cve":"CVE-2026-41989","month":"2026-04","title":"Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41989"},{"cve":"CVE-2026-42798","month":"2026-04","title":"Little CMS (lcms2) 2.16 through 2.18 before 2.19 has an integer overflow in ParseCube in cmscgats.c.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42798"},{"cve":"CVE-2026-4786","month":"2026-04","title":"Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()","family":"Open Source Software","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4786"},{"cve":"CVE-2026-4878","month":"2026-04","title":"Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4878"},{"cve":"CVE-2026-5160","month":"2026-04","title":"Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting (XSS) due to improper ordering of URL validation and normalization. The renderer validates link destinations using a prefix-based check (IsDangerousURL) before resolving HTML entities. This allows an attacker to bypass protocol filtering by encoding dangerous schemes using HTML5 named character references. For example, a payload such as javascript&colon;alert(1) is not recognized as dangerous during validation, leading to arbitrary script execution in the context of applications that render the URL.","family":"Open Source Software","component":"Mariner","cna":"snyk","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5160"},{"cve":"CVE-2026-5358","month":"2026-04","title":"Static buffer overflow in deprecated nis_local_principal","family":"Open Source Software","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cwe":["CWE-120"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5358"},{"cve":"CVE-2026-5435","month":"2026-04","title":"Potential buffer overflow in ns_sprintrrf TSIG handling path","family":"Open Source Software","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5435"},{"cve":"CVE-2026-5450","month":"2026-04","title":"scanf %mc off-by-one heap buffer overflow","family":"Open Source Software","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5450"},{"cve":"CVE-2026-5704","month":"2026-04","title":"Tar: tar: hidden file injection via crafted archives","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N","cwe":["CWE-434"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5704"},{"cve":"CVE-2026-5928","month":"2026-04","title":"Static buffer overflow in deprecated nis_local_principal","family":"Open Source Software","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-127"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5928"},{"cve":"CVE-2026-5958","month":"2026-04","title":"Race Condition in GNU Sed","family":"Open Source Software","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5958"},{"cve":"CVE-2026-6019","month":"2026-04","title":"BaseCookie.js_output() does not neutralize embedded characters","family":"Open Source Software","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-150"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6019"},{"cve":"CVE-2026-6100","month":"2026-04","title":"Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure","family":"Open Source Software","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6100"},{"cve":"CVE-2026-6238","month":"2026-04","title":"Buffer overread in ns_printrrf with corrupted RDATA field","family":"Open Source Software","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6238"},{"cve":"CVE-2026-6357","month":"2026-04","title":"pip self-update functionality can import newly installed modules after wheel installation","family":"Open Source Software","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6357"},{"cve":"CVE-2026-6383","month":"2026-04","title":"Kubevirt: kubevirt: unauthorized subresource access due to improper rbac evaluation","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6383"},{"cve":"CVE-2026-6409","month":"2026-04","title":"Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input","family":"Open Source Software","component":"Mariner","cna":"Google","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6409"},{"cve":"CVE-2026-6507","month":"2026-04","title":"Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6507"},{"cve":"CVE-2026-6842","month":"2026-04","title":"Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-732"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6842"},{"cve":"CVE-2026-6843","month":"2026-04","title":"Nano: nano: format string vulnerability leads to denial of service","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-134"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6843"},{"cve":"CVE-2026-6845","month":"2026-04","title":"Binutils: binutils: denial of service via crafted elf file","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6845"},{"cve":"CVE-2026-6846","month":"2026-04","title":"Binutils: binutils: arbitrary code execution via malformed xcoff object file processing","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6846"},{"cve":"CVE-2026-6861","month":"2026-04","title":"Emacs: emacs: memory corruption vulnerability when processing svg css","family":"Mariner","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H/E:U","cwe":["CWE-193"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6861"},{"cve":"CVE-2026-7246","month":"2026-04","title":"Pallets Click contains a command injection via Unsanitized Filename \"click.edit()\"","family":"Other","component":"Mariner","cna":"certcc","label":"(none)","labels":[],"severity":"Important","cvss":7.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7246"},{"cve":"CVE-2026-31477","month":"2026-04","title":"ksmbd: fix memory leaks and NULL deref in smb2_lock()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31477"},{"cve":"CVE-2026-31478","month":"2026-04","title":"ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31478"},{"cve":"CVE-2026-35549","month":"2026-04","title":"","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35549"},{"cve":"CVE-2026-40255","month":"2026-04","title":"@adonisjs/http-server has an Open Redirect vulnerability","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-601"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40255"},{"cve":"CVE-2026-41907","month":"2026-04","title":"uuid: Missing buffer bounds check in `v3`/`v5`/`v6` when `buf` is provided","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-823"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41907"},{"cve":"CVE-2026-5392","month":"2026-04","title":"wolfSSL heap OOB read in PKCS7 SignedData streaming","family":"Open Source Software","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5392"},{"cve":"CVE-2026-5448","month":"2026-04","title":"1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore","family":"Open Source Software","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5448"},{"cve":"CVE-2025-66442","month":"2026-04","title":"In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature. TF-PSA-Crypto through 1.0.0 is also affected.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-385"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-66442"},{"cve":"CVE-2026-25834","month":"2026-04","title":"Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25834"},{"cve":"CVE-2026-25835","month":"2026-04","title":"Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-335"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25835"},{"cve":"CVE-2026-34876","month":"2026-04","title":"An issue was discovered in Mbed TLS 3.x before 3.6.6. An out-of-bounds read vulnerability in mbedtls_ccm_finish() in library/ccm.c allows attackers to obtain adjacent CCM context data via invocation of the multipart CCM API with an oversized tag_len parameter. This is caused by missing validation of the tag_len parameter against the size of the internal 16-byte authentication buffer. The issue affects the public multipart CCM API in Mbed TLS 3.x, where mbedtls_ccm_finish() can be invoked directly by applications. In Mbed TLS 4.x versions prior to the fix, the same missing validation exists in the internal implementation; however, the function is not exposed as part of the public API. Exploitation requires application-level invocation of the multipart CCM API.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34876"},{"cve":"CVE-2025-14179","month":"2026-05","title":"SQL injection in pdo_firebird via NUL bytes in quoted strings","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-14179"},{"cve":"CVE-2025-15649","month":"2026-05","title":"IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date","family":"Open Source Software","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-248"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-15649"},{"cve":"CVE-2025-71272","month":"2026-05","title":"most: core: fix resource leak in most_register_interface error paths","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71272"},{"cve":"CVE-2025-71273","month":"2026-05","title":"wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71273"},{"cve":"CVE-2025-71285","month":"2026-05","title":"net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71285"},{"cve":"CVE-2025-71289","month":"2026-05","title":"fs/ntfs3: handle attr_set_size() errors when truncating files","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71289"},{"cve":"CVE-2025-71290","month":"2026-05","title":"misc: ti_fpc202: fix a potential memory leak in probe function","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71290"},{"cve":"CVE-2025-71293","month":"2026-05","title":"drm/amdgpu/ras: Move ras data alloc before bad page check","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71293"},{"cve":"CVE-2025-71294","month":"2026-05","title":"drm/amdgpu: fix NULL pointer issue buffer funcs","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71294"},{"cve":"CVE-2025-71299","month":"2026-05","title":"spi: cadence-quadspi: Parse DT for flashes with the rest of the DT parsing","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71299"},{"cve":"CVE-2025-71302","month":"2026-05","title":"drm/panthor: fix for dma-fence safe access rules","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71302"},{"cve":"CVE-2025-71305","month":"2026-05","title":"drm/display/dp_mst: Add protection against 0 vcpi","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71305"},{"cve":"CVE-2026-10028","month":"2026-05","title":"Glib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificate chain","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10028"},{"cve":"CVE-2026-2291","month":"2026-05","title":"CVE-2026-2291","family":"Open Source Software","component":"Mariner","cna":"certcc","label":"(none)","labels":[],"severity":"Moderate","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2291"},{"cve":"CVE-2026-23479","month":"2026-05","title":"redis-server use-after-free in unblock client flow may allow remote code execution","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23479"},{"cve":"CVE-2026-23631","month":"2026-05","title":"redis-server Lua use-after-free may allow remote code execution","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23631"},{"cve":"CVE-2026-23918","month":"2026-05","title":"Apache HTTP Server: http2: double free and possible RCE on early reset","family":"Open Source Software","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23918"},{"cve":"CVE-2026-24072","month":"2026-05","title":"Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr","family":"Open Source Software","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":["CWE-269"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24072"},{"cve":"CVE-2026-25243","month":"2026-05","title":"redis-server RESTORE invalid memory access may allow remote code execution","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25243"},{"cve":"CVE-2026-25588","month":"2026-05","title":"RedisTimeSeries RESTORE invalid memory access may allow remote code execution","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25588"},{"cve":"CVE-2026-25589","month":"2026-05","title":"RedisBloom RESTORE invalid memory access may allow remote code execution","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25589"},{"cve":"CVE-2026-25680","month":"2026-05","title":"Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25680"},{"cve":"CVE-2026-25681","month":"2026-05","title":"Invoking  incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25681"},{"cve":"CVE-2026-27136","month":"2026-05","title":"Invoking  duplicate attributes can cause XSS in golang.org/x/net/html","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27136"},{"cve":"CVE-2026-29168","month":"2026-05","title":"Apache HTTP Server: mod_md unrestricted OCSP response","family":"Open Source Software","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-29168"},{"cve":"CVE-2026-29169","month":"2026-05","title":"Apache HTTP Server: mod_dav_lock indirect lock crash","family":"Open Source Software","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-29169"},{"cve":"CVE-2026-29518","month":"2026-05","title":"Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write","family":"Open Source Software","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-29518"},{"cve":"CVE-2026-3039","month":"2026-05","title":"BIND 9 server memory exhaustion during GSS-API TKEY negotiation","family":"Open Source Software","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-771"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3039"},{"cve":"CVE-2026-31694","month":"2026-05","title":"fuse: reject oversized dirents in page cache","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31694"},{"cve":"CVE-2026-31696","month":"2026-05","title":"rxrpc: Fix missing validation of ticket length in non-XDR key preparsing","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31696"},{"cve":"CVE-2026-31697","month":"2026-05","title":"crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31697"},{"cve":"CVE-2026-31698","month":"2026-05","title":"crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31698"},{"cve":"CVE-2026-31699","month":"2026-05","title":"crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31699"},{"cve":"CVE-2026-31700","month":"2026-05","title":"net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31700"},{"cve":"CVE-2026-31705","month":"2026-05","title":"ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31705"},{"cve":"CVE-2026-31706","month":"2026-05","title":"ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31706"},{"cve":"CVE-2026-31707","month":"2026-05","title":"ksmbd: validate response sizes in ipc_validate_msg()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31707"},{"cve":"CVE-2026-31708","month":"2026-05","title":"smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31708"},{"cve":"CVE-2026-31709","month":"2026-05","title":"smb: client: validate the whole DACL before rewriting it in cifsacl","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31709"},{"cve":"CVE-2026-31711","month":"2026-05","title":"smb: server: fix active_num_conn leak on transport allocation failure","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31711"},{"cve":"CVE-2026-31712","month":"2026-05","title":"ksmbd: require minimum ACE size in smb_check_perm_dacl()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31712"},{"cve":"CVE-2026-31715","month":"2026-05","title":"f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31715"},{"cve":"CVE-2026-31717","month":"2026-05","title":"ksmbd: validate owner of durable handle on reconnect","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31717"},{"cve":"CVE-2026-31718","month":"2026-05","title":"ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31718"},{"cve":"CVE-2026-31722","month":"2026-05","title":"usb: gadget: f_rndis: Fix net_device lifecycle with device_move","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31722"},{"cve":"CVE-2026-31723","month":"2026-05","title":"usb: gadget: f_subset: Fix net_device lifecycle with device_move","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31723"},{"cve":"CVE-2026-31724","month":"2026-05","title":"usb: gadget: f_eem: Fix net_device lifecycle with device_move","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31724"},{"cve":"CVE-2026-31725","month":"2026-05","title":"usb: gadget: f_ecm: Fix net_device lifecycle with device_move","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31725"},{"cve":"CVE-2026-31729","month":"2026-05","title":"usb: typec: ucsi: validate connector number in ucsi_notify_common()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31729"},{"cve":"CVE-2026-31767","month":"2026-05","title":"drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-369"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31767"},{"cve":"CVE-2026-31771","month":"2026-05","title":"Bluetooth: hci_event: move wake reason storage into validated event handlers","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31771"},{"cve":"CVE-2026-31777","month":"2026-05","title":"ALSA: ctxfi: Check the error for index mapping","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31777"},{"cve":"CVE-2026-32792","month":"2026-05","title":"Packet of death with DNSCrypt","family":"Open Source Software","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-166"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32792"},{"cve":"CVE-2026-32934","month":"2026-05","title":"CoreDNS DNS-over-QUIC unbounded goroutine growth leads to denial of service","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32934"},{"cve":"CVE-2026-32936","month":"2026-05","title":"CoreDNS DoH GET path missing size validation causes CPU and memory amplification","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32936"},{"cve":"CVE-2026-33006","month":"2026-05","title":"Apache HTTP Server: mod_auth_digest timing attack","family":"Open Source Software","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U","cwe":["CWE-208"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33006"},{"cve":"CVE-2026-33007","month":"2026-05","title":"Apache HTTP Server: mod_authn_socache crash","family":"Open Source Software","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33007"},{"cve":"CVE-2026-33079","month":"2026-05","title":"Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titles","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-1333"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33079"},{"cve":"CVE-2026-33190","month":"2026-05","title":"CoreDNS TSIG authentication bypass on encrypted DNS transports","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-303"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33190"},{"cve":"CVE-2026-33278","month":"2026-05","title":"Possible arbitrary code execution during DNSSEC validation","family":"Open Source Software","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33278"},{"cve":"CVE-2026-33489","month":"2026-05","title":"CoreDNS transfer plugin subzone ACL bypass via lexicographic zone comparison","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33489"},{"cve":"CVE-2026-33523","month":"2026-05","title":"Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status line","family":"Open Source Software","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U","cwe":["CWE-443"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33523"},{"cve":"CVE-2026-33811","month":"2026-05","title":"Crash when handling long CNAME response in net","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33811"},{"cve":"CVE-2026-33814","month":"2026-05","title":"Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33814"},{"cve":"CVE-2026-33846","month":"2026-05","title":"Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-130"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33846"},{"cve":"CVE-2026-33857","month":"2026-05","title":"Apache HTTP Server: Off-by-one OOB reads in AJP getter functions","family":"Open Source Software","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33857"},{"cve":"CVE-2026-34032","month":"2026-05","title":"Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)","family":"Open Source Software","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":["CWE-170"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34032"},{"cve":"CVE-2026-34059","month":"2026-05","title":"Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in  ajp_parse_data()","family":"Open Source Software","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34059"},{"cve":"CVE-2026-34956","month":"2026-05","title":"Openvswitch: open vswitch: denial of service via malformed ftp epasv command","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-120"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34956"},{"cve":"CVE-2026-35579","month":"2026-05","title":"CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transports","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35579"},{"cve":"CVE-2026-3592","month":"2026-05","title":"Amplification vulnerabilities via self-pointed glue records","family":"Open Source Software","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-408"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3592"},{"cve":"CVE-2026-3593","month":"2026-05","title":"Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation","family":"Open Source Software","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3593"},{"cve":"CVE-2026-37457","month":"2026-05","title":"An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted FlowSpec component.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-37457"},{"cve":"CVE-2026-37458","month":"2026-05","title":"Missing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable/10.6 allows authenticated attackers to cause a Denial of Service (DoS) via supplying a crafted UPDATE message.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-37458"},{"cve":"CVE-2026-37459","month":"2026-05","title":"An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-37459"},{"cve":"CVE-2026-39817","month":"2026-05","title":"Invoking \"go tool pack\" does not sanitize output paths in cmd/go","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39817"},{"cve":"CVE-2026-39819","month":"2026-05","title":"Invoking \"go bug\" follows symlinks in predictable temporary filenames in cmd/go","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39819"},{"cve":"CVE-2026-39820","month":"2026-05","title":"Quadratic string concatentation in consumeComment in net/mail","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39820"},{"cve":"CVE-2026-39821","month":"2026-05","title":"Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U","cwe":["CWE-1289"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39821"},{"cve":"CVE-2026-39823","month":"2026-05","title":"Bypass of meta content URL escaping causes XSS in html/template","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39823"},{"cve":"CVE-2026-39824","month":"2026-05","title":"Invoking  integer overflow in NewNTUnicodeString in golang.org/x/sys/windows","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39824"},{"cve":"CVE-2026-39825","month":"2026-05","title":"ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39825"},{"cve":"CVE-2026-39826","month":"2026-05","title":"Escaper bypass leads to XSS in html/template","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39826"},{"cve":"CVE-2026-39827","month":"2026-05","title":"Invoking  memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-924"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39827"},{"cve":"CVE-2026-39828","month":"2026-05","title":"Invoking  bypass of certificate restrictions in golang.org/x/crypto/ssh","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39828"},{"cve":"CVE-2026-39829","month":"2026-05","title":"Invoking  pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39829"},{"cve":"CVE-2026-39830","month":"2026-05","title":"Invoking  client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39830"},{"cve":"CVE-2026-39832","month":"2026-05","title":"Invoking  agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39832"},{"cve":"CVE-2026-39833","month":"2026-05","title":"Invoking  key constraints not enforced in golang.org/x/crypto/ssh/agent","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39833"},{"cve":"CVE-2026-39834","month":"2026-05","title":"Invoking  infinite loop on large channel writes in golang.org/x/crypto/ssh","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39834"},{"cve":"CVE-2026-39835","month":"2026-05","title":"Invoking  server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39835"},{"cve":"CVE-2026-39836","month":"2026-05","title":"Panic in Dial and LookupPort when handling NUL byte on Windows in net","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39836"},{"cve":"CVE-2026-40034","month":"2026-05","title":"gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule","family":"Open Source Software","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40034"},{"cve":"CVE-2026-40460","month":"2026-05","title":"NGINX ngx_quic_module vulnerability","family":"Open Source Software","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-290"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40460"},{"cve":"CVE-2026-40510","month":"2026-05","title":"OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Low","cvss":3.8,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40510"},{"cve":"CVE-2026-40528","month":"2026-05","title":"OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Low","cvss":3.8,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40528"},{"cve":"CVE-2026-40612","month":"2026-05","title":"jq: Stack overflow via unbounded recursion in jv_contains","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40612"},{"cve":"CVE-2026-40622","month":"2026-05","title":"Another 'ghost domain names' attack variant","family":"Open Source Software","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40622"},{"cve":"CVE-2026-40701","month":"2026-05","title":"NGINX ngx_http_ssl_module vulnerability","family":"Open Source Software","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40701"},{"cve":"CVE-2026-41054","month":"2026-05","title":"Missing exit out of permission check in haveged could lead to root exploit","family":"Open Source Software","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-305"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41054"},{"cve":"CVE-2026-41256","month":"2026-05","title":"jq: Embedded NUL truncates top-level jq programs loaded with -f","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cwe":["CWE-158"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41256"},{"cve":"CVE-2026-41257","month":"2026-05","title":"jq: Signed-int overflow in `stack_reallocate` (jq VM stack)","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41257"},{"cve":"CVE-2026-41292","month":"2026-05","title":"Long list of incoming EDNS options degrades performance","family":"Open Source Software","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41292"},{"cve":"CVE-2026-41401","month":"2026-05","title":"libyang - Heap Use-After-Free Write in XML Metadata Parsing","family":"Open Source Software","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41401"},{"cve":"CVE-2026-41889","month":"2026-05","title":"pgx: SQL Injection via placeholder confusion with dollar quoted string literals","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41889"},{"cve":"CVE-2026-42009","month":"2026-05","title":"Gnutls: gnutls: denial of service via dtls packet reordering vulnerability","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:R","cwe":["CWE-475"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42009"},{"cve":"CVE-2026-42010","month":"2026-05","title":"Gnutls: gnutls: authentication bypass via nul character in username","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42010"},{"cve":"CVE-2026-42012","month":"2026-05","title":"Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42012"},{"cve":"CVE-2026-42013","month":"2026-05","title":"Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42013"},{"cve":"CVE-2026-42015","month":"2026-05","title":"Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-193"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42015"},{"cve":"CVE-2026-42151","month":"2026-05","title":"Prometheus Azure AD remote write OAuth client secret exposed via config API","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42151"},{"cve":"CVE-2026-42154","month":"2026-05","title":"Prometheus: remote read endpoint allows denial of service via crafted snappy payload","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42154"},{"cve":"CVE-2026-42250","month":"2026-05","title":"Off-by-One Leading to Out-of-Bounds Write in bzip2","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42250"},{"cve":"CVE-2026-42304","month":"2026-05","title":"Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42304"},{"cve":"CVE-2026-42496","month":"2026-05","title":"Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory","family":"Open Source Software","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42496"},{"cve":"CVE-2026-42497","month":"2026-05","title":"Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory","family":"Open Source Software","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42497"},{"cve":"CVE-2026-42499","month":"2026-05","title":"Quadratic string concatenation in consumePhrase in net/mail","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42499"},{"cve":"CVE-2026-42501","month":"2026-05","title":"Malicious module proxy can bypass checksum database in cmd/go","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42501"},{"cve":"CVE-2026-42502","month":"2026-05","title":"Invoking  incorrect handling of HTML elements in foreign content in golang.org/x/net/html","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42502"},{"cve":"CVE-2026-42506","month":"2026-05","title":"Invoking  incorrect handling of namespaced elements in foreign content in golang.org/x/net/html","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42506"},{"cve":"CVE-2026-42508","month":"2026-05","title":"Invoking  auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42508"},{"cve":"CVE-2026-42534","month":"2026-05","title":"Jostle logic bypass degrades resolution performance","family":"Open Source Software","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Low","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-440"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42534"},{"cve":"CVE-2026-42789","month":"2026-05","title":"Non-CA certificate accepted as intermediate issuer in public_key path validation","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42789"},{"cve":"CVE-2026-42790","month":"2026-05","title":"nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42790"},{"cve":"CVE-2026-42923","month":"2026-05","title":"Degradation of service with unbounded NSEC3 hash calculations","family":"Open Source Software","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42923"},{"cve":"CVE-2026-42934","month":"2026-05","title":"NGINX ngx_http_charset_module vulnerability","family":"Open Source Software","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42934"},{"cve":"CVE-2026-42944","month":"2026-05","title":"Heap overflow with multiple NSID, COOKIE, PADDING EDNS options","family":"Open Source Software","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42944"},{"cve":"CVE-2026-42945","month":"2026-05","title":"NGINX ngx_http_rewrite_module vulnerability","family":"Open Source Software","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42945"},{"cve":"CVE-2026-42946","month":"2026-05","title":"NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability","family":"Open Source Software","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L","cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42946"},{"cve":"CVE-2026-42959","month":"2026-05","title":"Crash during DNSSEC validation of malicious content","family":"Open Source Software","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-824"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42959"},{"cve":"CVE-2026-42960","month":"2026-05","title":"Possible cache poisoning via promiscuous records for the authority section","family":"Open Source Software","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H","cwe":["CWE-349"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42960"},{"cve":"CVE-2026-43009","month":"2026-05","title":"bpf: Fix incorrect pruning due to atomic fetch precision tracking","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43009"},{"cve":"CVE-2026-43010","month":"2026-05","title":"bpf: Reject sleepable kprobe_multi programs at attach time","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43010"},{"cve":"CVE-2026-43019","month":"2026-05","title":"Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43019"},{"cve":"CVE-2026-43029","month":"2026-05","title":"mptcp: fix soft lockup in mptcp_recvmsg()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-667"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43029"},{"cve":"CVE-2026-43033","month":"2026-05","title":"crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43033"},{"cve":"CVE-2026-43036","month":"2026-05","title":"net: use skb_header_pointer() for TCPv4 GSO frag_off check","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43036"},{"cve":"CVE-2026-43037","month":"2026-05","title":"ip6_tunnel: clear skb2->cb[] in ip4ip6_err()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43037"},{"cve":"CVE-2026-43042","month":"2026-05","title":"mpls: add seqcount to protect the platform_label{,s} pair","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43042"},{"cve":"CVE-2026-43048","month":"2026-05","title":"HID: core: Mitigate potential OOB by removing bogus memset()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43048"},{"cve":"CVE-2026-43049","month":"2026-05","title":"HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43049"},{"cve":"CVE-2026-43052","month":"2026-05","title":"wifi: mac80211: check tdls flag in ieee80211_tdls_oper","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43052"},{"cve":"CVE-2026-43053","month":"2026-05","title":"xfs: close crash window in attr dabtree inactivation","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43053"},{"cve":"CVE-2026-43059","month":"2026-05","title":"Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43059"},{"cve":"CVE-2026-43073","month":"2026-05","title":"x86-64: rename misleadingly named '__copy_user_nocache()' function","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43073"},{"cve":"CVE-2026-43083","month":"2026-05","title":"net: ioam6: fix OOB and missing lock","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43083"},{"cve":"CVE-2026-43088","month":"2026-05","title":"net: af_key: zero aligned sockaddr tail in PF_KEY exports","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43088"},{"cve":"CVE-2026-43101","month":"2026-05","title":"ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43101"},{"cve":"CVE-2026-43107","month":"2026-05","title":"xfrm: account XFRMA_IF_ID in aevent size calculation","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-131"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43107"},{"cve":"CVE-2026-43109","month":"2026-05","title":"x86: shadow stacks: proper error handling for mmap lock","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43109"},{"cve":"CVE-2026-43115","month":"2026-05","title":"srcu: Use irq_work to start GP in tiny SRCU","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43115"},{"cve":"CVE-2026-43116","month":"2026-05","title":"netfilter: ctnetlink: ensure safe access to master conntrack","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43116"},{"cve":"CVE-2026-43118","month":"2026-05","title":"btrfs: fix zero size inode with non-zero size after log replay","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43118"},{"cve":"CVE-2026-43119","month":"2026-05","title":"Bluetooth: hci_sync: annotate data-races around hdev->req_status","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43119"},{"cve":"CVE-2026-43125","month":"2026-05","title":"dlm: validate length in dlm_search_rsb_tree","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43125"},{"cve":"CVE-2026-43126","month":"2026-05","title":"ALSA: mixer: oss: Add card disconnect checkpoints","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43126"},{"cve":"CVE-2026-43127","month":"2026-05","title":"ntfs3: fix circular locking dependency in run_unpack_ex","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-667"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43127"},{"cve":"CVE-2026-43129","month":"2026-05","title":"ima: verify the previous kernel's IMA buffer lies in addressable RAM","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43129"},{"cve":"CVE-2026-43131","month":"2026-05","title":"drm/amd/pm: Fix null pointer dereference issue","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43131"},{"cve":"CVE-2026-43137","month":"2026-05","title":"ASoC: SOF: Intel: hda: Fix NULL pointer dereference","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43137"},{"cve":"CVE-2026-43153","month":"2026-05","title":"xfs: remove xfs_attr_leaf_hasname","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43153"},{"cve":"CVE-2026-43161","month":"2026-05","title":"iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43161"},{"cve":"CVE-2026-43165","month":"2026-05","title":"hwmon: (nct7363) Fix a resource leak in nct7363_present_pwm_fanin","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43165"},{"cve":"CVE-2026-43172","month":"2026-05","title":"wifi: iwlwifi: fix 22000 series SMEM parsing","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43172"},{"cve":"CVE-2026-43185","month":"2026-05","title":"ksmbd: fix signededness bug in smb_direct_prepare_negotiation()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43185"},{"cve":"CVE-2026-43191","month":"2026-05","title":"drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43191"},{"cve":"CVE-2026-43195","month":"2026-05","title":"drm/amdgpu: validate user queue size constraints","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43195"},{"cve":"CVE-2026-43197","month":"2026-05","title":"netconsole: avoid OOB reads, msg is not nul-terminated","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43197"},{"cve":"CVE-2026-43198","month":"2026-05","title":"tcp: fix potential race in tcp_v6_syn_recv_sock()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43198"},{"cve":"CVE-2026-43199","month":"2026-05","title":"net/mlx5e: Fix \"scheduling while atomic\" in IPsec MAC address query","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43199"},{"cve":"CVE-2026-43201","month":"2026-05","title":"APEI/GHES: ARM processor Error: don't go past allocated memory","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43201"},{"cve":"CVE-2026-43204","month":"2026-05","title":"ASoC: qcom: q6asm: drop DSP responses for closed data streams","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43204"},{"cve":"CVE-2026-43213","month":"2026-05","title":"wifi: rtw89: pci: validate sequence number of TX release report","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43213"},{"cve":"CVE-2026-43216","month":"2026-05","title":"net: Drop the lock in skb_may_tx_timestamp()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43216"},{"cve":"CVE-2026-43219","month":"2026-05","title":"net: cpsw_new: Fix potential unregister of netdev that has not been registered yet","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43219"},{"cve":"CVE-2026-43220","month":"2026-05","title":"iommu/amd: serialize sequence allocation under concurrent TLB invalidations","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43220"},{"cve":"CVE-2026-43234","month":"2026-05","title":"team: avoid NETDEV_CHANGEMTU event when unregistering slave","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43234"},{"cve":"CVE-2026-43237","month":"2026-05","title":"drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43237"},{"cve":"CVE-2026-43243","month":"2026-05","title":"drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43243"},{"cve":"CVE-2026-43244","month":"2026-05","title":"kcm: fix zero-frag skb in frag_list on partial sendmsg error","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43244"},{"cve":"CVE-2026-43245","month":"2026-05","title":"ntfs: ->d_compare() must not block","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43245"},{"cve":"CVE-2026-43248","month":"2026-05","title":"vhost: move vdpa group bound check to vhost_vdpa","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43248"},{"cve":"CVE-2026-43249","month":"2026-05","title":"9p/xen: protect xen_9pfs_front_free against concurrent calls","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43249"},{"cve":"CVE-2026-43250","month":"2026-05","title":"usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43250"},{"cve":"CVE-2026-43258","month":"2026-05","title":"alpha: fix user-space corruption during memory compaction","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43258"},{"cve":"CVE-2026-43274","month":"2026-05","title":"mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchp_ipc_get_cluster_aggr_irq()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43274"},{"cve":"CVE-2026-43284","month":"2026-05","title":"xfrm: esp: avoid in-place decrypt on shared skb frags","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43284"},{"cve":"CVE-2026-43292","month":"2026-05","title":"mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43292"},{"cve":"CVE-2026-43294","month":"2026-05","title":"drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43294"},{"cve":"CVE-2026-43298","month":"2026-05","title":"drm/amdgpu: Skip vcn poison irq release on VF","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43298"},{"cve":"CVE-2026-43299","month":"2026-05","title":"btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43299"},{"cve":"CVE-2026-43300","month":"2026-05","title":"drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43300"},{"cve":"CVE-2026-43303","month":"2026-05","title":"mm/page_alloc: clear page->private in free_pages_prepare()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43303"},{"cve":"CVE-2026-43305","month":"2026-05","title":"drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43305"},{"cve":"CVE-2026-43306","month":"2026-05","title":"bpf: crypto: Use the correct destructor kfunc type","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43306"},{"cve":"CVE-2026-43308","month":"2026-05","title":"btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43308"},{"cve":"CVE-2026-43309","month":"2026-05","title":"md raid: fix hang when stopping arrays with metadata through dm-raid","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43309"},{"cve":"CVE-2026-43310","month":"2026-05","title":"media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43310"},{"cve":"CVE-2026-43311","month":"2026-05","title":"soc/tegra: pmc: Fix unsafe generic_handle_irq() call","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43311"},{"cve":"CVE-2026-43318","month":"2026-05","title":"drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43318"},{"cve":"CVE-2026-43319","month":"2026-05","title":"spi: spidev: fix lock inversion between spi_lock and buf_lock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43319"},{"cve":"CVE-2026-43320","month":"2026-05","title":"drm/amd/display: Fix dsc eDP issue","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43320"},{"cve":"CVE-2026-43321","month":"2026-05","title":"bpf: Properly mark live registers for indirect jumps","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43321"},{"cve":"CVE-2026-43331","month":"2026-05","title":"x86/kexec: Disable KCOV instrumentation after load_segments()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43331"},{"cve":"CVE-2026-43338","month":"2026-05","title":"btrfs: reserve enough transaction items for qgroup ioctls","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43338"},{"cve":"CVE-2026-43344","month":"2026-05","title":"perf/x86/intel/uncore: Fix die ID init and look up bugs","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43344"},{"cve":"CVE-2026-43352","month":"2026-05","title":"i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43352"},{"cve":"CVE-2026-43353","month":"2026-05","title":"i3c: mipi-i3c-hci: Fix race in DMA ring dequeue","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43353"},{"cve":"CVE-2026-43398","month":"2026-05","title":"drm/amdgpu: add upper bound check on user inputs in wait ioctl","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43398"},{"cve":"CVE-2026-43400","month":"2026-05","title":"drm/amdgpu: add upper bound check on user inputs in signal ioctl","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43400"},{"cve":"CVE-2026-43414","month":"2026-05","title":"scsi: qla2xxx: Completely fix fcport double free","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43414"},{"cve":"CVE-2026-43456","month":"2026-05","title":"bonding: fix type confusion in bond_setup_by_slave()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43456"},{"cve":"CVE-2026-43464","month":"2026-05","title":"net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43464"},{"cve":"CVE-2026-43465","month":"2026-05","title":"net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43465"},{"cve":"CVE-2026-43474","month":"2026-05","title":"fs: init flags_valid before calling vfs_fileattr_get","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43474"},{"cve":"CVE-2026-43491","month":"2026-05","title":"net: qrtr: ns: Limit the maximum server registration per node","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43491"},{"cve":"CVE-2026-43492","month":"2026-05","title":"lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43492"},{"cve":"CVE-2026-43494","month":"2026-05","title":"net/rds: reset op_nents when zerocopy page pin fails","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43494"},{"cve":"CVE-2026-43496","month":"2026-05","title":"net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43496"},{"cve":"CVE-2026-43497","month":"2026-05","title":"fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43497"},{"cve":"CVE-2026-43499","month":"2026-05","title":"rtmutex: Use waiter::task instead of current in remove_waiter()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43499"},{"cve":"CVE-2026-43500","month":"2026-05","title":"rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43500"},{"cve":"CVE-2026-43501","month":"2026-05","title":"ipv6: rpl: reserve mac_len headroom when recompressed SRH grows","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43501"},{"cve":"CVE-2026-43502","month":"2026-05","title":"net/rds: handle zerocopy send cleanup before the message is queued","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43502"},{"cve":"CVE-2026-43503","month":"2026-05","title":"net: skbuff: propagate shared-frag marker through frag-transfer helpers","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43503"},{"cve":"CVE-2026-43617","month":"2026-05","title":"Rsync < 3.4.3 Authorization Bypass via Hostname Resolution","family":"Open Source Software","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-289"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43617"},{"cve":"CVE-2026-43618","month":"2026-05","title":"Rsync < 3.4.3 Integer Overflow Information Disclosure","family":"Open Source Software","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43618"},{"cve":"CVE-2026-43619","month":"2026-05","title":"Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls","family":"Open Source Software","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43619"},{"cve":"CVE-2026-43620","month":"2026-05","title":"Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files()","family":"Open Source Software","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43620"},{"cve":"CVE-2026-43894","month":"2026-05","title":"jq: Wild stack write via signed-integer overflow in decNumber D2U() macro","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43894"},{"cve":"CVE-2026-43895","month":"2026-05","title":"jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43895"},{"cve":"CVE-2026-43896","month":"2026-05","title":"jq: Stack Overflow in Recursive Object Merge","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43896"},{"cve":"CVE-2026-43964","month":"2026-05","title":"Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-193"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43964"},{"cve":"CVE-2026-43968","month":"2026-05","title":"CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-93"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43968"},{"cve":"CVE-2026-43969","month":"2026-05","title":"Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Low","cvss":3.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N","cwe":["CWE-93"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43969"},{"cve":"CVE-2026-44283","month":"2026-05","title":"etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44283"},{"cve":"CVE-2026-44390","month":"2026-05","title":"Unbounded name compression in certain cases causes degradation of service","family":"Open Source Software","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Low","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44390"},{"cve":"CVE-2026-44431","month":"2026-05","title":"urllib3: Sensitive headers forwarded across origins in proxied low-level redirects","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44431"},{"cve":"CVE-2026-44608","month":"2026-05","title":"Use after free and crash under special conditions in RPZ code","family":"Open Source Software","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-413"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44608"},{"cve":"CVE-2026-44656","month":"2026-05","title":"Vim: OS Command Injection via 'path' completion","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44656"},{"cve":"CVE-2026-44673","month":"2026-05","title":"libyang: lyb_read_string() integer overflow \u2192 heap buffer overflow","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44673"},{"cve":"CVE-2026-44708","month":"2026-05","title":"Mistune Math Plugin XSS Escape Bypass","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44708"},{"cve":"CVE-2026-44777","month":"2026-05","title":"jq: stack overflow in module loading on mutual `include`","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44777"},{"cve":"CVE-2026-44839","month":"2026-05","title":"RabbitMQ: Unsanitized vhost names allow for XSS in management UI","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-80"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44839"},{"cve":"CVE-2026-44896","month":"2026-05","title":"Mistune: XSS via unescaped figclass/figwidth in Figure directive","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44896"},{"cve":"CVE-2026-44897","month":"2026-05","title":"Mistune Heading ID Attribute Injection XSS","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44897"},{"cve":"CVE-2026-44898","month":"2026-05","title":"Mistune TOC Anchor Injection XSS","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44898"},{"cve":"CVE-2026-44899","month":"2026-05","title":"Mistune Image Directive CSS Injection Vulnerability","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N/E:U","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44899"},{"cve":"CVE-2026-45130","month":"2026-05","title":"Vim: Heap Buffer Overflow in spell file loading","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45130"},{"cve":"CVE-2026-45186","month":"2026-05","title":"In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45186"},{"cve":"CVE-2026-45232","month":"2026-05","title":"Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy","family":"Open Source Software","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Low","cvss":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cwe":["CWE-193"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45232"},{"cve":"CVE-2026-45570","month":"2026-05","title":"go-git: Improper single-quote escaping in go-git SSH transport","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-116"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45570"},{"cve":"CVE-2026-45571","month":"2026-05","title":"go-git: Crafted repositories may modify main and submodule .git directories","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45571"},{"cve":"CVE-2026-45803","month":"2026-05","title":"gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","cwe":["CWE-150"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45803"},{"cve":"CVE-2026-45834","month":"2026-05","title":"Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45834"},{"cve":"CVE-2026-45835","month":"2026-05","title":"Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45835"},{"cve":"CVE-2026-45836","month":"2026-05","title":"Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45836"},{"cve":"CVE-2026-45838","month":"2026-05","title":"bpf: fix end-of-list detection in cgroup_storage_get_next_key()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45838"},{"cve":"CVE-2026-45839","month":"2026-05","title":"bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45839"},{"cve":"CVE-2026-45840","month":"2026-05","title":"openvswitch: cap upcall PID array size and pre-size vport replies","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45840"},{"cve":"CVE-2026-45841","month":"2026-05","title":"netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45841"},{"cve":"CVE-2026-45842","month":"2026-05","title":"slip: reject VJ receive packets on instances with no rstate array","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45842"},{"cve":"CVE-2026-45843","month":"2026-05","title":"slip: bound decode() reads against the compressed packet length","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45843"},{"cve":"CVE-2026-45844","month":"2026-05","title":"netfilter: arp_tables: fix IEEE1394 ARP payload parsing","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45844"},{"cve":"CVE-2026-45845","month":"2026-05","title":"net/sched: taprio: fix NULL pointer dereference in class dump","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45845"},{"cve":"CVE-2026-45846","month":"2026-05","title":"bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45846"},{"cve":"CVE-2026-45850","month":"2026-05","title":"ipvs: skip ipv6 extension headers for csum checks","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45850"},{"cve":"CVE-2026-45855","month":"2026-05","title":"ata: libata-scsi: avoid Non-NCQ command starvation","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45855"},{"cve":"CVE-2026-45858","month":"2026-05","title":"ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45858"},{"cve":"CVE-2026-45859","month":"2026-05","title":"netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45859"},{"cve":"CVE-2026-45861","month":"2026-05","title":"gfs2: Fix slab-use-after-free in qd_put","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45861"},{"cve":"CVE-2026-45877","month":"2026-05","title":"HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45877"},{"cve":"CVE-2026-45892","month":"2026-05","title":"ext4: drop extent cache after doing PARTIAL_VALID1 zeroout","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45892"},{"cve":"CVE-2026-45893","month":"2026-05","title":"apparmor: Fix & Optimize table creation from possibly unaligned memory","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45893"},{"cve":"CVE-2026-45894","month":"2026-05","title":"iommu/vt-d: Clear Present bit before tearing down PASID entry","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45894"},{"cve":"CVE-2026-45897","month":"2026-05","title":"netfilter: nft_counter: serialize reset with spinlock","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45897"},{"cve":"CVE-2026-45899","month":"2026-05","title":"ext4: drop extent cache when splitting extent fails","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45899"},{"cve":"CVE-2026-45901","month":"2026-05","title":"netfilter: nf_tables: revert commit_mutex usage in reset path","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45901"},{"cve":"CVE-2026-45912","month":"2026-05","title":"ext4: don't cache extent during splitting extent","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45912"},{"cve":"CVE-2026-45917","month":"2026-05","title":"ipvs: do not keep dest_dst if dev is going down","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45917"},{"cve":"CVE-2026-45930","month":"2026-05","title":"net: mctp: ensure our nlmsg responses are initialised","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45930"},{"cve":"CVE-2026-45932","month":"2026-05","title":"bpf: Fix tcx/netkit detach permissions when prog fd isn't given","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45932"},{"cve":"CVE-2026-45934","month":"2026-05","title":"btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45934"},{"cve":"CVE-2026-45940","month":"2026-05","title":"net: stmmac: fix oops when split header is enabled","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45940"},{"cve":"CVE-2026-45942","month":"2026-05","title":"ext4: fix e4b bitmap inconsistency reports","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45942"},{"cve":"CVE-2026-45943","month":"2026-05","title":"erofs: fix inline data read failure for ztailpacking pclusters","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45943"},{"cve":"CVE-2026-45944","month":"2026-05","title":"iommu/vt-d: Clear Present bit before tearing down context entry","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45944"},{"cve":"CVE-2026-45949","month":"2026-05","title":"hwrng: core - use RCU and work_struct to fix race condition","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45949"},{"cve":"CVE-2026-45956","month":"2026-05","title":"drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45956"},{"cve":"CVE-2026-45958","month":"2026-05","title":"drm/exynos: vidi: fix to avoid directly dereferencing user pointer","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45958"},{"cve":"CVE-2026-45961","month":"2026-05","title":"gfs2: fix memory leaks in gfs2_fill_super error path","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45961"},{"cve":"CVE-2026-45963","month":"2026-05","title":"ASoC: nau8821: Cancel delayed work on component remove","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45963"},{"cve":"CVE-2026-45973","month":"2026-05","title":"RDMA/mlx5: Fix UMR hang in LAG error state unload","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45973"},{"cve":"CVE-2026-45986","month":"2026-05","title":"crypto: ccree - fix a memory leak in cc_mac_digest()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45986"},{"cve":"CVE-2026-45987","month":"2026-05","title":"KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45987"},{"cve":"CVE-2026-45988","month":"2026-05","title":"rxrpc: Fix re-decryption of RESPONSE packets","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45988"},{"cve":"CVE-2026-45989","month":"2026-05","title":"of: unittest: fix use-after-free in testdrv_probe()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45989"},{"cve":"CVE-2026-45991","month":"2026-05","title":"udf: fix partition descriptor append bookkeeping","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45991"},{"cve":"CVE-2026-45993","month":"2026-05","title":"LoongArch: Add spectre boundry for syscall dispatch table","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45993"},{"cve":"CVE-2026-45994","month":"2026-05","title":"ibmasm: fix OOB reads in command_file_write due to missing size checks","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45994"},{"cve":"CVE-2026-45996","month":"2026-05","title":"spi: imx: fix use-after-free on unbind","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45996"},{"cve":"CVE-2026-45997","month":"2026-05","title":"scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45997"},{"cve":"CVE-2026-45998","month":"2026-05","title":"rxrpc: Fix potential UAF after skb_unshare() failure","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45998"},{"cve":"CVE-2026-45999","month":"2026-05","title":"erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45999"},{"cve":"CVE-2026-46000","month":"2026-05","title":"rxrpc: Fix conn-level packet handling to unshare RESPONSE packets","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46000"},{"cve":"CVE-2026-46002","month":"2026-05","title":"ext2: reject inodes with zero i_nlink and valid mode in ext2_iget()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46002"},{"cve":"CVE-2026-46003","month":"2026-05","title":"net: qrtr: ns: Limit the total number of nodes","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46003"},{"cve":"CVE-2026-46004","month":"2026-05","title":"ALSA: caiaq: Handle probe errors properly","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46004"},{"cve":"CVE-2026-46005","month":"2026-05","title":"xfs: fix a resource leak in xfs_alloc_buftarg()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46005"},{"cve":"CVE-2026-46006","month":"2026-05","title":"drm/nouveau: fix u32 overflow in pushbuf reloc bounds check","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46006"},{"cve":"CVE-2026-46009","month":"2026-05","title":"PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46009"},{"cve":"CVE-2026-46011","month":"2026-05","title":"media: mtk-jpeg: fix use-after-free in release path due to uncancelled work","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46011"},{"cve":"CVE-2026-46012","month":"2026-05","title":"rxrpc: Fix memory leaks in rxkad_verify_response()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46012"},{"cve":"CVE-2026-46014","month":"2026-05","title":"KVM: SVM: Add missing save/restore handling of LBR MSRs","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-667"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46014"},{"cve":"CVE-2026-46015","month":"2026-05","title":"tcp: call sk_data_ready() after listener migration","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46015"},{"cve":"CVE-2026-46016","month":"2026-05","title":"remoteproc: xlnx: Only access buffer information if IPI is buffered","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46016"},{"cve":"CVE-2026-46017","month":"2026-05","title":"mm: fix deferred split queue races during migration","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46017"},{"cve":"CVE-2026-46018","month":"2026-05","title":"ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46018"},{"cve":"CVE-2026-46019","month":"2026-05","title":"crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46019"},{"cve":"CVE-2026-46021","month":"2026-05","title":"thermal: core: Fix thermal zone governor cleanup issues","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46021"},{"cve":"CVE-2026-46022","month":"2026-05","title":"misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46022"},{"cve":"CVE-2026-46023","month":"2026-05","title":"dm mirror: fix integer overflow in create_dirty_log()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46023"},{"cve":"CVE-2026-46024","month":"2026-05","title":"libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46024"},{"cve":"CVE-2026-46026","month":"2026-05","title":"net: qrtr: ns: Limit the maximum number of lookups","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46026"},{"cve":"CVE-2026-46027","month":"2026-05","title":"net/smc: avoid early lgr access in smc_clc_wait_msg","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46027"},{"cve":"CVE-2026-46031","month":"2026-05","title":"net: ks8851: Reinstate disabling of BHs around IRQ handler","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46031"},{"cve":"CVE-2026-46032","month":"2026-05","title":"KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46032"},{"cve":"CVE-2026-46033","month":"2026-05","title":"crypto: authencesn - reject short ahash digests during instance creation","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46033"},{"cve":"CVE-2026-46037","month":"2026-05","title":"ipv4: icmp: validate reply type before using icmp_pointers","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46037"},{"cve":"CVE-2026-46038","month":"2026-05","title":"net: qrtr: ns: Free the node during ctrl_cmd_bye()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46038"},{"cve":"CVE-2026-46040","month":"2026-05","title":"inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46040"},{"cve":"CVE-2026-46043","month":"2026-05","title":"RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46043"},{"cve":"CVE-2026-46044","month":"2026-05","title":"ipmi:ssif: Clean up kthread on errors","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46044"},{"cve":"CVE-2026-46046","month":"2026-05","title":"ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46046"},{"cve":"CVE-2026-46047","month":"2026-05","title":"net: qrtr: ns: Fix use-after-free in driver remove()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46047"},{"cve":"CVE-2026-46048","month":"2026-05","title":"ALSA: caiaq: fix usb_dev refcount leak on probe failure","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46048"},{"cve":"CVE-2026-46049","month":"2026-05","title":"ALSA: ctxfi: Add fallback to default RSR for S/PDIF","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46049"},{"cve":"CVE-2026-46050","month":"2026-05","title":"md/raid10: fix deadlock with check operation and nowait requests","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46050"},{"cve":"CVE-2026-46051","month":"2026-05","title":"md/raid5: fix soft lockup in retry_aligned_read()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46051"},{"cve":"CVE-2026-46052","month":"2026-05","title":"ceph: only d_add() negative dentries when they are unhashed","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46052"},{"cve":"CVE-2026-46053","month":"2026-05","title":"net: rds: fix MR cleanup on copy error","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46053"},{"cve":"CVE-2026-46054","month":"2026-05","title":"selinux: fix overlayfs mmap() and mprotect() access checks","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46054"},{"cve":"CVE-2026-46056","month":"2026-05","title":"Bluetooth: hci_event: fix potential UAF in SSP passkey handlers","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46056"},{"cve":"CVE-2026-46058","month":"2026-05","title":"media: amphion: Fix race between m2m job_abort and device_run","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46058"},{"cve":"CVE-2026-46059","month":"2026-05","title":"KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46059"},{"cve":"CVE-2026-46062","month":"2026-05","title":"ntfs3: fix integer overflow in run_unpack() volume boundary check","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46062"},{"cve":"CVE-2026-46063","month":"2026-05","title":"x86/shstk: Prevent deadlock during shstk sigreturn","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46063"},{"cve":"CVE-2026-46064","month":"2026-05","title":"ibmasm: fix heap over-read in ibmasm_send_i2o_message()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46064"},{"cve":"CVE-2026-46065","month":"2026-05","title":"fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46065"},{"cve":"CVE-2026-46066","month":"2026-05","title":"ceph: fix num_ops off-by-one when crypto allocation fails","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-193"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46066"},{"cve":"CVE-2026-46068","month":"2026-05","title":"crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46068"},{"cve":"CVE-2026-46069","month":"2026-05","title":"wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46069"},{"cve":"CVE-2026-46070","month":"2026-05","title":"md/raid5: validate payload size before accessing journal metadata","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46070"},{"cve":"CVE-2026-46071","month":"2026-05","title":"KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46071"},{"cve":"CVE-2026-46072","month":"2026-05","title":"ntfs3: add buffer boundary checks to run_unpack()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46072"},{"cve":"CVE-2026-46075","month":"2026-05","title":"crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46075"},{"cve":"CVE-2026-46076","month":"2026-05","title":"KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46076"},{"cve":"CVE-2026-46077","month":"2026-05","title":"crypto: atmel-tdes - fix DMA sync direction","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46077"},{"cve":"CVE-2026-46078","month":"2026-05","title":"erofs: fix the out-of-bounds nameoff handling for trailing dirents","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46078"},{"cve":"CVE-2026-46079","month":"2026-05","title":"rbd: fix null-ptr-deref when device_add_disk() fails","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46079"},{"cve":"CVE-2026-46080","month":"2026-05","title":"ocfs2: split transactions in dio completion to avoid credit exhaustion","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46080"},{"cve":"CVE-2026-46082","month":"2026-05","title":"KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46082"},{"cve":"CVE-2026-46083","month":"2026-05","title":"spi: fix resource leaks on device setup failure","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46083"},{"cve":"CVE-2026-46084","month":"2026-05","title":"RDMA/mana_ib: Disable RX steering on RSS QP destroy","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46084"},{"cve":"CVE-2026-46085","month":"2026-05","title":"rxrpc: Fix rxkad crypto unalignment handling","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46085"},{"cve":"CVE-2026-46086","month":"2026-05","title":"net: bridge: use a stable FDB dst snapshot in RCU readers","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46086"},{"cve":"CVE-2026-46088","month":"2026-05","title":"ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46088"},{"cve":"CVE-2026-46089","month":"2026-05","title":"zram: do not forget to endio for partial discard requests","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46089"},{"cve":"CVE-2026-46090","month":"2026-05","title":"ALSA: aloop: Fix peer runtime UAF during format-change stop","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46090"},{"cve":"CVE-2026-46091","month":"2026-05","title":"media: rc: igorplugusb: heed coherency rules","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46091"},{"cve":"CVE-2026-46092","month":"2026-05","title":"wifi: rtw88: check for PCI upstream bridge existence","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46092"},{"cve":"CVE-2026-46094","month":"2026-05","title":"ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46094"},{"cve":"CVE-2026-46098","month":"2026-05","title":"net: caif: clear client service pointer on teardown","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46098"},{"cve":"CVE-2026-46099","month":"2026-05","title":"net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46099"},{"cve":"CVE-2026-46101","month":"2026-05","title":"netfilter: reject zero shift in nft_bitwise","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46101"},{"cve":"CVE-2026-46102","month":"2026-05","title":"net: strparser: fix skb_head leak in strp_abort_strp()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46102"},{"cve":"CVE-2026-46103","month":"2026-05","title":"can: ucan: fix devres lifetime","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46103"},{"cve":"CVE-2026-46106","month":"2026-05","title":"eventfs: Hold eventfs_mutex and SRCU when remount walks events","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46106"},{"cve":"CVE-2026-46107","month":"2026-05","title":"dm-thin: fix metadata refcount underflow","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46107"},{"cve":"CVE-2026-46108","month":"2026-05","title":"ipmi:si: Return state to normal if message allocation fails","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46108"},{"cve":"CVE-2026-46109","month":"2026-05","title":"usb: ulpi: fix memory leak on ulpi_register() error paths","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46109"},{"cve":"CVE-2026-46110","month":"2026-05","title":"net: stmmac: Prevent NULL deref when RX memory exhausted","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46110"},{"cve":"CVE-2026-46111","month":"2026-05","title":"Bluetooth: hci_conn: fix potential UAF in create_big_sync","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46111"},{"cve":"CVE-2026-46112","month":"2026-05","title":"RDMA/hns: Fix unlocked call to hns_roce_qp_remove()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46112"},{"cve":"CVE-2026-46113","month":"2026-05","title":"KVM: x86: Fix shadow paging use-after-free due to unexpected GFN","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46113"},{"cve":"CVE-2026-46114","month":"2026-05","title":"RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46114"},{"cve":"CVE-2026-46115","month":"2026-05","title":"block: add pgmap check to biovec_phys_mergeable","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46115"},{"cve":"CVE-2026-46116","month":"2026-05","title":"xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46116"},{"cve":"CVE-2026-46119","month":"2026-05","title":"libceph: Fix slab-out-of-bounds access in auth message processing","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46119"},{"cve":"CVE-2026-46120","month":"2026-05","title":"ip6_gre: Use cached t->net in ip6erspan_changelink().","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46120"},{"cve":"CVE-2026-46122","month":"2026-05","title":"wifi: b43: enforce bounds check on firmware key index in b43_rx()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46122"},{"cve":"CVE-2026-46123","month":"2026-05","title":"Bluetooth: virtio_bt: clamp rx length before skb_put","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46123"},{"cve":"CVE-2026-46124","month":"2026-05","title":"isofs: validate block number from NFS file handle in isofs_export_iget","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46124"},{"cve":"CVE-2026-46125","month":"2026-05","title":"wifi: mac80211: remove station if connection prep fails","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46125"},{"cve":"CVE-2026-46127","month":"2026-05","title":"RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46127"},{"cve":"CVE-2026-46128","month":"2026-05","title":"ipmi: Check event message buffer response for bad data","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46128"},{"cve":"CVE-2026-46129","month":"2026-05","title":"btrfs: fix double free in create_space_info() error path","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46129"},{"cve":"CVE-2026-46130","month":"2026-05","title":"dm-verity-fec: fix reading parity bytes split across blocks (take 3)","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46130"},{"cve":"CVE-2026-46131","month":"2026-05","title":"KVM: x86: check for nEPT/nNPT in slow flush hypercalls","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46131"},{"cve":"CVE-2026-46132","month":"2026-05","title":"net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46132"},{"cve":"CVE-2026-46133","month":"2026-05","title":"RDMA/rxe: Reject unknown opcodes before ICRC processing","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46133"},{"cve":"CVE-2026-46135","month":"2026-05","title":"nvmet-tcp: fix race between ICReq handling and queue teardown","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46135"},{"cve":"CVE-2026-46136","month":"2026-05","title":"wifi: mt76: mt7921: fix a potential clc buffer length underflow","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46136"},{"cve":"CVE-2026-46137","month":"2026-05","title":"mptcp: pm: ADD_ADDR rtx: fix potential data-race","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46137"},{"cve":"CVE-2026-46138","month":"2026-05","title":"Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46138"},{"cve":"CVE-2026-46140","month":"2026-05","title":"Bluetooth: btmtk: validate WMT event SKB length before struct access","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46140"},{"cve":"CVE-2026-46142","month":"2026-05","title":"net: libwx: fix VF illegal register access","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46142"},{"cve":"CVE-2026-46144","month":"2026-05","title":"RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46144"},{"cve":"CVE-2026-46145","month":"2026-05","title":"RDMA/mana: Validate rx_hash_key_len","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46145"},{"cve":"CVE-2026-46146","month":"2026-05","title":"ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46146"},{"cve":"CVE-2026-46147","month":"2026-05","title":"KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46147"},{"cve":"CVE-2026-46149","month":"2026-05","title":"scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46149"},{"cve":"CVE-2026-46150","month":"2026-05","title":"fanotify: fix false positive on permission events","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46150"},{"cve":"CVE-2026-46151","month":"2026-05","title":"usb: usblp: fix heap leak in IEEE 1284 device ID via short response","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46151"},{"cve":"CVE-2026-46152","month":"2026-05","title":"wifi: mac80211: drop stray 'static' from fast-RX rx_result","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46152"},{"cve":"CVE-2026-46153","month":"2026-05","title":"8021q: delete cleared egress QoS mappings","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46153"},{"cve":"CVE-2026-46155","month":"2026-05","title":"smb/client: fix out-of-bounds read in smb2_compound_op()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46155"},{"cve":"CVE-2026-46156","month":"2026-05","title":"LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46156"},{"cve":"CVE-2026-46158","month":"2026-05","title":"mptcp: pm: ADD_ADDR rtx: always decrease sk refcount","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46158"},{"cve":"CVE-2026-46159","month":"2026-05","title":"btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46159"},{"cve":"CVE-2026-46160","month":"2026-05","title":"btrfs: fix missing last_unlink_trans update when removing a directory","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46160"},{"cve":"CVE-2026-46161","month":"2026-05","title":"md/raid10: fix divide-by-zero in setup_geo() with zero far_copies","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46161"},{"cve":"CVE-2026-46163","month":"2026-05","title":"wifi: b43legacy: enforce bounds check on firmware key index in RX path","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46163"},{"cve":"CVE-2026-46164","month":"2026-05","title":"btrfs: fix double free in create_space_info_sub_group() error path","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46164"},{"cve":"CVE-2026-46165","month":"2026-05","title":"openvswitch: vport: fix self-deadlock on release of tunnel ports","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46165"},{"cve":"CVE-2026-46167","month":"2026-05","title":"usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46167"},{"cve":"CVE-2026-46168","month":"2026-05","title":"mptcp: fix scheduling with atomic in timestamp sockopt","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46168"},{"cve":"CVE-2026-46170","month":"2026-05","title":"mptcp: pm: ADD_ADDR rtx: free sk if last","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46170"},{"cve":"CVE-2026-46171","month":"2026-05","title":"riscv: kvm: fix vector context allocation leak","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46171"},{"cve":"CVE-2026-46172","month":"2026-05","title":"ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46172"},{"cve":"CVE-2026-46173","month":"2026-05","title":"exit: prevent preemption of oopsing TASK_DEAD task","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46173"},{"cve":"CVE-2026-46174","month":"2026-05","title":"x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46174"},{"cve":"CVE-2026-46175","month":"2026-05","title":"f2fs: fix fsck inconsistency caused by FGGC of node block","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46175"},{"cve":"CVE-2026-46176","month":"2026-05","title":"RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46176"},{"cve":"CVE-2026-46177","month":"2026-05","title":"ipmi: Add limits to event and receive message requests","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46177"},{"cve":"CVE-2026-46178","month":"2026-05","title":"RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46178"},{"cve":"CVE-2026-46180","month":"2026-05","title":"wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46180"},{"cve":"CVE-2026-46181","month":"2026-05","title":"RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46181"},{"cve":"CVE-2026-46185","month":"2026-05","title":"smb/client: fix out-of-bounds read in symlink_data()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46185"},{"cve":"CVE-2026-46186","month":"2026-05","title":"Bluetooth: virtio_bt: validate rx pkt_type header length","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46186"},{"cve":"CVE-2026-46187","month":"2026-05","title":"wifi: rsi: fix kthread lifetime race between self-exit and external-stop","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46187"},{"cve":"CVE-2026-46189","month":"2026-05","title":"RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46189"},{"cve":"CVE-2026-46190","month":"2026-05","title":"mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46190"},{"cve":"CVE-2026-46191","month":"2026-05","title":"fbcon: Avoid OOB font access if console rotation fails","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46191"},{"cve":"CVE-2026-46193","month":"2026-05","title":"xfrm: ah: account for ESN high bits in async callbacks","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46193"},{"cve":"CVE-2026-46195","month":"2026-05","title":"smb: client: validate dacloffset before building DACL pointers","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46195"},{"cve":"CVE-2026-46196","month":"2026-05","title":"tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46196"},{"cve":"CVE-2026-46197","month":"2026-05","title":"drm/amdkfd: validate SVM ioctl nattr against buffer size","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46197"},{"cve":"CVE-2026-46198","month":"2026-05","title":"batman-adv: fix integer overflow on buff_pos","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46198"},{"cve":"CVE-2026-46199","month":"2026-05","title":"drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46199"},{"cve":"CVE-2026-46200","month":"2026-05","title":"spi: mpc52xx: fix controller deregistration","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46200"},{"cve":"CVE-2026-46204","month":"2026-05","title":"drm/amdgpu/vcn4: Prevent OOB reads when parsing IB","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46204"},{"cve":"CVE-2026-46205","month":"2026-05","title":"staging: media: atomisp: Disallow all private IOCTLs","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46205"},{"cve":"CVE-2026-46206","month":"2026-05","title":"batman-adv: reject new tp_meter sessions during teardown","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46206"},{"cve":"CVE-2026-46208","month":"2026-05","title":"batman-adv: stop tp_meter sessions during mesh teardown","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46208"},{"cve":"CVE-2026-46209","month":"2026-05","title":"drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46209"},{"cve":"CVE-2026-46212","month":"2026-05","title":"batman-adv: bla: prevent use-after-free when deleting claims","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46212"},{"cve":"CVE-2026-46214","month":"2026-05","title":"vsock/virtio: fix accept queue count leak on transport mismatch","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46214"},{"cve":"CVE-2026-46218","month":"2026-05","title":"drm/amdgpu: Add bounds checking to ib_{get,set}_value","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46218"},{"cve":"CVE-2026-46219","month":"2026-05","title":"spi: mpc52xx: fix use-after-free on unbind","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46219"},{"cve":"CVE-2026-46220","month":"2026-05","title":"drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46220"},{"cve":"CVE-2026-46225","month":"2026-05","title":"spi: rspi: fix controller deregistration","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46225"},{"cve":"CVE-2026-46226","month":"2026-05","title":"spi: fsl: fix controller deregistration","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46226"},{"cve":"CVE-2026-46227","month":"2026-05","title":"sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46227"},{"cve":"CVE-2026-46229","month":"2026-05","title":"drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46229"},{"cve":"CVE-2026-46230","month":"2026-05","title":"drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46230"},{"cve":"CVE-2026-46231","month":"2026-05","title":"batman-adv: bla: put backbone reference on failed claim hash insert","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46231"},{"cve":"CVE-2026-46233","month":"2026-05","title":"batman-adv: bla: only purge non-released claims","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46233"},{"cve":"CVE-2026-46234","month":"2026-05","title":"vsock: fix buffer size clamping order","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46234"},{"cve":"CVE-2026-46236","month":"2026-05","title":"media: rc: xbox_remote: heed DMA restrictions","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46236"},{"cve":"CVE-2026-46238","month":"2026-05","title":"batman-adv: stop caching unowned originator pointers in BAT IV","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46238"},{"cve":"CVE-2026-46241","month":"2026-05","title":"spi: mpc52xx: fix use-after-free on registration failure","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46241"},{"cve":"CVE-2026-46242","month":"2026-05","title":"eventpoll: fix ep_remove struct eventpoll / struct file UAF","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46242"},{"cve":"CVE-2026-46300","month":"2026-05","title":"net: skbuff: preserve shared-frag marker during coalescing","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46300"},{"cve":"CVE-2026-46333","month":"2026-05","title":"ptrace: slightly saner 'get_dumpable()' logic","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46333"},{"cve":"CVE-2026-46483","month":"2026-05","title":"Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46483"},{"cve":"CVE-2026-46597","month":"2026-05","title":"Invoking  byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46597"},{"cve":"CVE-2026-46598","month":"2026-05","title":"Invoking  pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-129"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46598"},{"cve":"CVE-2026-47783","month":"2026-05","title":"In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-208"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47783"},{"cve":"CVE-2026-47784","month":"2026-05","title":"In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-208"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47784"},{"cve":"CVE-2026-48522","month":"2026-05","title":"PyJWKClient: missing scheme allowlist enables SSRF + token forgery via file://, ftp://, data: schemes","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cwe":["CWE-441"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48522"},{"cve":"CVE-2026-48524","month":"2026-05","title":"PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-460"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48524"},{"cve":"CVE-2026-48525","month":"2026-05","title":"PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48525"},{"cve":"CVE-2026-48526","month":"2026-05","title":"PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48526"},{"cve":"CVE-2026-4873","month":"2026-05","title":"connection reuse ignores TLS requirement","family":"Open Source Software","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4873"},{"cve":"CVE-2026-4890","month":"2026-05","title":"CVE-2026-4890","family":"Open Source Software","component":"Mariner","cna":"certcc","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4890"},{"cve":"CVE-2026-4891","month":"2026-05","title":"CVE-2026-4891","family":"Open Source Software","component":"Mariner","cna":"certcc","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4891"},{"cve":"CVE-2026-4893","month":"2026-05","title":"CVE-2026-4893","family":"Open Source Software","component":"Mariner","cna":"certcc","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4893"},{"cve":"CVE-2026-48959","month":"2026-05","title":"IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward","family":"Open Source Software","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48959"},{"cve":"CVE-2026-48962","month":"2026-05","title":"IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob","family":"Open Source Software","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-95"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48962"},{"cve":"CVE-2026-5172","month":"2026-05","title":"CVE-2026-5172","family":"Open Source Software","component":"Mariner","cna":"certcc","label":"(none)","labels":[],"severity":"Moderate","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5172"},{"cve":"CVE-2026-5222","month":"2026-05","title":"Cargo can be coerced to share credentials between registries","family":"Open Source Software","component":"Mariner","cna":"rust","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-647"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5222"},{"cve":"CVE-2026-5223","month":"2026-05","title":"Crates in third party registries can override the cached source of other crates","family":"Open Source Software","component":"Mariner","cna":"rust","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-61"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5223"},{"cve":"CVE-2026-5260","month":"2026-05","title":"Gnutls: gnutls: information disclosure via heap overread in rsa key exchange","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5260"},{"cve":"CVE-2026-5545","month":"2026-05","title":"wrong reuse of HTTP Negotiate connection","family":"Open Source Software","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5545"},{"cve":"CVE-2026-5946","month":"2026-05","title":"Invalid handling of CLASS != IN","family":"Open Source Software","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5946"},{"cve":"CVE-2026-5947","month":"2026-05","title":"SIG(0) validation during query flood may lead to undefined behavior","family":"Open Source Software","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5947"},{"cve":"CVE-2026-5950","month":"2026-05","title":"Unbounded resend loop in BIND 9 resolver","family":"Open Source Software","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-606"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5950"},{"cve":"CVE-2026-6253","month":"2026-05","title":"proxy credentials leak over redirect-to proxy","family":"Open Source Software","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6253"},{"cve":"CVE-2026-6276","month":"2026-05","title":"stale custom cookie host causes cookie leak","family":"Open Source Software","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6276"},{"cve":"CVE-2026-6324","month":"2026-05","title":"Libsoup: libsoup: http request smuggling via unsigned to signed conversion error","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6324"},{"cve":"CVE-2026-6429","month":"2026-05","title":"netrc credential leak with reused proxy connection","family":"Open Source Software","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6429"},{"cve":"CVE-2026-6472","month":"2026-05","title":"PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege","family":"Open Source Software","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6472"},{"cve":"CVE-2026-6473","month":"2026-05","title":"PostgreSQL server undersizes allocations, via integer wraparound","family":"Open Source Software","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6473"},{"cve":"CVE-2026-6474","month":"2026-05","title":"PostgreSQL timeofday() can disclose portions of server memory","family":"Open Source Software","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-134"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6474"},{"cve":"CVE-2026-6475","month":"2026-05","title":"PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice","family":"Open Source Software","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-61"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6475"},{"cve":"CVE-2026-6477","month":"2026-05","title":"PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory","family":"Open Source Software","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-242"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6477"},{"cve":"CVE-2026-6478","month":"2026-05","title":"PostgreSQL discloses MD5-hashed passwords via covert timing channel","family":"Open Source Software","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-385"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6478"},{"cve":"CVE-2026-6479","month":"2026-05","title":"PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion","family":"Open Source Software","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6479"},{"cve":"CVE-2026-6637","month":"2026-05","title":"PostgreSQL refint allows stack buffer overflow and SQL injection","family":"Open Source Software","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6637"},{"cve":"CVE-2026-6638","month":"2026-05","title":"PostgreSQL REFRESH PUBLICATION allows SQL injection via table name","family":"Open Source Software","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6638"},{"cve":"CVE-2026-6664","month":"2026-05","title":"PgBouncer integer overflow in PgBouncer network packet parsing","family":"Open Source Software","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6664"},{"cve":"CVE-2026-6665","month":"2026-05","title":"PgBouncer buffer overflow in SCRAM","family":"Open Source Software","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6665"},{"cve":"CVE-2026-6666","month":"2026-05","title":"PgBouncer crash in kill_pool_logins_server_error","family":"Open Source Software","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6666"},{"cve":"CVE-2026-6667","month":"2026-05","title":"PgBouncer missing authorization check in KILL_CLIENT admin command","family":"Open Source Software","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6667"},{"cve":"CVE-2026-6722","month":"2026-05","title":"Use-After-Free in SOAP using Apache map","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6722"},{"cve":"CVE-2026-6735","month":"2026-05","title":"XSS within PHP-FPM status endpoint","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6735"},{"cve":"CVE-2026-7009","month":"2026-05","title":"OCSP stapling bypass with Apple SecTrust","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7009"},{"cve":"CVE-2026-7168","month":"2026-05","title":"cross-proxy Digest auth state leak","family":"Open Source Software","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7168"},{"cve":"CVE-2026-7210","month":"2026-05","title":"The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection","family":"Open Source Software","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-331"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7210"},{"cve":"CVE-2026-7258","month":"2026-05","title":"Out-of-bounds read in urldecode() on NetBSD","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7258"},{"cve":"CVE-2026-7259","month":"2026-05","title":"Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7259"},{"cve":"CVE-2026-7261","month":"2026-05","title":"SoapServer session-persisted object use-after-free via SOAP header fault","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7261"},{"cve":"CVE-2026-7262","month":"2026-05","title":"NULL pointer dereference in SOAP apache:Map decoder with missing <value>","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7262"},{"cve":"CVE-2026-7374","month":"2026-05","title":"Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7374"},{"cve":"CVE-2026-7568","month":"2026-05","title":"Signed integer overflow in metaphone()","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7568"},{"cve":"CVE-2026-7598","month":"2026-05","title":"libssh2 userauth.c userauth_password integer overflow","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7598"},{"cve":"CVE-2026-7790","month":"2026-05","title":"Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7790"},{"cve":"CVE-2026-8177","month":"2026-05","title":"XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8177"},{"cve":"CVE-2026-8328","month":"2026-05","title":"FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address","family":"Open Source Software","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8328"},{"cve":"CVE-2026-8368","month":"2026-05","title":"LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-522"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8368"},{"cve":"CVE-2026-8376","month":"2026-05","title":"Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds","family":"Open Source Software","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-680"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8376"},{"cve":"CVE-2026-8450","month":"2026-05","title":"HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8450"},{"cve":"CVE-2026-8466","month":"2026-05","title":"Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8466"},{"cve":"CVE-2026-8711","month":"2026-05","title":"NGINX JavaScript vulnerability","family":"Open Source Software","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8711"},{"cve":"CVE-2026-9149","month":"2026-05","title":"Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9149"},{"cve":"CVE-2026-9150","month":"2026-05","title":"Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9150"},{"cve":"CVE-2026-9256","month":"2026-05","title":"NGINX ngx_http_rewrite_module vulnerability","family":"Open Source Software","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9256"},{"cve":"CVE-2026-9804","month":"2026-05","title":"Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9804"},{"cve":"CVE-2025-54518","month":"2026-05","title":"AMD: CVE-2025-54518 CPU OP Cache Corruption","family":"Windows","component":"AMD CPU Branch","cna":"AMD","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54518"},{"cve":"CVE-2026-10000","month":"2026-05","title":"Chromium: CVE-2026-10000 Use after free in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10000"},{"cve":"CVE-2026-10001","month":"2026-05","title":"Chromium: CVE-2026-10001 Use after free in PerformanceManager","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10001"},{"cve":"CVE-2026-10002","month":"2026-05","title":"Chromium: CVE-2026-10002 Use after free in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10002"},{"cve":"CVE-2026-10003","month":"2026-05","title":"Chromium: CVE-2026-10003 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10003"},{"cve":"CVE-2026-10004","month":"2026-05","title":"Chromium: CVE-2026-10004 Insufficient validation of untrusted input in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10004"},{"cve":"CVE-2026-10005","month":"2026-05","title":"Chromium: CVE-2026-10005 Use after free in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10005"},{"cve":"CVE-2026-10006","month":"2026-05","title":"Chromium: CVE-2026-10006 Race in WebAudio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10006"},{"cve":"CVE-2026-10007","month":"2026-05","title":"Chromium: CVE-2026-10007 Use after free in SVG","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10007"},{"cve":"CVE-2026-10009","month":"2026-05","title":"Chromium: CVE-2026-10009 Integer overflow in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10009"},{"cve":"CVE-2026-10011","month":"2026-05","title":"Chromium: CVE-2026-10011 Inappropriate implementation in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10011"},{"cve":"CVE-2026-10012","month":"2026-05","title":"Chromium: CVE-2026-10012 Use after free in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10012"},{"cve":"CVE-2026-10013","month":"2026-05","title":"Chromium: CVE-2026-10013 Use after free in WebCodecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10013"},{"cve":"CVE-2026-10015","month":"2026-05","title":"Chromium: CVE-2026-10015 Integer overflow in WTF","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10015"},{"cve":"CVE-2026-10016","month":"2026-05","title":"Chromium: CVE-2026-10016 Use after free in DOM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10016"},{"cve":"CVE-2026-10017","month":"2026-05","title":"Chromium: CVE-2026-10017 Out of bounds read in Headless","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10017"},{"cve":"CVE-2026-10018","month":"2026-05","title":"Chromium: CVE-2026-10018 Integer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10018"},{"cve":"CVE-2026-10019","month":"2026-05","title":"Chromium: CVE-2026-10019 Integer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10019"},{"cve":"CVE-2026-10020","month":"2026-05","title":"Chromium: CVE-2026-10020 Insufficient validation of untrusted input in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10020"},{"cve":"CVE-2026-10021","month":"2026-05","title":"Chromium: CVE-2026-10021 Insufficient validation of untrusted input in USB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10021"},{"cve":"CVE-2026-10022","month":"2026-05","title":"Chromium: CVE-2026-10022 Type Confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10022"},{"cve":"CVE-2026-21530","month":"2026-05","title":"Windows Rich Text Edit Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Rich Text Edit","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21530"},{"cve":"CVE-2026-23652","month":"2026-05","title":"Microsoft Power Pages Remote Code Execution Vulnerability","family":"Microsoft Dynamics","component":"Microsoft Power Pages","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23652"},{"cve":"CVE-2026-23663","month":"2026-05","title":"Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability","family":"Azure","component":"Azure Entra ID","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-269"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23663"},{"cve":"CVE-2026-26129","month":"2026-05","title":"M365 Copilot Information Disclosure Vulnerability","family":"Apps","component":"M365 Copilot","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-138"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26129"},{"cve":"CVE-2026-26147","month":"2026-05","title":"Azure Stack HCI Information Disclosure Vulnerability","family":"Azure","component":"Azure Compute Gallery","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26147"},{"cve":"CVE-2026-26164","month":"2026-05","title":"M365 Copilot Information Disclosure Vulnerability","family":"Apps","component":"M365 Copilot","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-74"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26164"},{"cve":"CVE-2026-32161","month":"2026-05","title":"Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows Native WiFi Miniport Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32161"},{"cve":"CVE-2026-32170","month":"2026-05","title":"Windows Rich Text Edit Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Rich Text Edit Control","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32170"},{"cve":"CVE-2026-32175","month":"2026-05","title":".NET Core Tampering Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-36"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32175"},{"cve":"CVE-2026-32177","month":"2026-05","title":".NET Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32177"},{"cve":"CVE-2026-32185","month":"2026-05","title":"Microsoft Teams Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Teams","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-552"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32185"},{"cve":"CVE-2026-32204","month":"2026-05","title":"Azure Monitor Agent Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Monitor Agent","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32204"},{"cve":"CVE-2026-32207","month":"2026-05","title":"Azure Machine Learning Notebook Spoofing Vulnerability","family":"Azure","component":"Azure Machine Learning","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32207"},{"cve":"CVE-2026-32209","month":"2026-05","title":"Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Filtering Platform (WFP)","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32209"},{"cve":"CVE-2026-33109","month":"2026-05","title":"Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability","family":"Azure","component":"Azure Managed Instance for Apache Cassandra","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33109"},{"cve":"CVE-2026-33110","month":"2026-05","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33110"},{"cve":"CVE-2026-33111","month":"2026-05","title":"Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability","family":"Browser","component":"Copilot Chat (Microsoft Edge)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33111"},{"cve":"CVE-2026-33112","month":"2026-05","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33112"},{"cve":"CVE-2026-33117","month":"2026-05","title":"Azure SDK for Java Security Feature Bypass Vulnerability","family":"Azure","component":"Azure SDK","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-287","CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33117"},{"cve":"CVE-2026-33821","month":"2026-05","title":"Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability","family":"Microsoft Dynamics","component":"Microsoft Dynamics 365 Customer Insights","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-269"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33821"},{"cve":"CVE-2026-33823","month":"2026-05","title":"Microsoft Team Events Portal Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Teams","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33823"},{"cve":"CVE-2026-33833","month":"2026-05","title":"Azure Machine Learning Notebook Spoofing Vulnerability","family":"Azure","component":"Azure Machine Learning","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-74"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33833"},{"cve":"CVE-2026-33834","month":"2026-05","title":"Windows Event Logging Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Event Logging Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33834"},{"cve":"CVE-2026-33835","month":"2026-05","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33835"},{"cve":"CVE-2026-33837","month":"2026-05","title":"Windows TCP/IP Local Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33837"},{"cve":"CVE-2026-33838","month":"2026-05","title":"Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Message Queuing","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33838"},{"cve":"CVE-2026-33839","month":"2026-05","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - GRFX","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33839"},{"cve":"CVE-2026-33840","month":"2026-05","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - ICOMP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33840"},{"cve":"CVE-2026-33841","month":"2026-05","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33841"},{"cve":"CVE-2026-33843","month":"2026-05","title":"Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft Azure Active Directory B2C","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-288"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33843"},{"cve":"CVE-2026-33844","month":"2026-05","title":"Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability","family":"Azure","component":"Azure Managed Instance for Apache Cassandra","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33844"},{"cve":"CVE-2026-34327","month":"2026-05","title":"Microsoft Partner Center Spoofing Vulnerability","family":"Azure","component":"Microsoft Partner Center","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-610"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34327"},{"cve":"CVE-2026-34329","month":"2026-05","title":"Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Message Queuing","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34329"},{"cve":"CVE-2026-34330","month":"2026-05","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - GRFX","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34330"},{"cve":"CVE-2026-34331","month":"2026-05","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - GRFX","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34331"},{"cve":"CVE-2026-34332","month":"2026-05","title":"Windows Kernel-Mode Driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows Kernel-Mode Drivers","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34332"},{"cve":"CVE-2026-34333","month":"2026-05","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - GRFX","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34333"},{"cve":"CVE-2026-34334","month":"2026-05","title":"Windows TCP/IP Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34334"},{"cve":"CVE-2026-34336","month":"2026-05","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34336"},{"cve":"CVE-2026-34337","month":"2026-05","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34337"},{"cve":"CVE-2026-34338","month":"2026-05","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34338"},{"cve":"CVE-2026-34339","month":"2026-05","title":"Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability","family":"Windows","component":"Windows LDAP - Lightweight Directory Access Protocol","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34339"},{"cve":"CVE-2026-34340","month":"2026-05","title":"Windows Projected File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Projected File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34340"},{"cve":"CVE-2026-34341","month":"2026-05","title":"Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Link-Layer Discovery Protocol (LLDP)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34341"},{"cve":"CVE-2026-34342","month":"2026-05","title":"Windows Print Spooler Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34342"},{"cve":"CVE-2026-34343","month":"2026-05","title":"Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Application Identity (AppID) Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34343"},{"cve":"CVE-2026-34344","month":"2026-05","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34344"},{"cve":"CVE-2026-34345","month":"2026-05","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34345"},{"cve":"CVE-2026-34347","month":"2026-05","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - GRFX","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34347"},{"cve":"CVE-2026-34350","month":"2026-05","title":"Windows Storport Miniport Driver Denial of Service Vulnerability","family":"Windows","component":"Windows Storport Miniport Driver","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34350"},{"cve":"CVE-2026-34351","month":"2026-05","title":"Windows TCP/IP Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34351"},{"cve":"CVE-2026-35415","month":"2026-05","title":"Windows Storage Spaces Controller Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage Spaces Controller","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35415"},{"cve":"CVE-2026-35416","month":"2026-05","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35416"},{"cve":"CVE-2026-35417","month":"2026-05","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - ICOMP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35417"},{"cve":"CVE-2026-35418","month":"2026-05","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35418"},{"cve":"CVE-2026-35419","month":"2026-05","title":"Windows DWM Core Library Information Disclosure  Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35419"},{"cve":"CVE-2026-35420","month":"2026-05","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35420"},{"cve":"CVE-2026-35421","month":"2026-05","title":"Windows GDI Remote Code Execution Vulnerability","family":"Windows","component":"Windows GDI","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35421"},{"cve":"CVE-2026-35422","month":"2026-05","title":"Windows TCP/IP Driver Security Feature Bypass Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-288"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35422"},{"cve":"CVE-2026-35423","month":"2026-05","title":"Windows 11 Telnet Client Information Disclosure Vulnerability","family":"Windows","component":"Telnet Client","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35423"},{"cve":"CVE-2026-35424","month":"2026-05","title":"Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability","family":"Windows","component":"Windows Internet Key Exchange (IKE) Protocol","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35424"},{"cve":"CVE-2026-35428","month":"2026-05","title":"Azure Cloud Shell Spoofing Vulnerability","family":"Azure","component":"Azure Cloud Shell","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35428"},{"cve":"CVE-2026-35429","month":"2026-05","title":"Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge for Android","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35429"},{"cve":"CVE-2026-35430","month":"2026-05","title":"Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Privileged Identity Management (PIM)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-639"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35430"},{"cve":"CVE-2026-35433","month":"2026-05","title":".NET Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-20","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35433"},{"cve":"CVE-2026-35435","month":"2026-05","title":"Azure AI Foundry Elevation of Privilege Vulnerability","family":"Azure","component":"Azure AI Foundry M365 published agents","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35435"},{"cve":"CVE-2026-35436","month":"2026-05","title":"Microsoft Office Click-To-Run Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office Click-To-Run","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1220"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35436"},{"cve":"CVE-2026-35438","month":"2026-05","title":"Windows Admin Center Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Admin Center","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35438"},{"cve":"CVE-2026-35439","month":"2026-05","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35439"},{"cve":"CVE-2026-35440","month":"2026-05","title":"Microsoft Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-552"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35440"},{"cve":"CVE-2026-40357","month":"2026-05","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40357"},{"cve":"CVE-2026-40358","month":"2026-05","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40358"},{"cve":"CVE-2026-40359","month":"2026-05","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40359"},{"cve":"CVE-2026-40360","month":"2026-05","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40360"},{"cve":"CVE-2026-40361","month":"2026-05","title":"Microsoft Outlook and Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40361"},{"cve":"CVE-2026-40362","month":"2026-05","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40362"},{"cve":"CVE-2026-40363","month":"2026-05","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40363"},{"cve":"CVE-2026-40364","month":"2026-05","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843","CWE-908","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40364"},{"cve":"CVE-2026-40365","month":"2026-05","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1220"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40365"},{"cve":"CVE-2026-40366","month":"2026-05","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40366"},{"cve":"CVE-2026-40367","month":"2026-05","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40367"},{"cve":"CVE-2026-40368","month":"2026-05","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40368"},{"cve":"CVE-2026-40369","month":"2026-05","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40369"},{"cve":"CVE-2026-40370","month":"2026-05","title":"SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40370"},{"cve":"CVE-2026-40374","month":"2026-05","title":"Microsoft Power Automate Desktop Information Disclosure Vulnerability","family":"Microsoft Dynamics","component":"Power Automate","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40374"},{"cve":"CVE-2026-40377","month":"2026-05","title":"Microsoft Cryptographic Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cryptographic Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40377"},{"cve":"CVE-2026-40379","month":"2026-05","title":"Azure Entra ID Spoofing Vulnerability","family":"Azure","component":"Azure Entra ID","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40379"},{"cve":"CVE-2026-40380","month":"2026-05","title":"Windows Volume Manager Extension Driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows Volume Manager Extension Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-125","CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40380"},{"cve":"CVE-2026-40381","month":"2026-05","title":"Azure Connected Machine Agent Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Connected Machine Agent","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40381"},{"cve":"CVE-2026-40382","month":"2026-05","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40382"},{"cve":"CVE-2026-40397","month":"2026-05","title":"Windows Common Log File System Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Common Log File System Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40397"},{"cve":"CVE-2026-40398","month":"2026-05","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Desktop","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40398"},{"cve":"CVE-2026-40399","month":"2026-05","title":"Windows TCP/IP Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40399"},{"cve":"CVE-2026-40401","month":"2026-05","title":"Windows TCP/IP Denial of Service Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40401"},{"cve":"CVE-2026-40402","month":"2026-05","title":"Windows Hyper-V Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40402"},{"cve":"CVE-2026-40403","month":"2026-05","title":"Windows Graphics Component Remote Code Execution Vulnerability","family":"Windows","component":"Windows Win32K - GRFX","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40403"},{"cve":"CVE-2026-40405","month":"2026-05","title":"Windows TCP/IP Denial of Service Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40405"},{"cve":"CVE-2026-40406","month":"2026-05","title":"Windows TCP/IP Information Disclosure Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40406"},{"cve":"CVE-2026-40407","month":"2026-05","title":"Windows Common Log File System Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Common Log File System Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40407"},{"cve":"CVE-2026-40408","month":"2026-05","title":"Windows WAN ARP Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel-Mode Drivers","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40408"},{"cve":"CVE-2026-40410","month":"2026-05","title":"Windows SMB Client Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SMB Client","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40410"},{"cve":"CVE-2026-40411","month":"2026-05","title":"Azure Virtual Network Gateway Remote Code Execution Vulnerability","family":"Azure","component":"Azure Virtual Network Gateway","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40411"},{"cve":"CVE-2026-40412","month":"2026-05","title":"Azure Orbital Spatio Remote Code Execution Vulnerability","family":"Azure","component":"Azure Orbital Spatio","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-434"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40412"},{"cve":"CVE-2026-40413","month":"2026-05","title":"Windows TCP/IP Denial of Service Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40413"},{"cve":"CVE-2026-40414","month":"2026-05","title":"Windows TCP/IP Denial of Service Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40414"},{"cve":"CVE-2026-40415","month":"2026-05","title":"Windows TCP/IP Remote Code Execution Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40415"},{"cve":"CVE-2026-40416","month":"2026-05","title":"Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Low","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40416"},{"cve":"CVE-2026-40417","month":"2026-05","title":"Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability","family":"Microsoft Dynamics","component":"Dynamics Business Central","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40417"},{"cve":"CVE-2026-40418","month":"2026-05","title":"Microsoft Office Click-To-Run Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office Click-To-Run","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40418"},{"cve":"CVE-2026-40419","month":"2026-05","title":"Microsoft Office Click-To-Run Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40419"},{"cve":"CVE-2026-40420","month":"2026-05","title":"Microsoft Office Click-To-Run Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office Click-To-Run","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40420"},{"cve":"CVE-2026-40421","month":"2026-05","title":"Microsoft Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40421"},{"cve":"CVE-2026-41086","month":"2026-05","title":"Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability","family":"Azure","component":"Windows Admin Center","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41086"},{"cve":"CVE-2026-41088","month":"2026-05","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41088"},{"cve":"CVE-2026-41089","month":"2026-05","title":"Windows Netlogon Remote Code Execution Vulnerability","family":"Windows","component":"Windows Netlogon","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41089"},{"cve":"CVE-2026-41090","month":"2026-05","title":"Microsoft Copilot Tampering Vulnerability","family":"Apps","component":"Microsoft Copilot","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Critical","cvss":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41090"},{"cve":"CVE-2026-41091","month":"2026-05","title":"Microsoft Defender Elevation of Privilege Vulnerability","family":"System Center","component":"Microsoft Defender","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":true,"disclosed":true,"kev":true,"kev_added":"2026-05-20","class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091"},{"cve":"CVE-2026-41094","month":"2026-05","title":"Microsoft Data Formulator Remote Code Execution Vulnerability","family":"Developer Tools","component":"Microsoft Data Formulator","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41094"},{"cve":"CVE-2026-41095","month":"2026-05","title":"Data Deduplication Elevation of Privilege Vulnerability","family":"Windows","component":"Data Deduplication","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41095"},{"cve":"CVE-2026-41096","month":"2026-05","title":"Windows DNS Client Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows DNS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41096"},{"cve":"CVE-2026-41097","month":"2026-05","title":"Secure Boot Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Secure Boot","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1329"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41097"},{"cve":"CVE-2026-41100","month":"2026-05","title":"Microsoft 365 Copilot for Android Spoofing Vulnerability","family":"Microsoft Office","component":"M365 Copilot","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41100"},{"cve":"CVE-2026-41101","month":"2026-05","title":"Microsoft Word for Android Spoofing Vulnerability","family":"Apps","component":"Microsoft Office Word","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41101"},{"cve":"CVE-2026-41102","month":"2026-05","title":"Microsoft PowerPoint for Android Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41102"},{"cve":"CVE-2026-41103","month":"2026-05","title":"Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft SSO Plugin for Jira & Confluence","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-303"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41103"},{"cve":"CVE-2026-41104","month":"2026-05","title":"Microsoft Planetary Computer Pro Information Disclosure Vulnerability","family":"Device","component":"Microsoft Planetary Computer Pro","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41104"},{"cve":"CVE-2026-41105","month":"2026-05","title":"Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Notification Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41105"},{"cve":"CVE-2026-41107","month":"2026-05","title":"Microsoft Edge (Chromium-based) Information Disclosure Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Moderate","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41107"},{"cve":"CVE-2026-41109","month":"2026-05","title":"GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"GitHub Copilot and Visual Studio","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-74"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41109"},{"cve":"CVE-2026-41610","month":"2026-05","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-79","CWE-59","CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41610"},{"cve":"CVE-2026-41611","month":"2026-05","title":"Visual Studio Code Remote Code Execution Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-80","CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41611"},{"cve":"CVE-2026-41612","month":"2026-05","title":"Visual Studio Code Information Disclosure Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-23","CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41612"},{"cve":"CVE-2026-41613","month":"2026-05","title":"Visual Studio Code Elevation of Privilege Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-384","CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41613"},{"cve":"CVE-2026-41614","month":"2026-05","title":"M365 Copilot for Desktop Spoofing Vulnerability","family":"Apps","component":"M365 Copilot for Desktop","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41614"},{"cve":"CVE-2026-41615","month":"2026-05","title":"Microsoft Authenticator Information Disclosure Vulnerability","family":"Apps","component":"Microsoft Authenticator","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41615"},{"cve":"CVE-2026-42822","month":"2026-05","title":"Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Local Disconnected Operations","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42822"},{"cve":"CVE-2026-42823","month":"2026-05","title":"Azure Logic Apps Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Logic Apps","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42823"},{"cve":"CVE-2026-42825","month":"2026-05","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42825"},{"cve":"CVE-2026-42826","month":"2026-05","title":"Azure DevOps Information Disclosure Vulnerability","family":"Developer Tools","component":"Azure DevOps","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42826"},{"cve":"CVE-2026-42827","month":"2026-05","title":"M365 Copilot Information Disclosure Vulnerability","family":"Apps","component":"M365 Copilot","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42827"},{"cve":"CVE-2026-42830","month":"2026-05","title":"Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Monitor Agent","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42830"},{"cve":"CVE-2026-42831","month":"2026-05","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42831"},{"cve":"CVE-2026-42832","month":"2026-05","title":"Microsoft Office Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42832"},{"cve":"CVE-2026-42833","month":"2026-05","title":"Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability","family":"Microsoft Dynamics","component":"Microsoft Dynamics 365 (on-premises)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-250"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42833"},{"cve":"CVE-2026-42834","month":"2026-05","title":"Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Portal Windows Admin Center","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42834"},{"cve":"CVE-2026-42838","month":"2026-05","title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-74"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42838"},{"cve":"CVE-2026-42891","month":"2026-05","title":"Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42891"},{"cve":"CVE-2026-42893","month":"2026-05","title":"Microsoft Outlook for iOS Tampering Vulnerability","family":"Microsoft Office","component":"M365 Copilot","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42893"},{"cve":"CVE-2026-42896","month":"2026-05","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42896"},{"cve":"CVE-2026-42897","month":"2026-05","title":"Microsoft Exchange Server Spoofing Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C","cwe":["CWE-79"],"exploited":true,"disclosed":false,"kev":true,"kev_added":"2026-05-15","class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42897"},{"cve":"CVE-2026-42898","month":"2026-05","title":"Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability","family":"Microsoft Dynamics","component":"Microsoft Dynamics 365 (on-premises)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42898"},{"cve":"CVE-2026-42899","month":"2026-05","title":"ASP.NET Core Denial of Service Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42899"},{"cve":"CVE-2026-42901","month":"2026-05","title":"Microsoft Entra ID Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft Entra ID","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42901"},{"cve":"CVE-2026-43970","month":"2026-05","title":"Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-409"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43970"},{"cve":"CVE-2026-44307","month":"2026-05","title":"Mako: Path traversal via backslash URI on Windows in TemplateLookup","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44307"},{"cve":"CVE-2026-45492","month":"2026-05","title":"Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45492"},{"cve":"CVE-2026-45494","month":"2026-05","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45494"},{"cve":"CVE-2026-45495","month":"2026-05","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-35"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45495"},{"cve":"CVE-2026-45498","month":"2026-05","title":"Microsoft Defender Denial of Service Vulnerability","family":"System Center","component":"Microsoft Defender","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Low","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C","cwe":["CWE-400"],"exploited":true,"disclosed":true,"kev":true,"kev_added":"2026-05-20","class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498"},{"cve":"CVE-2026-45584","month":"2026-05","title":"Microsoft Defender Remote Code Execution Vulnerability","family":"System Center","component":"Microsoft Defender","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45584"},{"cve":"CVE-2026-45585","month":"2026-05","title":"Windows BitLocker Security Feature Bypass Vulnerability","family":"Windows","component":"Windows BitLocker","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":true,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45585"},{"cve":"CVE-2026-45659","month":"2026-05","title":"Microsoft SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":true,"kev_added":"2026-07-01","class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659"},{"cve":"CVE-2026-47280","month":"2026-05","title":"Azure Resource Manager Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Resource Manager (ARM)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47280"},{"cve":"CVE-2026-47294","month":"2026-05","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47294"},{"cve":"CVE-2026-7896","month":"2026-05","title":"Chromium: CVE-2026-7896 Integer overflow in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7896"},{"cve":"CVE-2026-7897","month":"2026-05","title":"Chromium: CVE-2026-7897 Use after free in Mobile","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7897"},{"cve":"CVE-2026-7898","month":"2026-05","title":"Chromium: CVE-2026-7898 Use after free in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7898"},{"cve":"CVE-2026-7899","month":"2026-05","title":"Chromium: CVE-2026-7899 Out of bounds read and write in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7899"},{"cve":"CVE-2026-7900","month":"2026-05","title":"Chromium: CVE-2026-7900 Heap buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7900"},{"cve":"CVE-2026-7901","month":"2026-05","title":"Chromium: CVE-2026-7901 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7901"},{"cve":"CVE-2026-7902","month":"2026-05","title":"Chromium: CVE-2026-7902 Out of bounds memory access in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7902"},{"cve":"CVE-2026-7903","month":"2026-05","title":"Chromium: CVE-2026-7903 Integer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7903"},{"cve":"CVE-2026-7904","month":"2026-05","title":"Chromium: CVE-2026-7904 Out of bounds read in Fonts","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7904"},{"cve":"CVE-2026-7905","month":"2026-05","title":"Chromium: CVE-2026-7905 Insufficient validation of untrusted input in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7905"},{"cve":"CVE-2026-7906","month":"2026-05","title":"Chromium: CVE-2026-7906 Use after free in SVG","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7906"},{"cve":"CVE-2026-7907","month":"2026-05","title":"Chromium: CVE-2026-7907 Use after free in DOM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7907"},{"cve":"CVE-2026-7908","month":"2026-05","title":"Chromium: CVE-2026-7908 Use after free in Fullscreen","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7908"},{"cve":"CVE-2026-7909","month":"2026-05","title":"Chromium: CVE-2026-7909 Inappropriate implementation in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7909"},{"cve":"CVE-2026-7910","month":"2026-05","title":"Chromium: CVE-2026-7910 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7910"},{"cve":"CVE-2026-7911","month":"2026-05","title":"Chromium: CVE-2026-7911 Use after free in Aura","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7911"},{"cve":"CVE-2026-7912","month":"2026-05","title":"Chromium: CVE-2026-7912 Integer overflow in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7912"},{"cve":"CVE-2026-7913","month":"2026-05","title":"Chromium: CVE-2026-7913 Insufficient policy enforcement in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7913"},{"cve":"CVE-2026-7914","month":"2026-05","title":"Chromium: CVE-2026-7914 Type Confusion in Accessibility","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7914"},{"cve":"CVE-2026-7915","month":"2026-05","title":"Chromium: CVE-2026-7915 Insufficient data validation in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7915"},{"cve":"CVE-2026-7916","month":"2026-05","title":"Chromium: CVE-2026-7916 Insufficient data validation in InterestGroups","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7916"},{"cve":"CVE-2026-7917","month":"2026-05","title":"Chromium: CVE-2026-7917 Use after free in Fullscreen","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7917"},{"cve":"CVE-2026-7918","month":"2026-05","title":"Chromium: CVE-2026-7918 Use after free in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7918"},{"cve":"CVE-2026-7919","month":"2026-05","title":"Chromium: CVE-2026-7919 Use after free in Aura","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7919"},{"cve":"CVE-2026-7920","month":"2026-05","title":"Chromium: CVE-2026-7920 Use after free in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7920"},{"cve":"CVE-2026-7921","month":"2026-05","title":"Chromium: CVE-2026-7921 Use after free in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7921"},{"cve":"CVE-2026-7922","month":"2026-05","title":"Chromium: CVE-2026-7922 Use after free in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7922"},{"cve":"CVE-2026-7923","month":"2026-05","title":"Chromium: CVE-2026-7923 Out of bounds write in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7923"},{"cve":"CVE-2026-7924","month":"2026-05","title":"Chromium: CVE-2026-7924 Uninitialized Use in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7924"},{"cve":"CVE-2026-7925","month":"2026-05","title":"Chromium: CVE-2026-7925 Use after free in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7925"},{"cve":"CVE-2026-7926","month":"2026-05","title":"Chromium: CVE-2026-7926 Use after free in PresentationAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7926"},{"cve":"CVE-2026-7927","month":"2026-05","title":"Chromium: CVE-2026-7927 Type Confusion in Runtime","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7927"},{"cve":"CVE-2026-7928","month":"2026-05","title":"Chromium: CVE-2026-7928 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7928"},{"cve":"CVE-2026-7929","month":"2026-05","title":"Chromium: CVE-2026-7929 Use after free in MediaRecording","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7929"},{"cve":"CVE-2026-7930","month":"2026-05","title":"Chromium: CVE-2026-7930 Insufficient validation of untrusted input in Cookies","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7930"},{"cve":"CVE-2026-7931","month":"2026-05","title":"Chromium: CVE-2026-7931 Insufficient validation of untrusted input in iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7931"},{"cve":"CVE-2026-7932","month":"2026-05","title":"Chromium: CVE-2026-7932 Insufficient policy enforcement in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7932"},{"cve":"CVE-2026-7933","month":"2026-05","title":"Chromium: CVE-2026-7933 Out of bounds read in WebCodecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7933"},{"cve":"CVE-2026-7934","month":"2026-05","title":"Chromium: CVE-2026-7934 Insufficient validation of untrusted input in Popup Blocker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7934"},{"cve":"CVE-2026-7935","month":"2026-05","title":"Chromium: CVE-2026-7935 Inappropriate implementation in Speech","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7935"},{"cve":"CVE-2026-7936","month":"2026-05","title":"Chromium: CVE-2026-7936 Object lifecycle issue in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7936"},{"cve":"CVE-2026-7937","month":"2026-05","title":"Chromium: CVE-2026-7937 Insufficient policy enforcement in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7937"},{"cve":"CVE-2026-7938","month":"2026-05","title":"Chromium: CVE-2026-7938 Use after free in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7938"},{"cve":"CVE-2026-7939","month":"2026-05","title":"Chromium: CVE-2026-7939 Inappropriate implementation in SanitizerAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7939"},{"cve":"CVE-2026-7940","month":"2026-05","title":"Chromium: CVE-2026-7940 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7940"},{"cve":"CVE-2026-7941","month":"2026-05","title":"Chromium: CVE-2026-7941 Insufficient validation of untrusted input in Mobile","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7941"},{"cve":"CVE-2026-7942","month":"2026-05","title":"Chromium: CVE-2026-7942 Integer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7942"},{"cve":"CVE-2026-7943","month":"2026-05","title":"Chromium: CVE-2026-7943 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7943"},{"cve":"CVE-2026-7944","month":"2026-05","title":"Chromium: CVE-2026-7944 Insufficient validation of untrusted input in Persistent Cache","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7944"},{"cve":"CVE-2026-7945","month":"2026-05","title":"Chromium: CVE-2026-7945 Insufficient validation of untrusted input in COOP","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7945"},{"cve":"CVE-2026-7946","month":"2026-05","title":"Chromium: CVE-2026-7946 Insufficient policy enforcement in WebUI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7946"},{"cve":"CVE-2026-7947","month":"2026-05","title":"Chromium: CVE-2026-7947 Insufficient validation of untrusted input in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7947"},{"cve":"CVE-2026-7948","month":"2026-05","title":"Chromium: CVE-2026-7948 Race in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7948"},{"cve":"CVE-2026-7949","month":"2026-05","title":"Chromium: CVE-2026-7949 Out of bounds read in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7949"},{"cve":"CVE-2026-7950","month":"2026-05","title":"Chromium: CVE-2026-7950 Out of bounds read and write in GFX","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7950"},{"cve":"CVE-2026-7951","month":"2026-05","title":"Chromium: CVE-2026-7951 Out of bounds write in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7951"},{"cve":"CVE-2026-7952","month":"2026-05","title":"Chromium: CVE-2026-7952 Insufficient policy enforcement in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7952"},{"cve":"CVE-2026-7953","month":"2026-05","title":"Chromium: CVE-2026-7953 Insufficient validation of untrusted input in Omnibox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7953"},{"cve":"CVE-2026-7954","month":"2026-05","title":"Chromium: CVE-2026-7954 Race in Shared Storage","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7954"},{"cve":"CVE-2026-7955","month":"2026-05","title":"Chromium: CVE-2026-7955 Uninitialized Use in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7955"},{"cve":"CVE-2026-7956","month":"2026-05","title":"Chromium: CVE-2026-7956 Use after free in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7956"},{"cve":"CVE-2026-7957","month":"2026-05","title":"Chromium: CVE-2026-7957 Out of bounds write in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7957"},{"cve":"CVE-2026-7958","month":"2026-05","title":"Chromium: CVE-2026-7958 Inappropriate implementation in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7958"},{"cve":"CVE-2026-7959","month":"2026-05","title":"Chromium: CVE-2026-7959 Inappropriate implementation in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7959"},{"cve":"CVE-2026-7960","month":"2026-05","title":"Chromium: CVE-2026-7960 Race in Speech","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7960"},{"cve":"CVE-2026-7961","month":"2026-05","title":"Chromium: CVE-2026-7961 Insufficient validation of untrusted input in Permissions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7961"},{"cve":"CVE-2026-7962","month":"2026-05","title":"Chromium: CVE-2026-7962 Insufficient policy enforcement in DirectSockets","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7962"},{"cve":"CVE-2026-7963","month":"2026-05","title":"Chromium: CVE-2026-7963 Inappropriate implementation in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7963"},{"cve":"CVE-2026-7964","month":"2026-05","title":"Chromium: CVE-2026-7964 Insufficient validation of untrusted input in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7964"},{"cve":"CVE-2026-7965","month":"2026-05","title":"Chromium: CVE-2026-7965 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7965"},{"cve":"CVE-2026-7966","month":"2026-05","title":"Chromium: CVE-2026-7966 Insufficient validation of untrusted input in SiteIsolation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7966"},{"cve":"CVE-2026-7967","month":"2026-05","title":"Chromium: CVE-2026-7967 Insufficient validation of untrusted input in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7967"},{"cve":"CVE-2026-7968","month":"2026-05","title":"Chromium: CVE-2026-7968 Insufficient validation of untrusted input in CORS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7968"},{"cve":"CVE-2026-7969","month":"2026-05","title":"Chromium: CVE-2026-7969 Integer overflow in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7969"},{"cve":"CVE-2026-7970","month":"2026-05","title":"Chromium: CVE-2026-7970 Use after free in TopChrome","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7970"},{"cve":"CVE-2026-7971","month":"2026-05","title":"Chromium: CVE-2026-7971 Inappropriate implementation in ORB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7971"},{"cve":"CVE-2026-7972","month":"2026-05","title":"Chromium: CVE-2026-7972 Uninitialized Use in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7972"},{"cve":"CVE-2026-7973","month":"2026-05","title":"Chromium: CVE-2026-7973 Integer overflow in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7973"},{"cve":"CVE-2026-7974","month":"2026-05","title":"Chromium: CVE-2026-7974 Use after free in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7974"},{"cve":"CVE-2026-7975","month":"2026-05","title":"Chromium: CVE-2026-7975 Use after free in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7975"},{"cve":"CVE-2026-7976","month":"2026-05","title":"Chromium: CVE-2026-7976 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7976"},{"cve":"CVE-2026-7977","month":"2026-05","title":"Chromium: CVE-2026-7977 Inappropriate implementation in Canvas","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7977"},{"cve":"CVE-2026-7978","month":"2026-05","title":"Chromium: CVE-2026-7978 Inappropriate implementation in Companion","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7978"},{"cve":"CVE-2026-7979","month":"2026-05","title":"Chromium: CVE-2026-7979 Inappropriate implementation in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7979"},{"cve":"CVE-2026-7980","month":"2026-05","title":"Chromium: CVE-2026-7980 Use after free in WebAudio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7980"},{"cve":"CVE-2026-7981","month":"2026-05","title":"Chromium: CVE-2026-7981 Out of bounds read in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7981"},{"cve":"CVE-2026-7982","month":"2026-05","title":"Chromium: CVE-2026-7982 Uninitialized Use in WebCodecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7982"},{"cve":"CVE-2026-7983","month":"2026-05","title":"Chromium: CVE-2026-7983 Out of bounds read in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7983"},{"cve":"CVE-2026-7984","month":"2026-05","title":"Chromium: CVE-2026-7984 Use after free in ReadingMode","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7984"},{"cve":"CVE-2026-7985","month":"2026-05","title":"Chromium: CVE-2026-7985 Use after free in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7985"},{"cve":"CVE-2026-7986","month":"2026-05","title":"Chromium: CVE-2026-7986 Insufficient policy enforcement in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7986"},{"cve":"CVE-2026-7987","month":"2026-05","title":"Chromium: CVE-2026-7987 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7987"},{"cve":"CVE-2026-7988","month":"2026-05","title":"Chromium: CVE-2026-7988 Type Confusion in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7988"},{"cve":"CVE-2026-7989","month":"2026-05","title":"Chromium: CVE-2026-7989 Insufficient data validation in DataTransfer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7989"},{"cve":"CVE-2026-7990","month":"2026-05","title":"Chromium: CVE-2026-7990 Insufficient validation of untrusted input in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7990"},{"cve":"CVE-2026-7991","month":"2026-05","title":"Chromium: CVE-2026-7991 Use after free in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7991"},{"cve":"CVE-2026-7992","month":"2026-05","title":"Chromium: CVE-2026-7992 Insufficient validation of untrusted input in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7992"},{"cve":"CVE-2026-7993","month":"2026-05","title":"Chromium: CVE-2026-7993 Insufficient validation of untrusted input in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7993"},{"cve":"CVE-2026-7994","month":"2026-05","title":"Chromium: CVE-2026-7994 Inappropriate implementation in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7994"},{"cve":"CVE-2026-7995","month":"2026-05","title":"Chromium: CVE-2026-7995 Out of bounds read in AdFilter","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7995"},{"cve":"CVE-2026-7996","month":"2026-05","title":"Chromium: CVE-2026-7996 Insufficient validation of untrusted input in SSL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7996"},{"cve":"CVE-2026-7997","month":"2026-05","title":"Chromium: CVE-2026-7997 Insufficient validation of untrusted input in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7997"},{"cve":"CVE-2026-7998","month":"2026-05","title":"Chromium: CVE-2026-7998 Insufficient validation of untrusted input in Dialog","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7998"},{"cve":"CVE-2026-7999","month":"2026-05","title":"Chromium: CVE-2026-7999 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7999"},{"cve":"CVE-2026-8000","month":"2026-05","title":"Chromium: CVE-2026-8000 Insufficient validation of untrusted input in ChromeDriver","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8000"},{"cve":"CVE-2026-8001","month":"2026-05","title":"Chromium: CVE-2026-8001 Use after free in Printing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8001"},{"cve":"CVE-2026-8002","month":"2026-05","title":"Chromium: CVE-2026-8002 Use after free in Audio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8002"},{"cve":"CVE-2026-8003","month":"2026-05","title":"Chromium: CVE-2026-8003 Insufficient validation of untrusted input in TabGroups","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8003"},{"cve":"CVE-2026-8004","month":"2026-05","title":"Chromium: CVE-2026-8004 Insufficient policy enforcement in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8004"},{"cve":"CVE-2026-8005","month":"2026-05","title":"Chromium: CVE-2026-8005 Insufficient validation of untrusted input in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8005"},{"cve":"CVE-2026-8006","month":"2026-05","title":"Chromium: CVE-2026-8006 Insufficient policy enforcement in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8006"},{"cve":"CVE-2026-8007","month":"2026-05","title":"Chromium: CVE-2026-8007 Insufficient validation of untrusted input in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8007"},{"cve":"CVE-2026-8008","month":"2026-05","title":"Chromium: CVE-2026-8008 Inappropriate implementation in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8008"},{"cve":"CVE-2026-8009","month":"2026-05","title":"Chromium: CVE-2026-8009 Inappropriate implementation in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8009"},{"cve":"CVE-2026-8010","month":"2026-05","title":"Chromium: CVE-2026-8010 Insufficient validation of untrusted input in SiteIsolation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8010"},{"cve":"CVE-2026-8011","month":"2026-05","title":"Chromium: CVE-2026-8011 Insufficient policy enforcement in Search","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8011"},{"cve":"CVE-2026-8012","month":"2026-05","title":"Chromium: CVE-2026-8012 Inappropriate implementation in MHTML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8012"},{"cve":"CVE-2026-8013","month":"2026-05","title":"Chromium: CVE-2026-8013 Insufficient validation of untrusted input in FedCM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8013"},{"cve":"CVE-2026-8014","month":"2026-05","title":"Chromium: CVE-2026-8014 Inappropriate implementation in Preload","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8014"},{"cve":"CVE-2026-8015","month":"2026-05","title":"Chromium: CVE-2026-8015 Inappropriate implementation in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8015"},{"cve":"CVE-2026-8016","month":"2026-05","title":"Chromium: CVE-2026-8016 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8016"},{"cve":"CVE-2026-8017","month":"2026-05","title":"Chromium: CVE-2026-8017 Side-channel information leakage in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8017"},{"cve":"CVE-2026-8018","month":"2026-05","title":"Chromium: CVE-2026-8018 Insufficient policy enforcement in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8018"},{"cve":"CVE-2026-8019","month":"2026-05","title":"Chromium: CVE-2026-8019 Insufficient policy enforcement in WebApp","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8019"},{"cve":"CVE-2026-8020","month":"2026-05","title":"Chromium: CVE-2026-8020 Uninitialized Use in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8020"},{"cve":"CVE-2026-8021","month":"2026-05","title":"Chromium: CVE-2026-8021 Script injection in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8021"},{"cve":"CVE-2026-8022","month":"2026-05","title":"Chromium: CVE-2026-8022 Inappropriate implementation in MHTML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8022"},{"cve":"CVE-2026-8509","month":"2026-05","title":"Chromium: CVE-2026-8509 Heap buffer overflow in WebML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8509"},{"cve":"CVE-2026-8510","month":"2026-05","title":"Chromium: CVE-2026-8510 Integer overflow in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8510"},{"cve":"CVE-2026-8511","month":"2026-05","title":"Chromium: CVE-2026-8511 Use after free in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8511"},{"cve":"CVE-2026-8512","month":"2026-05","title":"Chromium: CVE-2026-8512 Use after free in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8512"},{"cve":"CVE-2026-8513","month":"2026-05","title":"Chromium: CVE-2026-8513 Use after free in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8513"},{"cve":"CVE-2026-8514","month":"2026-05","title":"Chromium: CVE-2026-8514 Use after free in Aura","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8514"},{"cve":"CVE-2026-8515","month":"2026-05","title":"Chromium: CVE-2026-8515 Use after free in HID","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8515"},{"cve":"CVE-2026-8516","month":"2026-05","title":"Chromium: CVE-2026-8516 Insufficient validation of untrusted input in DataTransfer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8516"},{"cve":"CVE-2026-8517","month":"2026-05","title":"Chromium: CVE-2026-8517 Object lifecycle issue in WebShare","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8517"},{"cve":"CVE-2026-8518","month":"2026-05","title":"Chromium: CVE-2026-8518 Use after free in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8518"},{"cve":"CVE-2026-8519","month":"2026-05","title":"Chromium: CVE-2026-8519 Integer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8519"},{"cve":"CVE-2026-8520","month":"2026-05","title":"Chromium: CVE-2026-8520 Race in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8520"},{"cve":"CVE-2026-8521","month":"2026-05","title":"Chromium: CVE-2026-8521 Use after free in Tab Groups","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8521"},{"cve":"CVE-2026-8522","month":"2026-05","title":"Chromium: CVE-2026-8522 Use after free in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8522"},{"cve":"CVE-2026-8523","month":"2026-05","title":"Chromium: CVE-2026-8523 Use after free in Mojo","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8523"},{"cve":"CVE-2026-8524","month":"2026-05","title":"Chromium: CVE-2026-8524 Out of bounds write in WebAudio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8524"},{"cve":"CVE-2026-8525","month":"2026-05","title":"Chromium: CVE-2026-8525 Heap buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8525"},{"cve":"CVE-2026-8526","month":"2026-05","title":"Chromium: CVE-2026-8526 Out of bounds write in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8526"},{"cve":"CVE-2026-8527","month":"2026-05","title":"Chromium: CVE-2026-8527 Insufficient validation of untrusted input in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8527"},{"cve":"CVE-2026-8528","month":"2026-05","title":"Chromium: CVE-2026-8528 Insufficient validation of untrusted input in SiteIsolation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8528"},{"cve":"CVE-2026-8529","month":"2026-05","title":"Chromium: CVE-2026-8529 Heap buffer overflow in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8529"},{"cve":"CVE-2026-8530","month":"2026-05","title":"Chromium: CVE-2026-8530 Use after free in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8530"},{"cve":"CVE-2026-8531","month":"2026-05","title":"Chromium: CVE-2026-8531 Heap buffer overflow in WebML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8531"},{"cve":"CVE-2026-8532","month":"2026-05","title":"Chromium: CVE-2026-8532 Integer overflow in XML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8532"},{"cve":"CVE-2026-8533","month":"2026-05","title":"Chromium: CVE-2026-8533 Use after free in Accessibility","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8533"},{"cve":"CVE-2026-8534","month":"2026-05","title":"Chromium: CVE-2026-8534 Integer overflow in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8534"},{"cve":"CVE-2026-8535","month":"2026-05","title":"Chromium: CVE-2026-8535 Out of bounds read in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8535"},{"cve":"CVE-2026-8536","month":"2026-05","title":"Chromium: CVE-2026-8536 Insufficient validation of untrusted input in ReadingMode","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8536"},{"cve":"CVE-2026-8537","month":"2026-05","title":"Chromium: CVE-2026-8537 Insufficient policy enforcement in ViewTransitions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8537"},{"cve":"CVE-2026-8538","month":"2026-05","title":"Chromium: CVE-2026-8538 Insufficient validation of untrusted input in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8538"},{"cve":"CVE-2026-8539","month":"2026-05","title":"Chromium: CVE-2026-8539 Script injection in SanitizerAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8539"},{"cve":"CVE-2026-8540","month":"2026-05","title":"Chromium: CVE-2026-8540 Type Confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8540"},{"cve":"CVE-2026-8541","month":"2026-05","title":"Chromium: CVE-2026-8541 Out of bounds read in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8541"},{"cve":"CVE-2026-8542","month":"2026-05","title":"Chromium: CVE-2026-8542 Use after free in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8542"},{"cve":"CVE-2026-8543","month":"2026-05","title":"Chromium: CVE-2026-8543 Out of bounds read in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8543"},{"cve":"CVE-2026-8544","month":"2026-05","title":"Chromium: CVE-2026-8544 Use after free in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8544"},{"cve":"CVE-2026-8545","month":"2026-05","title":"Chromium: CVE-2026-8545 Object corruption in Compositing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8545"},{"cve":"CVE-2026-8546","month":"2026-05","title":"Chromium: CVE-2026-8546 Out of bounds read in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8546"},{"cve":"CVE-2026-8547","month":"2026-05","title":"Chromium: CVE-2026-8547 Insufficient policy enforcement in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8547"},{"cve":"CVE-2026-8548","month":"2026-05","title":"Chromium: CVE-2026-8548 Out of bounds write in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8548"},{"cve":"CVE-2026-8549","month":"2026-05","title":"Chromium: CVE-2026-8549 Use after free in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8549"},{"cve":"CVE-2026-8550","month":"2026-05","title":"Chromium: CVE-2026-8550 Use after free in Google Lens","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8550"},{"cve":"CVE-2026-8551","month":"2026-05","title":"Chromium: CVE-2026-8551 Use after free in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8551"},{"cve":"CVE-2026-8552","month":"2026-05","title":"Chromium: CVE-2026-8552 Heap buffer overflow in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8552"},{"cve":"CVE-2026-8553","month":"2026-05","title":"Chromium: CVE-2026-8553 Use after free in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8553"},{"cve":"CVE-2026-8554","month":"2026-05","title":"Chromium: CVE-2026-8554 Type Confusion in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8554"},{"cve":"CVE-2026-8555","month":"2026-05","title":"Chromium: CVE-2026-8555 Use after free in GTK","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8555"},{"cve":"CVE-2026-8556","month":"2026-05","title":"Chromium: CVE-2026-8556 Inappropriate implementation in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8556"},{"cve":"CVE-2026-8557","month":"2026-05","title":"Chromium: CVE-2026-8557 Use after free in Accessibility","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8557"},{"cve":"CVE-2026-8558","month":"2026-05","title":"Chromium: CVE-2026-8558 Out of bounds write in Fonts","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8558"},{"cve":"CVE-2026-8559","month":"2026-05","title":"Chromium: CVE-2026-8559 Integer overflow in Internationalization","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8559"},{"cve":"CVE-2026-8560","month":"2026-05","title":"Chromium: CVE-2026-8560 Heap buffer overflow in SwiftShader","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8560"},{"cve":"CVE-2026-8561","month":"2026-05","title":"Chromium: CVE-2026-8561 Incorrect security UI in Fullscreen","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8561"},{"cve":"CVE-2026-8562","month":"2026-05","title":"Chromium: CVE-2026-8562 Side-channel information leakage in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8562"},{"cve":"CVE-2026-8563","month":"2026-05","title":"Chromium: CVE-2026-8563 Insufficient policy enforcement in IFrame Sandbox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8563"},{"cve":"CVE-2026-8564","month":"2026-05","title":"Chromium: CVE-2026-8564 Incorrect security UI in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8564"},{"cve":"CVE-2026-8565","month":"2026-05","title":"Chromium: CVE-2026-8565 Inappropriate implementation in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8565"},{"cve":"CVE-2026-8566","month":"2026-05","title":"Chromium: CVE-2026-8566 Insufficient policy enforcement in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8566"},{"cve":"CVE-2026-8567","month":"2026-05","title":"Chromium: CVE-2026-8567 Integer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8567"},{"cve":"CVE-2026-8568","month":"2026-05","title":"Chromium: CVE-2026-8568 Insufficient policy enforcement in AI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8568"},{"cve":"CVE-2026-8569","month":"2026-05","title":"Chromium: CVE-2026-8569 Out of bounds write in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8569"},{"cve":"CVE-2026-8570","month":"2026-05","title":"Chromium: CVE-2026-8570 Type Confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8570"},{"cve":"CVE-2026-8571","month":"2026-05","title":"Chromium: CVE-2026-8571 Insufficient policy enforcement in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8571"},{"cve":"CVE-2026-8572","month":"2026-05","title":"Chromium: CVE-2026-8572 Insufficient policy enforcement in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8572"},{"cve":"CVE-2026-8573","month":"2026-05","title":"Chromium: CVE-2026-8573 Integer overflow in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8573"},{"cve":"CVE-2026-8574","month":"2026-05","title":"Chromium: CVE-2026-8574 Use after free in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8574"},{"cve":"CVE-2026-8575","month":"2026-05","title":"Chromium: CVE-2026-8575 Use after free in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8575"},{"cve":"CVE-2026-8576","month":"2026-05","title":"Chromium: CVE-2026-8576 Inappropriate implementation in CORS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8576"},{"cve":"CVE-2026-8577","month":"2026-05","title":"Chromium: CVE-2026-8577 Integer overflow in Fonts","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8577"},{"cve":"CVE-2026-8578","month":"2026-05","title":"Chromium: CVE-2026-8578 Out of bounds read in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8578"},{"cve":"CVE-2026-8579","month":"2026-05","title":"Chromium: CVE-2026-8579 Insufficient validation of untrusted input in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8579"},{"cve":"CVE-2026-8580","month":"2026-05","title":"Chromium: CVE-2026-8580 Use after free in Mojo","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8580"},{"cve":"CVE-2026-8581","month":"2026-05","title":"Chromium: CVE-2026-8581 Use after free in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8581"},{"cve":"CVE-2026-8582","month":"2026-05","title":"Chromium: CVE-2026-8582 Object lifecycle issue in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8582"},{"cve":"CVE-2026-8583","month":"2026-05","title":"Chromium: CVE-2026-8583 Insufficient policy enforcement in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8583"},{"cve":"CVE-2026-8584","month":"2026-05","title":"Chromium: CVE-2026-8584 Inappropriate implementation in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8584"},{"cve":"CVE-2026-8585","month":"2026-05","title":"Chromium: CVE-2026-8585 Inappropriate implementation in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8585"},{"cve":"CVE-2026-8586","month":"2026-05","title":"Chromium: CVE-2026-8586 Inappropriate implementation in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8586"},{"cve":"CVE-2026-8587","month":"2026-05","title":"Chromium: CVE-2026-8587 Use after free in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8587"},{"cve":"CVE-2026-9110","month":"2026-05","title":"Chromium: CVE-2026-9110 Inappropriate implementation in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9110"},{"cve":"CVE-2026-9111","month":"2026-05","title":"Chromium: CVE-2026-9111 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9111"},{"cve":"CVE-2026-9112","month":"2026-05","title":"Chromium: CVE-2026-9112 Use after free in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9112"},{"cve":"CVE-2026-9113","month":"2026-05","title":"Chromium: CVE-2026-9113 Out of bounds read in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9113"},{"cve":"CVE-2026-9114","month":"2026-05","title":"Chromium: CVE-2026-9114 Use after free in QUIC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9114"},{"cve":"CVE-2026-9115","month":"2026-05","title":"Chromium: CVE-2026-9115 Insufficient policy enforcement in Service Worker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9115"},{"cve":"CVE-2026-9116","month":"2026-05","title":"Chromium: CVE-2026-9116 Insufficient policy enforcement in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9116"},{"cve":"CVE-2026-9117","month":"2026-05","title":"Chromium: CVE-2026-9117 Type Confusion in GFX","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9117"},{"cve":"CVE-2026-9118","month":"2026-05","title":"Chromium: CVE-2026-9118 Use after free in XR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9118"},{"cve":"CVE-2026-9119","month":"2026-05","title":"Chromium: CVE-2026-9119 Heap buffer overflow in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9119"},{"cve":"CVE-2026-9120","month":"2026-05","title":"Chromium: CVE-2026-9120 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9120"},{"cve":"CVE-2026-9121","month":"2026-05","title":"Chromium: CVE-2026-9126 Use after free in DOM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9121"},{"cve":"CVE-2026-9122","month":"2026-05","title":"Chromium: CVE-2026-9121 Out of bounds read in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9122"},{"cve":"CVE-2026-9123","month":"2026-05","title":"Chromium: CVE-2026-9122 Out of bounds read in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9123"},{"cve":"CVE-2026-9124","month":"2026-05","title":"Chromium: CVE-2026-9123 Heap buffer overflow in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9124"},{"cve":"CVE-2026-9126","month":"2026-05","title":"Chromium: CVE-2026-9124 Insufficient validation of untrusted input in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9126"},{"cve":"CVE-2026-9873","month":"2026-05","title":"Chromium: CVE-2026-9873 Use after free in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9873"},{"cve":"CVE-2026-9874","month":"2026-05","title":"Chromium: CVE-2026-9874 Use after free in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9874"},{"cve":"CVE-2026-9875","month":"2026-05","title":"Chromium: CVE-2026-9875 Out of bounds read in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9875"},{"cve":"CVE-2026-9876","month":"2026-05","title":"Chromium: CVE-2026-9876 Use after free in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9876"},{"cve":"CVE-2026-9877","month":"2026-05","title":"Chromium: CVE-2026-9877 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9877"},{"cve":"CVE-2026-9878","month":"2026-05","title":"Chromium: CVE-2026-9878 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9878"},{"cve":"CVE-2026-9879","month":"2026-05","title":"Chromium: CVE-2026-9879 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9879"},{"cve":"CVE-2026-9880","month":"2026-05","title":"Chromium: CVE-2026-9880 Insufficient validation of untrusted input in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9880"},{"cve":"CVE-2026-9881","month":"2026-05","title":"Chromium: CVE-2026-9881 Use after free in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9881"},{"cve":"CVE-2026-9882","month":"2026-05","title":"Chromium: CVE-2026-9882 Integer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9882"},{"cve":"CVE-2026-9883","month":"2026-05","title":"Chromium: CVE-2026-9883 Use after free in Base","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9883"},{"cve":"CVE-2026-9884","month":"2026-05","title":"Chromium: CVE-2026-9884 Use after free in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9884"},{"cve":"CVE-2026-9885","month":"2026-05","title":"Chromium: CVE-2026-9885 Insufficient validation of untrusted input in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9885"},{"cve":"CVE-2026-9886","month":"2026-05","title":"Chromium: CVE-2026-9886 Use after free in Base","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9886"},{"cve":"CVE-2026-9887","month":"2026-05","title":"Chromium: CVE-2026-9887 Use after free in Proxy","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9887"},{"cve":"CVE-2026-9888","month":"2026-05","title":"Chromium: CVE-2026-9888 Use after free in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9888"},{"cve":"CVE-2026-9889","month":"2026-05","title":"Chromium: CVE-2026-9889 Out of bounds read and write in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9889"},{"cve":"CVE-2026-9890","month":"2026-05","title":"Chromium: CVE-2026-9890 Use after free in XR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9890"},{"cve":"CVE-2026-9891","month":"2026-05","title":"Chromium: CVE-2026-9891 Use after free in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9891"},{"cve":"CVE-2026-9892","month":"2026-05","title":"Chromium: CVE-2026-9892 Inappropriate implementation in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9892"},{"cve":"CVE-2026-9893","month":"2026-05","title":"Chromium: CVE-2026-9893 Use after free in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9893"},{"cve":"CVE-2026-9894","month":"2026-05","title":"Chromium: CVE-2026-9894 Use after free in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9894"},{"cve":"CVE-2026-9895","month":"2026-05","title":"Chromium: CVE-2026-9895 Out of bounds read in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9895"},{"cve":"CVE-2026-9896","month":"2026-05","title":"Chromium: CVE-2026-9896 Out of bounds write in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9896"},{"cve":"CVE-2026-9897","month":"2026-05","title":"Chromium: CVE-2026-9897 Use after free in DOM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9897"},{"cve":"CVE-2026-9898","month":"2026-05","title":"Chromium: CVE-2026-9898 Insufficient validation of untrusted input in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9898"},{"cve":"CVE-2026-9899","month":"2026-05","title":"Chromium: CVE-2026-9899 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9899"},{"cve":"CVE-2026-9900","month":"2026-05","title":"Chromium: CVE-2026-9900 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9900"},{"cve":"CVE-2026-9901","month":"2026-05","title":"Chromium: CVE-2026-9901 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9901"},{"cve":"CVE-2026-9902","month":"2026-05","title":"Chromium: CVE-2026-9902 Use after free in Accessibility","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9902"},{"cve":"CVE-2026-9903","month":"2026-05","title":"Chromium: CVE-2026-9903 Insufficient validation of untrusted input in Site Isolation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9903"},{"cve":"CVE-2026-9904","month":"2026-05","title":"Chromium: CVE-2026-9904 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9904"},{"cve":"CVE-2026-9905","month":"2026-05","title":"Chromium: CVE-2026-9905 Use after free in Accessibility","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9905"},{"cve":"CVE-2026-9906","month":"2026-05","title":"Chromium: CVE-2026-9906 Out of bounds write in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9906"},{"cve":"CVE-2026-9907","month":"2026-05","title":"Chromium: CVE-2026-9907 Out of bounds read in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9907"},{"cve":"CVE-2026-9908","month":"2026-05","title":"Chromium: CVE-2026-9908 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9908"},{"cve":"CVE-2026-9909","month":"2026-05","title":"Chromium: CVE-2026-9909 Integer overflow in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9909"},{"cve":"CVE-2026-9910","month":"2026-05","title":"Chromium: CVE-2026-9910 Out of bounds memory access in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9910"},{"cve":"CVE-2026-9911","month":"2026-05","title":"Chromium: CVE-2026-9911 Integer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9911"},{"cve":"CVE-2026-9912","month":"2026-05","title":"Chromium: CVE-2026-9912 Inappropriate implementation in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9912"},{"cve":"CVE-2026-9913","month":"2026-05","title":"Chromium: CVE-2026-9913 Inappropriate implementation in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9913"},{"cve":"CVE-2026-9914","month":"2026-05","title":"Chromium: CVE-2026-9914 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9914"},{"cve":"CVE-2026-9915","month":"2026-05","title":"Chromium: CVE-2026-9915 Heap buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9915"},{"cve":"CVE-2026-9916","month":"2026-05","title":"Chromium: CVE-2026-9916 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9916"},{"cve":"CVE-2026-9917","month":"2026-05","title":"Chromium: CVE-2026-9917 Uninitialized Use in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9917"},{"cve":"CVE-2026-9918","month":"2026-05","title":"Chromium: CVE-2026-9918 Inappropriate implementation in Tint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9918"},{"cve":"CVE-2026-9919","month":"2026-05","title":"Chromium: CVE-2026-9919 Out of bounds read in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9919"},{"cve":"CVE-2026-9920","month":"2026-05","title":"Chromium: CVE-2026-9920 Uninitialized Use in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9920"},{"cve":"CVE-2026-9921","month":"2026-05","title":"Chromium: CVE-2026-9921 Uninitialized Use in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9921"},{"cve":"CVE-2026-9922","month":"2026-05","title":"Chromium: CVE-2026-9922 Use after free in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9922"},{"cve":"CVE-2026-9923","month":"2026-05","title":"Chromium: CVE-2026-9923 Use after free in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9923"},{"cve":"CVE-2026-9924","month":"2026-05","title":"Chromium: CVE-2026-9924 Heap buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9924"},{"cve":"CVE-2026-9925","month":"2026-05","title":"Chromium: CVE-2026-9925 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9925"},{"cve":"CVE-2026-9926","month":"2026-05","title":"Chromium: CVE-2026-9926 Heap buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9926"},{"cve":"CVE-2026-9927","month":"2026-05","title":"Chromium: CVE-2026-9927 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9927"},{"cve":"CVE-2026-9928","month":"2026-05","title":"Chromium: CVE-2026-9928 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9928"},{"cve":"CVE-2026-9929","month":"2026-05","title":"Chromium: CVE-2026-9929 Inappropriate implementation in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9929"},{"cve":"CVE-2026-9930","month":"2026-05","title":"Chromium: CVE-2026-9930 Out of bounds write in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9930"},{"cve":"CVE-2026-9931","month":"2026-05","title":"Chromium: CVE-2026-9931 Use after free in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9931"},{"cve":"CVE-2026-9932","month":"2026-05","title":"Chromium: CVE-2026-9932 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9932"},{"cve":"CVE-2026-9933","month":"2026-05","title":"Chromium: CVE-2026-9933 Use after free in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9933"},{"cve":"CVE-2026-9934","month":"2026-05","title":"Chromium: CVE-2026-9934 Use after free in Aura","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9934"},{"cve":"CVE-2026-9935","month":"2026-05","title":"Chromium: CVE-2026-9935 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9935"},{"cve":"CVE-2026-9936","month":"2026-05","title":"Chromium: CVE-2026-9936 Use after free in GFX","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9936"},{"cve":"CVE-2026-9937","month":"2026-05","title":"Chromium: CVE-2026-9937 Use after free in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9937"},{"cve":"CVE-2026-9938","month":"2026-05","title":"Chromium: CVE-2026-9938 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9938"},{"cve":"CVE-2026-9939","month":"2026-05","title":"Chromium: CVE-2026-9939 Heap buffer overflow in WebCodecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9939"},{"cve":"CVE-2026-9940","month":"2026-05","title":"Chromium: CVE-2026-9940 Heap buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9940"},{"cve":"CVE-2026-9941","month":"2026-05","title":"Chromium: CVE-2026-9941 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9941"},{"cve":"CVE-2026-9942","month":"2026-05","title":"Chromium: CVE-2026-9942 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9942"},{"cve":"CVE-2026-9943","month":"2026-05","title":"Chromium: CVE-2026-9943 Out of bounds read in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9943"},{"cve":"CVE-2026-9944","month":"2026-05","title":"Chromium: CVE-2026-9944 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9944"},{"cve":"CVE-2026-9945","month":"2026-05","title":"Chromium: CVE-2026-9945 Use after free in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9945"},{"cve":"CVE-2026-9946","month":"2026-05","title":"Chromium: CVE-2026-9946 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9946"},{"cve":"CVE-2026-9947","month":"2026-05","title":"Chromium: CVE-2026-9947 Use after free in XML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9947"},{"cve":"CVE-2026-9948","month":"2026-05","title":"Chromium: CVE-2026-9948 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9948"},{"cve":"CVE-2026-9949","month":"2026-05","title":"Chromium: CVE-2026-9949 Use after free in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9949"},{"cve":"CVE-2026-9950","month":"2026-05","title":"Chromium: CVE-2026-9950 Insufficient validation of untrusted input in iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9950"},{"cve":"CVE-2026-9951","month":"2026-05","title":"Chromium: CVE-2026-9951 Use after free in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9951"},{"cve":"CVE-2026-9952","month":"2026-05","title":"Chromium: CVE-2026-9952 Use after free in WebAudio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9952"},{"cve":"CVE-2026-9953","month":"2026-05","title":"Chromium: CVE-2026-9953 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9953"},{"cve":"CVE-2026-9954","month":"2026-05","title":"Chromium: CVE-2026-9954 Use after free in TabStrip","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9954"},{"cve":"CVE-2026-9955","month":"2026-05","title":"Chromium: CVE-2026-9955 Inappropriate implementation in iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9955"},{"cve":"CVE-2026-9956","month":"2026-05","title":"Chromium: CVE-2026-9956 Use after free in iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9956"},{"cve":"CVE-2026-9957","month":"2026-05","title":"Chromium: CVE-2026-9957 Use after free in PDF","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9957"},{"cve":"CVE-2026-9958","month":"2026-05","title":"Chromium: CVE-2026-9958 Use after free in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9958"},{"cve":"CVE-2026-9959","month":"2026-05","title":"Chromium: CVE-2026-9959 Race in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9959"},{"cve":"CVE-2026-9960","month":"2026-05","title":"Chromium: CVE-2026-9960 Integer overflow in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9960"},{"cve":"CVE-2026-9961","month":"2026-05","title":"Chromium: CVE-2026-9961 Use after free in SurfaceCapture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9961"},{"cve":"CVE-2026-9962","month":"2026-05","title":"Chromium: CVE-2026-9962 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9962"},{"cve":"CVE-2026-9963","month":"2026-05","title":"Chromium: CVE-2026-9963 Uninitialized Use in iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9963"},{"cve":"CVE-2026-9964","month":"2026-05","title":"Chromium: CVE-2026-9964 Use after free in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9964"},{"cve":"CVE-2026-9965","month":"2026-05","title":"Chromium: CVE-2026-9965 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9965"},{"cve":"CVE-2026-9966","month":"2026-05","title":"Chromium: CVE-2026-9966 Integer overflow in XML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9966"},{"cve":"CVE-2026-9967","month":"2026-05","title":"Chromium: CVE-2026-9967 Out of bounds write in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9967"},{"cve":"CVE-2026-9968","month":"2026-05","title":"Chromium: CVE-2026-9968 Integer overflow in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9968"},{"cve":"CVE-2026-9969","month":"2026-05","title":"Chromium: CVE-2026-9969 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9969"},{"cve":"CVE-2026-9970","month":"2026-05","title":"Chromium: CVE-2026-9970 Use after free in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9970"},{"cve":"CVE-2026-9971","month":"2026-05","title":"Chromium: CVE-2026-9971 Inappropriate implementation in iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9971"},{"cve":"CVE-2026-9972","month":"2026-05","title":"Chromium: CVE-2026-9972 Uninitialized Use in Gamepad","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9972"},{"cve":"CVE-2026-9973","month":"2026-05","title":"Chromium: CVE-2026-9973 Out of bounds write in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9973"},{"cve":"CVE-2026-9974","month":"2026-05","title":"Chromium: CVE-2026-9974 Out of bounds write in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9974"},{"cve":"CVE-2026-9975","month":"2026-05","title":"Chromium: CVE-2026-9975 Out of bounds read and write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9975"},{"cve":"CVE-2026-9976","month":"2026-05","title":"Chromium: CVE-2026-9976 Inappropriate implementation in USB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9976"},{"cve":"CVE-2026-9977","month":"2026-05","title":"Chromium: CVE-2026-9977 Insufficient validation of untrusted input in WebShare","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9977"},{"cve":"CVE-2026-9978","month":"2026-05","title":"Chromium: CVE-2026-9978 Use after free in Glic","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9978"},{"cve":"CVE-2026-9979","month":"2026-05","title":"Chromium: CVE-2026-9979 Insufficient validation of untrusted input in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9979"},{"cve":"CVE-2026-9980","month":"2026-05","title":"Chromium: CVE-2026-9980 Insufficient validation of untrusted input in Printing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9980"},{"cve":"CVE-2026-9981","month":"2026-05","title":"Chromium: CVE-2026-9981 Inappropriate implementation in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9981"},{"cve":"CVE-2026-9982","month":"2026-05","title":"Chromium: CVE-2026-9982 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9982"},{"cve":"CVE-2026-9983","month":"2026-05","title":"Chromium: CVE-2026-9983 Type Confusion in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9983"},{"cve":"CVE-2026-9984","month":"2026-05","title":"Chromium: CVE-2026-9984 Use after free in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9984"},{"cve":"CVE-2026-9985","month":"2026-05","title":"Chromium: CVE-2026-9985 Insufficient validation of untrusted input in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9985"},{"cve":"CVE-2026-9986","month":"2026-05","title":"Chromium: CVE-2026-9986 Insufficient validation of untrusted input in OptimizationGuide","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9986"},{"cve":"CVE-2026-9988","month":"2026-05","title":"Chromium: CVE-2026-9988 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9988"},{"cve":"CVE-2026-9989","month":"2026-05","title":"Chromium: CVE-2026-9989 Inappropriate implementation in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9989"},{"cve":"CVE-2026-9990","month":"2026-05","title":"Chromium: CVE-2026-9990 Use after free in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9990"},{"cve":"CVE-2026-9991","month":"2026-05","title":"Chromium: CVE-2026-9991 Inappropriate implementation in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9991"},{"cve":"CVE-2026-9992","month":"2026-05","title":"Chromium: CVE-2026-9992 Use after free in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9992"},{"cve":"CVE-2026-9993","month":"2026-05","title":"Chromium: CVE-2026-9993 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9993"},{"cve":"CVE-2026-9994","month":"2026-05","title":"Chromium: CVE-2026-9994 Use after free in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9994"},{"cve":"CVE-2026-9995","month":"2026-05","title":"Chromium: CVE-2026-9995 Use after free in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9995"},{"cve":"CVE-2026-9996","month":"2026-05","title":"Chromium: CVE-2026-9996 Out of bounds read in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9996"},{"cve":"CVE-2026-9997","month":"2026-05","title":"Chromium: CVE-2026-9997 Use after free in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9997"},{"cve":"CVE-2026-9998","month":"2026-05","title":"Chromium: CVE-2026-9998 Integer overflow in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9998"},{"cve":"CVE-2026-9999","month":"2026-05","title":"Chromium: CVE-2026-9999 Inappropriate implementation in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9999"},{"cve":"CVE-2026-31769","month":"2026-05","title":"gpib: fix use-after-free in IO ioctl handlers","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31769"},{"cve":"CVE-2026-43021","month":"2026-05","title":"Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43021"},{"cve":"CVE-2026-43045","month":"2026-05","title":"mshv: Fix error handling in mshv_region_pin","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43045"},{"cve":"CVE-2026-31721","month":"2026-05","title":"usb: gadget: f_hid: move list and spinlock inits from bind to alloc","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31721"},{"cve":"CVE-2026-31704","month":"2026-05","title":"ksmbd: use check_add_overflow() to prevent u16 DACL size overflow","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31704"},{"cve":"CVE-2026-31702","month":"2026-05","title":"f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31702"},{"cve":"CVE-2026-41673","month":"2026-05","title":"xmldom: Denial of service via uncontrolled recursion in XML serialization","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41673"},{"cve":"CVE-2026-43443","month":"2026-05","title":"ASoC: amd: acp-mach-common: Add missing error check for clock acquisition","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43443"},{"cve":"CVE-2026-43421","month":"2026-05","title":"usb: gadget: f_ncm: Fix net_device lifecycle with device_move","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43421"},{"cve":"CVE-2026-42256","month":"2026-05","title":"net-imap: Denial of service via high iteration count for `SCRAM-*` authentication","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-1322"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42256"},{"cve":"CVE-2026-42246","month":"2026-05","title":"net-imap vulnerable to STARTTLS stripping via invalid response timing","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-392"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42246"},{"cve":"CVE-2026-6210","month":"2026-05","title":"Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash","family":"Open Source Software","component":"Mariner","cna":"TQtC","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6210"},{"cve":"CVE-2026-5773","month":"2026-05","title":"wrong reuse of SMB connection","family":"Open Source Software","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5773"},{"cve":"CVE-2026-42011","month":"2026-05","title":"Gnutls: gnutls: security bypass due to incorrect name constraint handling","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42011"},{"cve":"CVE-2026-44662","month":"2026-05","title":"rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44662"},{"cve":"CVE-2026-43490","month":"2026-05","title":"ksmbd: validate inherited ACE SID length","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43490"},{"cve":"CVE-2026-43493","month":"2026-05","title":"crypto: pcrypt - Fix handling of MAY_BACKLOG requests","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43493"},{"cve":"CVE-2026-8723","month":"2026-05","title":"qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnly","family":"Open Source Software","component":"Mariner","cna":"harborist","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8723"},{"cve":"CVE-2025-14575","month":"2026-05","title":"Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading","family":"Other","component":"Mariner","cna":"TQtC","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-427"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-14575"},{"cve":"CVE-2026-39831","month":"2026-05","title":"Invoking  bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39831"},{"cve":"CVE-2026-46595","month":"2026-05","title":"Invoking  VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh","family":"Open Source Software","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46595"},{"cve":"CVE-2026-6402","month":"2026-05","title":"webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins","family":"Open Source Software","component":"Mariner","cna":"openjs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-749"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6402"},{"cve":"CVE-2026-44844","month":"2026-05","title":"eml_parser: Recursion DoS via nested message/rfc822 attachments","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44844"},{"cve":"CVE-2026-47104","month":"2026-05","title":"libusb < 1.0.30 Out-of-Bounds Read in parse_iad_array()","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Low","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47104"},{"cve":"CVE-2026-46232","month":"2026-05","title":"HID: playstation: Clamp num_touch_reports","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46232"},{"cve":"CVE-2026-46235","month":"2026-05","title":"media: saa7164: add ioremap return checks and cleanups","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46235"},{"cve":"CVE-2026-46157","month":"2026-05","title":"ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46157"},{"cve":"CVE-2026-9538","month":"2026-05","title":"Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header","family":"Open Source Software","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9538"},{"cve":"CVE-2026-48864","month":"2026-05","title":"Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48864"},{"cve":"CVE-2026-43022","month":"2026-05","title":"Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43022"},{"cve":"CVE-2026-43058","month":"2026-05","title":"media: vidtv: fix pass-by-value structs causing MSAN warnings","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43058"},{"cve":"CVE-2026-43176","month":"2026-05","title":"wifi: rtw89: pci: validate release report content before using for RTL8922DE","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43176"},{"cve":"CVE-2026-43228","month":"2026-05","title":"hfs: Replace BUG_ON with error handling for CNID count checks","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43228"},{"cve":"CVE-2026-43267","month":"2026-05","title":"wifi: rtw89: fix potential zero beacon interval in beacon tracking","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43267"},{"cve":"CVE-2026-43870","month":"2026-05","title":"Apache Thrift: Node.js web_server.js multi-vulnerability","family":"Open Source Software","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43870"},{"cve":"CVE-2026-43868","month":"2026-05","title":"Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern","family":"Open Source Software","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43868"},{"cve":"CVE-2026-43869","month":"2026-05","title":"Apache Thrift: TSSLTransportFactory.java hostname verification","family":"Mariner","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-297"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43869"},{"cve":"CVE-2026-41672","month":"2026-05","title":"xmldom: XML node injection through unvalidated comment serialization","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-91"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41672"},{"cve":"CVE-2026-41674","month":"2026-05","title":"xmldom: XML injection through unvalidated DocumentType serialization","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-91"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41674"},{"cve":"CVE-2026-41675","month":"2026-05","title":"xmldom: XML node injection through unvalidated processing instruction serialization","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-91"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41675"},{"cve":"CVE-2026-43416","month":"2026-05","title":"powerpc, perf: Check that current->mm is alive before getting user callchain","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43416"},{"cve":"CVE-2026-43317","month":"2026-05","title":"most: core: fix leak on early registration failure","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43317"},{"cve":"CVE-2026-42257","month":"2026-05","title":"net-imap: Command Injection via \"raw\" arguments to multiple commands","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-93"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42257"},{"cve":"CVE-2026-42258","month":"2026-05","title":"net-imap: Command Injection via unvalidated Symbol inputs","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42258"},{"cve":"CVE-2026-8295","month":"2026-05","title":"Integer overflow in simdjson","family":"Open Source Software","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8295"},{"cve":"CVE-2026-4892","month":"2026-05","title":"CVE-2026-4892","family":"Open Source Software","component":"Mariner","cna":"certcc","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4892"},{"cve":"CVE-2026-45736","month":"2026-05","title":"ws: Uninitialized memory disclosure","family":"Open Source Software","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45736"},{"cve":"CVE-2026-43495","month":"2026-05","title":"net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43495"},{"cve":"CVE-2026-23679","month":"2026-05","title":"libusb < 1.0.30 NULL Pointer Dereference in parse_interface()","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23679"},{"cve":"CVE-2026-46148","month":"2026-05","title":"spi: microchip-core-qspi: control built-in cs manually","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46148"},{"cve":"CVE-2026-46194","month":"2026-05","title":"f2fs: fix node_cnt race between extent node destroy and writeback","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46194"},{"cve":"CVE-2026-46179","month":"2026-05","title":"ASoC: SOF: Don't allow pointer operations on unconfigured streams","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46179"},{"cve":"CVE-2026-46143","month":"2026-05","title":"ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46143"},{"cve":"CVE-2026-46169","month":"2026-05","title":"hfsplus: fix uninit-value by validating catalog record size","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46169"},{"cve":"CVE-2026-46121","month":"2026-05","title":"mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46121"},{"cve":"CVE-2026-46184","month":"2026-05","title":"sound: ua101: fix division by zero at probe","family":"Open Source Software","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46184"},{"cve":"CVE-2026-41184","month":"2026-05","title":"ServiceAccount token disclosure via install-cni container logs","family":"Other","component":"Mariner","cna":"Tigera","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-532"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41184"},{"cve":"CVE-2025-15661","month":"2026-06","title":"libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-15661"},{"cve":"CVE-2025-71313","month":"2026-06","title":"PCI: endpoint: Add missing NULL check for alloc_workqueue()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71313"},{"cve":"CVE-2025-71315","month":"2026-06","title":"drm/vkms: Convert to DRM's vblank timer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-71315"},{"cve":"CVE-2026-0864","month":"2026-06","title":"Configuration Injection via Carriage Return (\\r) in write() method","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-74"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0864"},{"cve":"CVE-2026-10275","month":"2026-06","title":"OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Low","cvss":5.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C","cwe":["CWE-120"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10275"},{"cve":"CVE-2026-10846","month":"2026-06","title":"Insufficient verification that responses belong to a query","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10846"},{"cve":"CVE-2026-10879","month":"2026-06","title":"DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10879"},{"cve":"CVE-2026-11332","month":"2026-06","title":"Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-88"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11332"},{"cve":"CVE-2026-11463","month":"2026-06","title":"USCiLab Cereal Shared Pointer type confusion","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11463"},{"cve":"CVE-2026-11525","month":"2026-06","title":"undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching","family":"Other","component":"Mariner","cna":"openjs","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-183"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11525"},{"cve":"CVE-2026-11623","month":"2026-06","title":"tmux image.c image_free use after free","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Low","cvss":4.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11623"},{"cve":"CVE-2026-11625","month":"2026-06","title":"Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":["CWE-335"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11625"},{"cve":"CVE-2026-11822","month":"2026-06","title":"SQLite before 3.53.2 Memory Corruption in FTS5 Extension","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11822"},{"cve":"CVE-2026-11824","month":"2026-06","title":"SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11824"},{"cve":"CVE-2026-11972","month":"2026-06","title":"tarfile opened in streaming mode mishandles EOF","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-252"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11972"},{"cve":"CVE-2026-12003","month":"2026-06","title":"CPython >3.11 Insecure Input Validation resulting in privilege escalation","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-427"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12003"},{"cve":"CVE-2026-12087","month":"2026-06","title":"Socket versions before 2.041 for Perl have an out-of-bounds heap read","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12087"},{"cve":"CVE-2026-12505","month":"2026-06","title":"Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-250"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12505"},{"cve":"CVE-2026-12725","month":"2026-06","title":"Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12725"},{"cve":"CVE-2026-12912","month":"2026-06","title":"Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12912"},{"cve":"CVE-2026-12969","month":"2026-06","title":"Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12969"},{"cve":"CVE-2026-13201","month":"2026-06","title":"Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:U","cwe":["CWE-61"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13201"},{"cve":"CVE-2026-13208","month":"2026-06","title":"Kubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13208"},{"cve":"CVE-2026-13218","month":"2026-06","title":"Kubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L","cwe":["CWE-61"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13218"},{"cve":"CVE-2026-13318","month":"2026-06","title":"Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13318"},{"cve":"CVE-2026-13322","month":"2026-06","title":"Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13322"},{"cve":"CVE-2026-13325","month":"2026-06","title":"Virt-handler-rhel9: kubevirt: kubevirt: disabletls migration setting removes authentication, exposing unauthenticated virtqemud proxy on all interfaces","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13325"},{"cve":"CVE-2026-13595","month":"2026-06","title":"Util-linux: util-linux: heap use-after-free in libblkid nested partition probing","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13595"},{"cve":"CVE-2026-13757","month":"2026-06","title":"P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13757"},{"cve":"CVE-2026-14164","month":"2026-06","title":"Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14164"},{"cve":"CVE-2026-27145","month":"2026-06","title":"Inefficient candidate hostname parsing in crypto/x509","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27145"},{"cve":"CVE-2026-29167","month":"2026-06","title":"Apache HTTP Server: mod_ldap per-dir use-after-free","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-29167"},{"cve":"CVE-2026-29170","month":"2026-06","title":"Apache HTTP Server: mod_proxy_ftp XSS","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-29170"},{"cve":"CVE-2026-3195","month":"2026-06","title":"Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)","family":"Other","component":"Mariner","cna":"fedora","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3195"},{"cve":"CVE-2026-3196","month":"2026-06","title":"Qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation","family":"Other","component":"Mariner","cna":"fedora","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3196"},{"cve":"CVE-2026-3276","month":"2026-06","title":"Potential DoS via quadratic complexity in unicodedata.normalize()","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3276"},{"cve":"CVE-2026-34180","month":"2026-06","title":"Heap Buffer Over-read in ASN.1 Content Parsing","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34180"},{"cve":"CVE-2026-34181","month":"2026-06","title":"PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-354"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34181"},{"cve":"CVE-2026-34183","month":"2026-06","title":"Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-1325"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34183"},{"cve":"CVE-2026-34355","month":"2026-06","title":"Apache HTTP Server: mod_proxy_html buffer overflow","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34355"},{"cve":"CVE-2026-34356","month":"2026-06","title":"Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34356"},{"cve":"CVE-2026-41991","month":"2026-06","title":"Predictable Temporary File in GNU gzip","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-377"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41991"},{"cve":"CVE-2026-41992","month":"2026-06","title":"Global Buffer Overflow in GNU gzip","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41992"},{"cve":"CVE-2026-42014","month":"2026-06","title":"Gnutls: fix use-after-free in gnutls_pkcs11_token_set_pin","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":["CWE-825"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42014"},{"cve":"CVE-2026-42055","month":"2026-06","title":"NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability","family":"Other","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42055"},{"cve":"CVE-2026-42504","month":"2026-06","title":"Quadratic complexity in WordDecoder.DecodeHeader in mime","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42504"},{"cve":"CVE-2026-42507","month":"2026-06","title":"Arbitrary inputs are included in errors without any escaping in net/textproto","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42507"},{"cve":"CVE-2026-42535","month":"2026-06","title":"Apache HTTP Server: mod_dav_fs protected directory access","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-668"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42535"},{"cve":"CVE-2026-42536","month":"2026-06","title":"Apache HTTP Server: mod_xml2enc heap overflow","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42536"},{"cve":"CVE-2026-42764","month":"2026-06","title":"NULL Pointer Dereference in QUIC Server Initial Packet Handling","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42764"},{"cve":"CVE-2026-42766","month":"2026-06","title":"Possible NULL Dereference in Password-Based CMS Decryption","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42766"},{"cve":"CVE-2026-42767","month":"2026-06","title":"NULL Pointer Dereference in CRMF EncryptedValue Decryption","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42767"},{"cve":"CVE-2026-42768","month":"2026-06","title":"Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-514"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42768"},{"cve":"CVE-2026-42769","month":"2026-06","title":"Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42769"},{"cve":"CVE-2026-42770","month":"2026-06","title":"FFC-DH Peer Validation Uses Attacker-Supplied q","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-325"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42770"},{"cve":"CVE-2026-4360","month":"2026-06","title":"Tarfile.extract() doesn't fully respect filter parameter","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-281"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4360"},{"cve":"CVE-2026-4367","month":"2026-06","title":"Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4367"},{"cve":"CVE-2026-43951","month":"2026-06","title":"Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43951"},{"cve":"CVE-2026-43958","month":"2026-06","title":"Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43958"},{"cve":"CVE-2026-43966","month":"2026-06","title":"HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-113"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43966"},{"cve":"CVE-2026-43973","month":"2026-06","title":"gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43973"},{"cve":"CVE-2026-44119","month":"2026-06","title":"Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":["CWE-269"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44119"},{"cve":"CVE-2026-44185","month":"2026-06","title":"Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44185"},{"cve":"CVE-2026-44186","month":"2026-06","title":"Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44186"},{"cve":"CVE-2026-44631","month":"2026-06","title":"Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H/E:U","cwe":["CWE-124"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44631"},{"cve":"CVE-2026-44889","month":"2026-06","title":"WebOb: Location header normalization during redirect leads to open redirect","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-601"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44889"},{"cve":"CVE-2026-44967","month":"2026-06","title":"opentelemetry-cpp: OTLP HTTP exporters read unbounded HTTP response","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44967"},{"cve":"CVE-2026-45445","month":"2026-06","title":"AES-OCB IV Ignored on EVP_Cipher() Path","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-325"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45445"},{"cve":"CVE-2026-45446","month":"2026-06","title":"Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-325"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45446"},{"cve":"CVE-2026-45447","month":"2026-06","title":"Heap Use-After-Free in the PKCS7_verify() Function","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45447"},{"cve":"CVE-2026-46243","month":"2026-06","title":"smb: client: reject userspace cifs.spnego descriptions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46243"},{"cve":"CVE-2026-46244","month":"2026-06","title":"netfilter: nft_inner: Fix IPv6 inner_thoff desync","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46244"},{"cve":"CVE-2026-46245","month":"2026-06","title":"drm/amd/display: Fix dc_link NULL handling in HPD init","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46245"},{"cve":"CVE-2026-46250","month":"2026-06","title":"MIPS: Work around LLVM bug when gp is used as global register variable","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46250"},{"cve":"CVE-2026-46252","month":"2026-06","title":"regulator: core: fix locking in regulator_resolve_supply() error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46252"},{"cve":"CVE-2026-46254","month":"2026-06","title":"AppArmor: Allow apparmor to handle unaligned dfa tables","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46254"},{"cve":"CVE-2026-46273","month":"2026-06","title":"ibmveth: Disable GSO for packets with small MSS","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46273"},{"cve":"CVE-2026-46274","month":"2026-06","title":"io-wq: check that the predecessor is hashed in io_wq_remove_pending()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46274"},{"cve":"CVE-2026-46275","month":"2026-06","title":"Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46275"},{"cve":"CVE-2026-46280","month":"2026-06","title":"lib: test_hmm: evict device pages on file close to avoid use-after-free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46280"},{"cve":"CVE-2026-46282","month":"2026-06","title":"iio: frequency: admv1013: fix NULL pointer dereference on str","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46282"},{"cve":"CVE-2026-46287","month":"2026-06","title":"net: txgbe: fix RTNL assertion warning when remove module","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46287"},{"cve":"CVE-2026-46289","month":"2026-06","title":"lib/scatterlist: fix length calculations in extract_kvec_to_sg","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46289"},{"cve":"CVE-2026-46291","month":"2026-06","title":"crypto: caam - guard HMAC key hex dumps in hash_digest_key","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46291"},{"cve":"CVE-2026-46292","month":"2026-06","title":"pmdomain: core: Fix detach procedure for virtual devices in genpd","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46292"},{"cve":"CVE-2026-46296","month":"2026-06","title":"spi: s3c64xx: fix NULL-deref on driver unbind","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46296"},{"cve":"CVE-2026-46299","month":"2026-06","title":"hfsplus: fix held lock freed on hfsplus_fill_super()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46299"},{"cve":"CVE-2026-46302","month":"2026-06","title":"selinux: allow multiple opens of /sys/fs/selinux/policy","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46302"},{"cve":"CVE-2026-46303","month":"2026-06","title":"isofs: validate Rock Ridge CE continuation extent against volume size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46303"},{"cve":"CVE-2026-46304","month":"2026-06","title":"nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46304"},{"cve":"CVE-2026-46306","month":"2026-06","title":"flow_dissector: do not dissect PPPoE PFC frames","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46306"},{"cve":"CVE-2026-46307","month":"2026-06","title":"wifi: ath5k: do not access array OOB","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46307"},{"cve":"CVE-2026-46312","month":"2026-06","title":"media: videobuf2: Set vma_flags in vb2_dma_sg_mmap","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46312"},{"cve":"CVE-2026-46314","month":"2026-06","title":"drm/v3d: Reject empty multisync extension to prevent infinite loop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46314"},{"cve":"CVE-2026-46319","month":"2026-06","title":"net/sched: act_ct: Only release RCU read lock after ct_ft","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46319"},{"cve":"CVE-2026-46320","month":"2026-06","title":"tap: free page on error paths in tap_get_user_xdp()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46320"},{"cve":"CVE-2026-46321","month":"2026-06","title":"tun: free page on short-frame rejection in tun_xdp_one()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46321"},{"cve":"CVE-2026-46322","month":"2026-06","title":"tun: free page on build_skb failure in tun_xdp_one()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46322"},{"cve":"CVE-2026-46323","month":"2026-06","title":"net: gro: don't merge zcopy skbs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46323"},{"cve":"CVE-2026-46324","month":"2026-06","title":"netfilter: nf_tables: use list_del_rcu for netlink hooks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46324"},{"cve":"CVE-2026-46325","month":"2026-06","title":"RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46325"},{"cve":"CVE-2026-46330","month":"2026-06","title":"Revert \"net/smc: Introduce TCP ULP support\"","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46330"},{"cve":"CVE-2026-46331","month":"2026-06","title":"net/sched: fix pedit partial COW leading to page cache corruption","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46331"},{"cve":"CVE-2026-46433","month":"2026-06","title":"lldpd: Heap OOB Read in VLAN Decapsulation memmove","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46433"},{"cve":"CVE-2026-47162","month":"2026-06","title":"Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-74"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47162"},{"cve":"CVE-2026-47167","month":"2026-06","title":"Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47167"},{"cve":"CVE-2026-47240","month":"2026-06","title":"Net::IMAP: Command Injection via non-synchronizing literal in \"raw\" argument","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47240"},{"cve":"CVE-2026-47242","month":"2026-06","title":"Net::IMAP: Command Injection via ID command argument","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47242"},{"cve":"CVE-2026-47770","month":"2026-06","title":"jq: stack overflow in deep structural equality","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47770"},{"cve":"CVE-2026-48142","month":"2026-06","title":"NGINX ngx_http_charset_module vulnerability","family":"Other","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48142"},{"cve":"CVE-2026-48715","month":"2026-06","title":"radvdump's Route Information Option Parser has a Stack Buffer Overflow","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48715"},{"cve":"CVE-2026-48855","month":"2026-06","title":"SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Low","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48855"},{"cve":"CVE-2026-48856","month":"2026-06","title":"httpc leaks Authorization header to cross-origin redirect targets","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-601"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48856"},{"cve":"CVE-2026-48858","month":"2026-06","title":"ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48858"},{"cve":"CVE-2026-48860","month":"2026-06","title":"Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-1025"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48860"},{"cve":"CVE-2026-48913","month":"2026-06","title":"Apache HTTP Server: mod_http2 memory corruption when file handles exhausted","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48913"},{"cve":"CVE-2026-48914","month":"2026-06","title":"Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H/E:U","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48914"},{"cve":"CVE-2026-49759","month":"2026-06","title":"Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49759"},{"cve":"CVE-2026-49760","month":"2026-06","title":"Stack Buffer Overflow in ei_s_print_term at Very Large Integer","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49760"},{"cve":"CVE-2026-49762","month":"2026-06","title":"Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49762"},{"cve":"CVE-2026-49839","month":"2026-06","title":"jq --rawfile invalid-state reuse after String too long causes heap-buffer-overflow","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49839"},{"cve":"CVE-2026-49851","month":"2026-06","title":"Mistune: Potential DoS via quadratic-time parsing in parse_link_text","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49851"},{"cve":"CVE-2026-49975","month":"2026-06","title":"Apache HTTP Server: mod_http2 denial of service","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49975"},{"cve":"CVE-2026-50031","month":"2026-06","title":"ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Two subcommands \"ipmi-oem dell get-active-directory-config\" and \"ipmi-oem fujitsu get-sel-entry-long-text\" were found to have exploitable buffer overflows on response messages.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50031"},{"cve":"CVE-2026-50219","month":"2026-06","title":"libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":4.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50219"},{"cve":"CVE-2026-50256","month":"2026-06","title":"Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50256"},{"cve":"CVE-2026-50257","month":"2026-06","title":"Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50257"},{"cve":"CVE-2026-50258","month":"2026-06","title":"Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50258"},{"cve":"CVE-2026-50259","month":"2026-06","title":"Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50259"},{"cve":"CVE-2026-50260","month":"2026-06","title":"Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50260"},{"cve":"CVE-2026-50261","month":"2026-06","title":"Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50261"},{"cve":"CVE-2026-50262","month":"2026-06","title":"Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50262"},{"cve":"CVE-2026-50263","month":"2026-06","title":"Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50263"},{"cve":"CVE-2026-50292","month":"2026-06","title":"In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-93"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50292"},{"cve":"CVE-2026-52858","month":"2026-06","title":"Vim: Arbitrary Code Execution via Python Omni-Completion","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52858"},{"cve":"CVE-2026-52859","month":"2026-06","title":"Vim: Out-of-bounds Read in Terminal Screen Snapshot","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52859"},{"cve":"CVE-2026-52860","month":"2026-06","title":"Vim: Arbitrary Code Execution via Python Omni-Completion","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52860"},{"cve":"CVE-2026-52908","month":"2026-06","title":"RDMA: During rereg_mr ensure that REREG_ACCESS is compatible","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52908"},{"cve":"CVE-2026-52909","month":"2026-06","title":"ip6_vti: set netns_immutable on the fallback device.","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52909"},{"cve":"CVE-2026-52910","month":"2026-06","title":"bpf: Free reuseport cBPF prog after RCU grace period.","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52910"},{"cve":"CVE-2026-52912","month":"2026-06","title":"netfilter: nf_queue: hold bridge skb->dev while queued","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52912"},{"cve":"CVE-2026-52915","month":"2026-06","title":"netfilter: ip6t_hbh: reject oversized option lists","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52915"},{"cve":"CVE-2026-52916","month":"2026-06","title":"batman-adv: frag: disallow unicast fragment in fragment","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52916"},{"cve":"CVE-2026-52917","month":"2026-06","title":"sctp: diag: reject stale associations in dump_one path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52917"},{"cve":"CVE-2026-52918","month":"2026-06","title":"Bluetooth: serialize accept_q access","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52918"},{"cve":"CVE-2026-52919","month":"2026-06","title":"batman-adv: fix tp_meter counter underflow during shutdown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52919"},{"cve":"CVE-2026-52920","month":"2026-06","title":"netfilter: xt_policy: fix strict mode inbound policy matching","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52920"},{"cve":"CVE-2026-52921","month":"2026-06","title":"netfilter: ipset: stop hash:* range iteration at end","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52921"},{"cve":"CVE-2026-52922","month":"2026-06","title":"batman-adv: dat: handle forward allocation error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52922"},{"cve":"CVE-2026-52923","month":"2026-06","title":"ipc: limit next_id allocation to the valid ID range","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52923"},{"cve":"CVE-2026-52924","month":"2026-06","title":"sctp: purge outqueue on stale COOKIE-ECHO handling","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52924"},{"cve":"CVE-2026-52925","month":"2026-06","title":"vrf: Fix a potential NPD when removing a port from a VRF","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52925"},{"cve":"CVE-2026-52926","month":"2026-06","title":"batman-adv: clear current gateway during teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52926"},{"cve":"CVE-2026-52927","month":"2026-06","title":"netfilter: ebtables: fix OOB read in compat_mtw_from_user","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52927"},{"cve":"CVE-2026-52928","month":"2026-06","title":"af_unix: Reject SIOCATMARK on non-stream sockets","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52928"},{"cve":"CVE-2026-52929","month":"2026-06","title":"sctp: stream: fully roll back denied add-stream state","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52929"},{"cve":"CVE-2026-52930","month":"2026-06","title":"ipc/shm: serialize orphan cleanup with shm_nattch updates","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52930"},{"cve":"CVE-2026-52931","month":"2026-06","title":"batman-adv: tp_meter: avoid use of uninit sender vars","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52931"},{"cve":"CVE-2026-52933","month":"2026-06","title":"io_uring/poll: fix signed comparison in io_poll_get_ownership()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52933"},{"cve":"CVE-2026-52934","month":"2026-06","title":"batman-adv: tvlv: reject oversized TVLV packets","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52934"},{"cve":"CVE-2026-52936","month":"2026-06","title":"crypto: jitterentropy - replace long-held spinlock with mutex","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52936"},{"cve":"CVE-2026-52937","month":"2026-06","title":"tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52937"},{"cve":"CVE-2026-52941","month":"2026-06","title":"net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52941"},{"cve":"CVE-2026-52942","month":"2026-06","title":"netfilter: nf_log: validate MAC header was set before dumping it","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52942"},{"cve":"CVE-2026-52943","month":"2026-06","title":"net: skbuff: fix missing zerocopy reference in pskb_carve helpers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52943"},{"cve":"CVE-2026-52946","month":"2026-06","title":"fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52946"},{"cve":"CVE-2026-52947","month":"2026-06","title":"net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52947"},{"cve":"CVE-2026-52948","month":"2026-06","title":"i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52948"},{"cve":"CVE-2026-52953","month":"2026-06","title":"iommu/vt-d: Fix oops due to out of scope access","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52953"},{"cve":"CVE-2026-52954","month":"2026-06","title":"libceph: handle rbtree insertion error in decode_choose_args()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52954"},{"cve":"CVE-2026-52955","month":"2026-06","title":"libceph: Fix potential out-of-bounds access in crush_decode()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52955"},{"cve":"CVE-2026-52956","month":"2026-06","title":"libceph: Fix potential out-of-bounds access in __ceph_x_decrypt()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52956"},{"cve":"CVE-2026-52957","month":"2026-06","title":"libceph: Fix potential null-ptr-deref in decode_choose_args()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52957"},{"cve":"CVE-2026-52958","month":"2026-06","title":"libceph: Fix potential out-of-bounds access in osdmap_decode()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52958"},{"cve":"CVE-2026-52960","month":"2026-06","title":"ceph: put folios not suitable for writeback","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52960"},{"cve":"CVE-2026-52961","month":"2026-06","title":"ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52961"},{"cve":"CVE-2026-52962","month":"2026-06","title":"ceph: fix a buffer leak in __ceph_setxattr()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52962"},{"cve":"CVE-2026-52963","month":"2026-06","title":"ALSA: usb-audio: Bound MIDI endpoint descriptor scans","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52963"},{"cve":"CVE-2026-52967","month":"2026-06","title":"smb/client: fix possible infinite loop and oob read in symlink_data()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52967"},{"cve":"CVE-2026-52968","month":"2026-06","title":"KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52968"},{"cve":"CVE-2026-52969","month":"2026-06","title":"KVM: Reject wrapped offset in kvm_reset_dirty_gfn()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52969"},{"cve":"CVE-2026-52970","month":"2026-06","title":"netfilter: nft_ct: fix missing expect put in obj eval","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52970"},{"cve":"CVE-2026-52972","month":"2026-06","title":"crypto: af_alg - Cap AEAD AD length to 0x80000000","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52972"},{"cve":"CVE-2026-52974","month":"2026-06","title":"net: tls: fix strparser anchor skb leak on offload RX setup failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52974"},{"cve":"CVE-2026-52975","month":"2026-06","title":"bonding: 3ad: implement proper RCU rules for port->aggregator","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52975"},{"cve":"CVE-2026-52977","month":"2026-06","title":"futex: Prevent lockup in requeue-PI during signal/ timeout wakeup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52977"},{"cve":"CVE-2026-52981","month":"2026-06","title":"neigh: let neigh_xmit take skb ownership","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52981"},{"cve":"CVE-2026-52982","month":"2026-06","title":"net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52982"},{"cve":"CVE-2026-52984","month":"2026-06","title":"net/sched: netem: fix queue limit check to include reordered packets","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52984"},{"cve":"CVE-2026-52985","month":"2026-06","title":"netdevsim: zero initialize struct iphdr in dummy sk_buff","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52985"},{"cve":"CVE-2026-52986","month":"2026-06","title":"netfilter: nf_conntrack_sip: don't use simple_strtoul","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52986"},{"cve":"CVE-2026-52988","month":"2026-06","title":"netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52988"},{"cve":"CVE-2026-52989","month":"2026-06","title":"nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52989"},{"cve":"CVE-2026-52991","month":"2026-06","title":"sched/psi: fix race between file release and pressure write","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52991"},{"cve":"CVE-2026-52993","month":"2026-06","title":"tipc: fix double-free in tipc_buf_append()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52993"},{"cve":"CVE-2026-52998","month":"2026-06","title":"netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52998"},{"cve":"CVE-2026-52999","month":"2026-06","title":"netfilter: nfnetlink_osf: fix out-of-bounds read on option matching","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52999"},{"cve":"CVE-2026-53000","month":"2026-06","title":"netfilter: nat: use kfree_rcu to release ops","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53000"},{"cve":"CVE-2026-53002","month":"2026-06","title":"netfilter: conntrack: remove sprintf usage","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53002"},{"cve":"CVE-2026-53003","month":"2026-06","title":"pppoe: drop PFC frames","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53003"},{"cve":"CVE-2026-53005","month":"2026-06","title":"af_unix: Drop all SCM attributes for SOCKMAP.","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53005"},{"cve":"CVE-2026-53006","month":"2026-06","title":"ipv6: fix possible UAF in icmpv6_rcv()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53006"},{"cve":"CVE-2026-53009","month":"2026-06","title":"ice: fix double-free of tx_buf skb","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53009"},{"cve":"CVE-2026-53010","month":"2026-06","title":"ksmbd: fix use-after-free in smb2_open during durable reconnect","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53010"},{"cve":"CVE-2026-53011","month":"2026-06","title":"net/sched: taprio: fix use-after-free in advance_sched() on schedule switch","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53011"},{"cve":"CVE-2026-53012","month":"2026-06","title":"nexthop: fix IPv6 route referencing IPv4 nexthop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53012"},{"cve":"CVE-2026-53013","month":"2026-06","title":"macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53013"},{"cve":"CVE-2026-53015","month":"2026-06","title":"erofs: unify lcn as u64 for 32-bit platforms","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53015"},{"cve":"CVE-2026-53017","month":"2026-06","title":"f2fs: fix data loss caused by incorrect use of nat_entry flag","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53017"},{"cve":"CVE-2026-53018","month":"2026-06","title":"f2fs: avoid reading already updated pages during GC","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53018"},{"cve":"CVE-2026-53021","month":"2026-06","title":"scsi: target: core: Fix integer overflow in UNMAP bounds check","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53021"},{"cve":"CVE-2026-53022","month":"2026-06","title":"platform/x86: dell-wmi-sysman: bound enumeration string aggregation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53022"},{"cve":"CVE-2026-53023","month":"2026-06","title":"fs/ntfs3: terminate the cached volume label after UTF-8 conversion","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53023"},{"cve":"CVE-2026-53024","month":"2026-06","title":"greybus: raw: fix use-after-free if write is called after disconnect","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53024"},{"cve":"CVE-2026-53025","month":"2026-06","title":"greybus: raw: fix use-after-free on cdev close","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53025"},{"cve":"CVE-2026-53027","month":"2026-06","title":"fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53027"},{"cve":"CVE-2026-53032","month":"2026-06","title":"bpf: Fix NULL deref in map_kptr_match_type for scalar regs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53032"},{"cve":"CVE-2026-53034","month":"2026-06","title":"bpf, sockmap: Fix af_unix null-ptr-deref in proto update","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53034"},{"cve":"CVE-2026-53035","month":"2026-06","title":"bpf, sockmap: Fix af_unix iter deadlock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53035"},{"cve":"CVE-2026-53036","month":"2026-06","title":"bpf, arm64: Fix off-by-one in check_imm signed range check","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53036"},{"cve":"CVE-2026-53037","month":"2026-06","title":"HID: usbhid: fix deadlock in hid_post_reset()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53037"},{"cve":"CVE-2026-53047","month":"2026-06","title":"efi/capsule-loader: fix incorrect sizeof in phys array reallocation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53047"},{"cve":"CVE-2026-53050","month":"2026-06","title":"quota: Fix race of dquot_scan_active() with quota deactivation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53050"},{"cve":"CVE-2026-53053","month":"2026-06","title":"iommu/amd: Fix clone_alias() to use the original device's devid","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53053"},{"cve":"CVE-2026-53056","month":"2026-06","title":"drm/msm/dpu: fix mismatch between power and frequency","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53056"},{"cve":"CVE-2026-53058","month":"2026-06","title":"drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53058"},{"cve":"CVE-2026-53059","month":"2026-06","title":"dm log: fix out-of-bounds write due to region_count overflow","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53059"},{"cve":"CVE-2026-53060","month":"2026-06","title":"dm cache metadata: fix memory leak on metadata abort retry","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53060"},{"cve":"CVE-2026-53061","month":"2026-06","title":"dm cache: fix dirty mapping checking in passthrough mode switching","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53061"},{"cve":"CVE-2026-53062","month":"2026-06","title":"dm cache policy smq: fix missing locks in invalidating cache blocks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53062"},{"cve":"CVE-2026-53063","month":"2026-06","title":"dm cache: fix write hang in passthrough mode","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53063"},{"cve":"CVE-2026-53064","month":"2026-06","title":"dm cache: fix null-deref with concurrent writes in passthrough mode","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53064"},{"cve":"CVE-2026-53066","month":"2026-06","title":"drm/sun4i: backend: fix error pointer dereference","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53066"},{"cve":"CVE-2026-53068","month":"2026-06","title":"drm/komeda: fix integer overflow in AFBC framebuffer size check","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53068"},{"cve":"CVE-2026-53070","month":"2026-06","title":"sctp: disable BH before calling udp_tunnel_xmit_skb()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53070"},{"cve":"CVE-2026-53071","month":"2026-06","title":"Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53071"},{"cve":"CVE-2026-53072","month":"2026-06","title":"Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53072"},{"cve":"CVE-2026-53073","month":"2026-06","title":"Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53073"},{"cve":"CVE-2026-53074","month":"2026-06","title":"bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53074"},{"cve":"CVE-2026-53075","month":"2026-06","title":"ppp: require CAP_NET_ADMIN in target netns for unattached ioctls","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53075"},{"cve":"CVE-2026-53076","month":"2026-06","title":"bpf: Fix OOB in pcpu_init_value","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53076"},{"cve":"CVE-2026-53077","month":"2026-06","title":"net/rds: Restrict use of RDS/IB to the initial network namespace","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53077"},{"cve":"CVE-2026-53078","month":"2026-06","title":"bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53078"},{"cve":"CVE-2026-53080","month":"2026-06","title":"net/sched: cls_fw: fix NULL dereference of \"old\" filters before change()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53080"},{"cve":"CVE-2026-53082","month":"2026-06","title":"net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53082"},{"cve":"CVE-2026-53086","month":"2026-06","title":"net: bcmgenet: fix racing timeout handler","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53086"},{"cve":"CVE-2026-53088","month":"2026-06","title":"net: bcmgenet: fix off-by-one in bcmgenet_put_txcb","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53088"},{"cve":"CVE-2026-53089","month":"2026-06","title":"bpf: Fix use-after-free in offloaded map/prog info fill","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53089"},{"cve":"CVE-2026-53091","month":"2026-06","title":"net: pull headers in qdisc_pkt_len_segs_init()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53091"},{"cve":"CVE-2026-53093","month":"2026-06","title":"wifi: brcmfmac: Fix error pointer dereference","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53093"},{"cve":"CVE-2026-53094","month":"2026-06","title":"bpf: Fix stale offload->prog pointer after constant blinding","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53094"},{"cve":"CVE-2026-53096","month":"2026-06","title":"bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53096"},{"cve":"CVE-2026-53097","month":"2026-06","title":"wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53097"},{"cve":"CVE-2026-53102","month":"2026-06","title":"wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53102"},{"cve":"CVE-2026-53106","month":"2026-06","title":"bpf: Do not allow deleting local storage in NMI","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53106"},{"cve":"CVE-2026-53107","month":"2026-06","title":"wifi: libertas: don't kill URBs in interrupt context","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53107"},{"cve":"CVE-2026-53108","month":"2026-06","title":"powerpc/64s: Fix unmap race with PMD migration entries","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53108"},{"cve":"CVE-2026-53109","month":"2026-06","title":"powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53109"},{"cve":"CVE-2026-53110","month":"2026-06","title":"s390/bpf: Zero-extend bpf prog return values and kfunc arguments","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53110"},{"cve":"CVE-2026-53111","month":"2026-06","title":"bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53111"},{"cve":"CVE-2026-53112","month":"2026-06","title":"wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53112"},{"cve":"CVE-2026-53113","month":"2026-06","title":"wifi: ath11k: fix memory leaks in beacon template setup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53113"},{"cve":"CVE-2026-53115","month":"2026-06","title":"bus: fsl-mc: use generic driver_override infrastructure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53115"},{"cve":"CVE-2026-53118","month":"2026-06","title":"vdpa: use generic driver_override infrastructure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53118"},{"cve":"CVE-2026-53120","month":"2026-06","title":"PCI: use generic driver_override infrastructure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53120"},{"cve":"CVE-2026-53122","month":"2026-06","title":"btrfs: fix deadlock between reflink and transaction commit when using flushoncommit","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53122"},{"cve":"CVE-2026-53126","month":"2026-06","title":"blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53126"},{"cve":"CVE-2026-53128","month":"2026-06","title":"drbd: Balance RCU calls in drbd_adm_dump_devices()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53128"},{"cve":"CVE-2026-53129","month":"2026-06","title":"fs/mbcache: cancel shrink work before destroying the cache","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53129"},{"cve":"CVE-2026-53131","month":"2026-06","title":"netfilter: require Ethernet MAC header before using eth_hdr()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53131"},{"cve":"CVE-2026-53132","month":"2026-06","title":"vsock/virtio: fix potential unbounded skb queue","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53132"},{"cve":"CVE-2026-53133","month":"2026-06","title":"RDMA/umem: Fix truncation for block sizes >= 4G","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53133"},{"cve":"CVE-2026-53135","month":"2026-06","title":"drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53135"},{"cve":"CVE-2026-53136","month":"2026-06","title":"drm/amd/display: Clamp VBIOS HDMI retimer register count to array size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53136"},{"cve":"CVE-2026-53137","month":"2026-06","title":"drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53137"},{"cve":"CVE-2026-53138","month":"2026-06","title":"drm/amd/display: Bound VBIOS record-chain walk loops","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53138"},{"cve":"CVE-2026-53139","month":"2026-06","title":"drm/v3d: Skip CSD when it has zeroed workgroups","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53139"},{"cve":"CVE-2026-53143","month":"2026-06","title":"drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53143"},{"cve":"CVE-2026-53146","month":"2026-06","title":"thunderbolt: Limit XDomain response copy to actual frame size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53146"},{"cve":"CVE-2026-53147","month":"2026-06","title":"thunderbolt: Validate XDomain request packet size before type cast","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53147"},{"cve":"CVE-2026-53148","month":"2026-06","title":"thunderbolt: Clamp XDomain response data copy to allocation size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53148"},{"cve":"CVE-2026-53149","month":"2026-06","title":"thunderbolt: Bound root directory content to block size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53149"},{"cve":"CVE-2026-53150","month":"2026-06","title":"thunderbolt: Reject zero-length property entries in validator","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53150"},{"cve":"CVE-2026-53151","month":"2026-06","title":"rxrpc: Fix the ACK parser to extract the SACK table for parsing","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53151"},{"cve":"CVE-2026-53154","month":"2026-06","title":"mm/hugetlb: restore reservation on error in hugetlb folio copy paths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53154"},{"cve":"CVE-2026-53156","month":"2026-06","title":"nvmem: core: fix use-after-free bugs in error paths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53156"},{"cve":"CVE-2026-53157","month":"2026-06","title":"net: phonet: free phonet_device after RCU grace period","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53157"},{"cve":"CVE-2026-53163","month":"2026-06","title":"locking/rtmutex: Skip remove_waiter() when waiter is not enqueued","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53163"},{"cve":"CVE-2026-53166","month":"2026-06","title":"futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53166"},{"cve":"CVE-2026-53167","month":"2026-06","title":"fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53167"},{"cve":"CVE-2026-53168","month":"2026-06","title":"fuse: reject fuse_notify() pagecache ops on directories","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53168"},{"cve":"CVE-2026-53176","month":"2026-06","title":"IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53176"},{"cve":"CVE-2026-53177","month":"2026-06","title":"bnxt_en: Fix NULL pointer dereference","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53177"},{"cve":"CVE-2026-53178","month":"2026-06","title":"staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53178"},{"cve":"CVE-2026-53179","month":"2026-06","title":"staging: rtl8723bs: fix buffer over-read in rtw_update_protection","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53179"},{"cve":"CVE-2026-53181","month":"2026-06","title":"vsock/vmci: fix sk_ack_backlog leak on failed handshake","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53181"},{"cve":"CVE-2026-53182","month":"2026-06","title":"wifi: nl80211: reject oversized EMA RNR lists","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53182"},{"cve":"CVE-2026-53183","month":"2026-06","title":"mptcp: allow subflow rcv wnd to shrink","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53183"},{"cve":"CVE-2026-53184","month":"2026-06","title":"udp: clear skb->dev before running a sockmap verdict","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53184"},{"cve":"CVE-2026-53186","month":"2026-06","title":"RDMA/srp: bound SRP_RSP sense copy by the received length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53186"},{"cve":"CVE-2026-53190","month":"2026-06","title":"drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53190"},{"cve":"CVE-2026-53192","month":"2026-06","title":"ALSA: timer: Fix UAF at snd_timer_user_params()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53192"},{"cve":"CVE-2026-53198","month":"2026-06","title":"ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53198"},{"cve":"CVE-2026-53199","month":"2026-06","title":"hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53199"},{"cve":"CVE-2026-53207","month":"2026-06","title":"mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53207"},{"cve":"CVE-2026-53208","month":"2026-06","title":"Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53208"},{"cve":"CVE-2026-53209","month":"2026-06","title":"Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53209"},{"cve":"CVE-2026-53212","month":"2026-06","title":"netfilter: nft_tunnel: fix use-after-free on object destroy","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53212"},{"cve":"CVE-2026-53213","month":"2026-06","title":"drm/vc4: fix krealloc() memory leak","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53213"},{"cve":"CVE-2026-53214","month":"2026-06","title":"ipv6: Fix a potential NPD in cleanup_prefix_route()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53214"},{"cve":"CVE-2026-53218","month":"2026-06","title":"netfilter: nft_exthdr: fix register tracking for F_PRESENT flag","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53218"},{"cve":"CVE-2026-53219","month":"2026-06","title":"netfilter: x_tables: avoid leaking percpu counter pointers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53219"},{"cve":"CVE-2026-53220","month":"2026-06","title":"netfilter: revalidate bridge ports","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53220"},{"cve":"CVE-2026-53221","month":"2026-06","title":"ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53221"},{"cve":"CVE-2026-53223","month":"2026-06","title":"net: guard timestamp cmsgs to real error queue skbs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53223"},{"cve":"CVE-2026-53225","month":"2026-06","title":"sctp: fix uninit-value in __sctp_rcv_asconf_lookup()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53225"},{"cve":"CVE-2026-53226","month":"2026-06","title":"gpio: rockchip: fix generic IRQ chip leak on remove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53226"},{"cve":"CVE-2026-53227","month":"2026-06","title":"net: openvswitch: fix possible kfree_skb of ERR_PTR","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53227"},{"cve":"CVE-2026-53228","month":"2026-06","title":"ipv6: sit: reload inner IPv6 header after GSO offloads","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53228"},{"cve":"CVE-2026-53229","month":"2026-06","title":"net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53229"},{"cve":"CVE-2026-53230","month":"2026-06","title":"net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53230"},{"cve":"CVE-2026-53232","month":"2026-06","title":"net: phy: clean the sfp upstream if phy probing fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53232"},{"cve":"CVE-2026-53236","month":"2026-06","title":"tcp: restrict SO_ATTACH_FILTER to priv users","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53236"},{"cve":"CVE-2026-53237","month":"2026-06","title":"gpio: mvebu: fix NULL pointer dereference in suspend/resume","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53237"},{"cve":"CVE-2026-53238","month":"2026-06","title":"netlabel: validate unlabeled address and mask attribute lengths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53238"},{"cve":"CVE-2026-53239","month":"2026-06","title":"xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53239"},{"cve":"CVE-2026-53242","month":"2026-06","title":"ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53242"},{"cve":"CVE-2026-53245","month":"2026-06","title":"net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53245"},{"cve":"CVE-2026-53246","month":"2026-06","title":"sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53246"},{"cve":"CVE-2026-53249","month":"2026-06","title":"ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53249"},{"cve":"CVE-2026-53252","month":"2026-06","title":"Bluetooth: fix memory leak in error path of hci_alloc_dev()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53252"},{"cve":"CVE-2026-53253","month":"2026-06","title":"Bluetooth: bnep: reject short frames before parsing","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53253"},{"cve":"CVE-2026-53254","month":"2026-06","title":"Bluetooth: RFCOMM: validate skb length in MCC handlers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53254"},{"cve":"CVE-2026-53255","month":"2026-06","title":"Bluetooth: MGMT: validate advertising TLV before type checks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53255"},{"cve":"CVE-2026-53258","month":"2026-06","title":"wifi: fix leak if split 6 GHz scanning fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53258"},{"cve":"CVE-2026-53262","month":"2026-06","title":"l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53262"},{"cve":"CVE-2026-53263","month":"2026-06","title":"6lowpan: fix off-by-one in multicast context address compression","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53263"},{"cve":"CVE-2026-53264","month":"2026-06","title":"net/sched: act_api: use RCU with deferred freeing for action lifecycle","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53264"},{"cve":"CVE-2026-53265","month":"2026-06","title":"dm cache policy smq: check allocation under invalidate lock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53265"},{"cve":"CVE-2026-53266","month":"2026-06","title":"netfilter: bridge: make ebt_snat ARP rewrite writable","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.8,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":true,"kev_added":"2026-09-18","class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53266"},{"cve":"CVE-2026-53267","month":"2026-06","title":"netfilter: nft_ct: bail out on template ct in get eval","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53267"},{"cve":"CVE-2026-53268","month":"2026-06","title":"netfilter: conntrack_irc: fix possible out-of-bounds read","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53268"},{"cve":"CVE-2026-53269","month":"2026-06","title":"netfilter: synproxy: add mutex to guard hook reference counting","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53269"},{"cve":"CVE-2026-53270","month":"2026-06","title":"ipvs: clear the svc scheduler ptr early on edit","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53270"},{"cve":"CVE-2026-53274","month":"2026-06","title":"net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53274"},{"cve":"CVE-2026-53275","month":"2026-06","title":"ipv6: mcast: Fix use-after-free when processing MLD queries","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53275"},{"cve":"CVE-2026-53284","month":"2026-06","title":"btrfs: only release the dirty pages io tree after successful writes","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53284"},{"cve":"CVE-2026-53287","month":"2026-06","title":"audit: fix incorrect inheritable capability in CAPSET records","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53287"},{"cve":"CVE-2026-53289","month":"2026-06","title":"ice: fix NULL pointer dereference in ice_reset_all_vfs()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53289"},{"cve":"CVE-2026-53291","month":"2026-06","title":"ALSA: hda/conexant: Fix missing error check for jack detection","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53291"},{"cve":"CVE-2026-53292","month":"2026-06","title":"net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53292"},{"cve":"CVE-2026-53293","month":"2026-06","title":"drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53293"},{"cve":"CVE-2026-53295","month":"2026-06","title":"mailbox: add sanity check for channel array","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53295"},{"cve":"CVE-2026-53297","month":"2026-06","title":"net: mana: Guard mana_remove against double invocation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53297"},{"cve":"CVE-2026-53304","month":"2026-06","title":"scsi: sg: Resolve soft lockup issue when opening /dev/sgX","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53304"},{"cve":"CVE-2026-53313","month":"2026-06","title":"drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53313"},{"cve":"CVE-2026-53314","month":"2026-06","title":"padata: Put CPU offline callback in ONLINE section to allow failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53314"},{"cve":"CVE-2026-53317","month":"2026-06","title":"wifi: mt76: mt7921: Place upper limit on station AID","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53317"},{"cve":"CVE-2026-53325","month":"2026-06","title":"agp/amd64: Fix broken error propagation in agp_amd64_probe()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53325"},{"cve":"CVE-2026-53689","month":"2026-06","title":"","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U","cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53689"},{"cve":"CVE-2026-5419","month":"2026-06","title":"Guntls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-208"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-5419"},{"cve":"CVE-2026-54369","month":"2026-06","title":"acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54369"},{"cve":"CVE-2026-54371","month":"2026-06","title":"attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54371"},{"cve":"CVE-2026-54679","month":"2026-06","title":"jq: potential integer overflow in jvp_string_append","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54679"},{"cve":"CVE-2026-54905","month":"2026-06","title":"concurrent-ruby:  `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-128"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54905"},{"cve":"CVE-2026-54906","month":"2026-06","title":"concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-414"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54906"},{"cve":"CVE-2026-55199","month":"2026-06","title":"libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55199"},{"cve":"CVE-2026-55200","month":"2026-06","title":"libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-680"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55200"},{"cve":"CVE-2026-55203","month":"2026-06","title":"HAProxy - Integer Overflow in FCGI Demux Record Length Field","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55203"},{"cve":"CVE-2026-55204","month":"2026-06","title":"HAProxy - NULL Pointer Dereference in hpack_dht_insert Function","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55204"},{"cve":"CVE-2026-55653","month":"2026-06","title":"Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55653"},{"cve":"CVE-2026-55655","month":"2026-06","title":"Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N","cwe":["CWE-923"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55655"},{"cve":"CVE-2026-55693","month":"2026-06","title":"Vim: Out-of-bounds Write in Spell File Word Count","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55693"},{"cve":"CVE-2026-55892","month":"2026-06","title":"Vim: Out-of-bounds Write in Spell File Prefix Dump","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55892"},{"cve":"CVE-2026-55895","month":"2026-06","title":"Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55895"},{"cve":"CVE-2026-56115","month":"2026-06","title":"Bootimus 0.1.70 Broken Access Control via JWTMiddleware Authorization Bypass","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56115"},{"cve":"CVE-2026-56116","month":"2026-06","title":"dhcpcd Memory Leak DoS via IPv6 Router Advertisement Handling","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56116"},{"cve":"CVE-2026-56131","month":"2026-06","title":"libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation).","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56131"},{"cve":"CVE-2026-56132","month":"2026-06","title":"In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-821"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56132"},{"cve":"CVE-2026-56403","month":"2026-06","title":"libexpat before 2.8.2 has an integer overflow in storeAtts.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56403"},{"cve":"CVE-2026-56404","month":"2026-06","title":"libexpat before 2.8.2 has an integer overflow in addBinding.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56404"},{"cve":"CVE-2026-56405","month":"2026-06","title":"libexpat before 2.8.2 has an integer overflow in getAttributeId.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56405"},{"cve":"CVE-2026-56406","month":"2026-06","title":"libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56406"},{"cve":"CVE-2026-56407","month":"2026-06","title":"libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56407"},{"cve":"CVE-2026-56409","month":"2026-06","title":"xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56409"},{"cve":"CVE-2026-56410","month":"2026-06","title":"xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56410"},{"cve":"CVE-2026-56411","month":"2026-06","title":"xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56411"},{"cve":"CVE-2026-56412","month":"2026-06","title":"libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56412"},{"cve":"CVE-2026-57062","month":"2026-06","title":"CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57062"},{"cve":"CVE-2026-57234","month":"2026-06","title":"Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-178"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57234"},{"cve":"CVE-2026-57235","month":"2026-06","title":"Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57235"},{"cve":"CVE-2026-57236","month":"2026-06","title":"Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57236"},{"cve":"CVE-2026-57434","month":"2026-06","title":"Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57434"},{"cve":"CVE-2026-57435","month":"2026-06","title":"Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57435"},{"cve":"CVE-2026-57436","month":"2026-06","title":"Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57436"},{"cve":"CVE-2026-57437","month":"2026-06","title":"Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57437"},{"cve":"CVE-2026-57438","month":"2026-06","title":"Nokogiri: Possible Use-After-Free in XInclude Processing","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57438"},{"cve":"CVE-2026-57451","month":"2026-06","title":"Vim: Out-of-bounds Read in Text Property Count","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57451"},{"cve":"CVE-2026-57452","month":"2026-06","title":"Vim: Out-of-bounds Read with libsodium-encrypted Files","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57452"},{"cve":"CVE-2026-57453","month":"2026-06","title":"Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57453"},{"cve":"CVE-2026-57454","month":"2026-06","title":"Vim: Out-of-bounds Read with Text Properties","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57454"},{"cve":"CVE-2026-57455","month":"2026-06","title":"Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57455"},{"cve":"CVE-2026-57456","month":"2026-06","title":"Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57456"},{"cve":"CVE-2026-57585","month":"2026-06","title":"MessagePack: Out-of-bounds read/crash on Unpacker reuse after caught error","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57585"},{"cve":"CVE-2026-58010","month":"2026-06","title":"Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58010"},{"cve":"CVE-2026-58011","month":"2026-06","title":"Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58011"},{"cve":"CVE-2026-58012","month":"2026-06","title":"Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58012"},{"cve":"CVE-2026-58013","month":"2026-06","title":"Glib: buffer over-read in glib/giochannel.c via \"g_io_channel_read_line_backend\"","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58013"},{"cve":"CVE-2026-58014","month":"2026-06","title":"Glib: off-by-one error in glib/gkeyfile.c via \"g_key_file_get_locale_string_list\"","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-193"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58014"},{"cve":"CVE-2026-58015","month":"2026-06","title":"Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58015"},{"cve":"CVE-2026-58016","month":"2026-06","title":"Glib: integer underflow in gio/gdbusintrospection.c via \"g_dbus_node_info_new_for_xml\"","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58016"},{"cve":"CVE-2026-58051","month":"2026-06","title":"libssh2 - Free of Uninitialized Pointer in publickey List Cleanup","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58051"},{"cve":"CVE-2026-58058","month":"2026-06","title":"Nmap - Integer Underflow in IPv6 Extension Header Parsing","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58058"},{"cve":"CVE-2026-6893","month":"2026-06","title":"Dracut: dracut: root code execution via dhcp options command injection","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6893"},{"cve":"CVE-2026-7383","month":"2026-06","title":"Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7383"},{"cve":"CVE-2026-7774","month":"2026-06","title":"tarfile.data_filter path traversal bypass allows writing outside the extraction directory","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7774"},{"cve":"CVE-2026-8643","month":"2026-06","title":"pip can extract console_scripts and gui_scripts outside installation directory","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8643"},{"cve":"CVE-2026-8829","month":"2026-06","title":"HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8829"},{"cve":"CVE-2026-9076","month":"2026-06","title":"Out-of-Bounds Read in CMS Password-Based Decryption","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9076"},{"cve":"CVE-2026-9539","month":"2026-06","title":"libslirp TCP URG OOB Read Information Leak","family":"Other","component":"Mariner","cna":"STAR_Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9539"},{"cve":"CVE-2026-9669","month":"2026-06","title":"bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9669"},{"cve":"CVE-2026-9675","month":"2026-06","title":"undici WebSocket client vulnerable to denial of service via cumulative fragment bypass","family":"Other","component":"Mariner","cna":"openjs","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9675"},{"cve":"CVE-2026-9697","month":"2026-06","title":"undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent","family":"Other","component":"Mariner","cna":"openjs","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9697"},{"cve":"CVE-2026-9698","month":"2026-06","title":"DBI versions before 1.648 for Perl saved errors in a limited-sized buffer","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9698"},{"cve":"CVE-2025-10263","month":"2026-06","title":"ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]","family":"Windows","component":"Windows Kernel","cna":"Arm Limited","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-10263"},{"cve":"CVE-2026-10881","month":"2026-06","title":"Chromium: CVE-2026-10881 Out of bounds read and write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10881"},{"cve":"CVE-2026-10882","month":"2026-06","title":"Chromium: CVE-2026-10882 Use after free in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10882"},{"cve":"CVE-2026-10883","month":"2026-06","title":"Chromium: CVE-2026-10883 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10883"},{"cve":"CVE-2026-10884","month":"2026-06","title":"Chromium: CVE-2026-10884 Use after free in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10884"},{"cve":"CVE-2026-10886","month":"2026-06","title":"Chromium: CVE-2026-10886 Use after free in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10886"},{"cve":"CVE-2026-10887","month":"2026-06","title":"Chromium: CVE-2026-10887 Use after free in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10887"},{"cve":"CVE-2026-10888","month":"2026-06","title":"Chromium: CVE-2026-10888 Use after free in Cast Streaming","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10888"},{"cve":"CVE-2026-10889","month":"2026-06","title":"Chromium: CVE-2026-10889 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10889"},{"cve":"CVE-2026-10890","month":"2026-06","title":"Chromium: CVE-2026-10890 Use after free in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10890"},{"cve":"CVE-2026-10891","month":"2026-06","title":"Chromium: CVE-2026-10891 Use after free in GFX","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10891"},{"cve":"CVE-2026-10892","month":"2026-06","title":"Chromium: CVE-2026-10892 Out of bounds write in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10892"},{"cve":"CVE-2026-10893","month":"2026-06","title":"Chromium: CVE-2026-10893 Use after free in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10893"},{"cve":"CVE-2026-10894","month":"2026-06","title":"Chromium: CVE-2026-10894 Use after free in Printing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10894"},{"cve":"CVE-2026-10895","month":"2026-06","title":"Chromium: CVE-2026-10895 Use after free in Ozone","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10895"},{"cve":"CVE-2026-10897","month":"2026-06","title":"Chromium: CVE-2026-10897 Out of bounds write in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10897"},{"cve":"CVE-2026-10898","month":"2026-06","title":"Chromium: CVE-2026-10898 Stack buffer overflow in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10898"},{"cve":"CVE-2026-10899","month":"2026-06","title":"Chromium: CVE-2026-10899 Use after free in Ozone","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10899"},{"cve":"CVE-2026-10900","month":"2026-06","title":"Chromium: CVE-2026-10900 Use after free in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10900"},{"cve":"CVE-2026-10901","month":"2026-06","title":"Chromium: CVE-2026-10901 Use after free in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10901"},{"cve":"CVE-2026-10902","month":"2026-06","title":"Chromium: CVE-2026-10902 Use after free in Ozone","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10902"},{"cve":"CVE-2026-10903","month":"2026-06","title":"Chromium: CVE-2026-10903 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10903"},{"cve":"CVE-2026-10904","month":"2026-06","title":"Chromium: CVE-2026-10904 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10904"},{"cve":"CVE-2026-10905","month":"2026-06","title":"Chromium: CVE-2026-10905 Use after free in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10905"},{"cve":"CVE-2026-10906","month":"2026-06","title":"Chromium: CVE-2026-10906 Use after free in WebAuthentication","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10906"},{"cve":"CVE-2026-10907","month":"2026-06","title":"Chromium: CVE-2026-10907 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10907"},{"cve":"CVE-2026-10908","month":"2026-06","title":"Chromium: CVE-2026-10908 Use after free in FullScreen","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10908"},{"cve":"CVE-2026-10909","month":"2026-06","title":"Chromium: CVE-2026-10909 Use after free in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10909"},{"cve":"CVE-2026-10910","month":"2026-06","title":"Chromium: CVE-2026-10910 Type Confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10910"},{"cve":"CVE-2026-10911","month":"2026-06","title":"Chromium: CVE-2026-10911 Insufficient validation of untrusted input in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10911"},{"cve":"CVE-2026-10912","month":"2026-06","title":"Chromium: CVE-2026-10912 Insufficient validation of untrusted input in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10912"},{"cve":"CVE-2026-10913","month":"2026-06","title":"Chromium: CVE-2026-10913 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10913"},{"cve":"CVE-2026-10914","month":"2026-06","title":"Chromium: CVE-2026-10914 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10914"},{"cve":"CVE-2026-10916","month":"2026-06","title":"Chromium: CVE-2026-10916 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10916"},{"cve":"CVE-2026-10917","month":"2026-06","title":"Chromium: CVE-2026-10917 Insufficient validation of untrusted input in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10917"},{"cve":"CVE-2026-10918","month":"2026-06","title":"Chromium: CVE-2026-10918 Use after free in Viz","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10918"},{"cve":"CVE-2026-10919","month":"2026-06","title":"Chromium: CVE-2026-10919 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10919"},{"cve":"CVE-2026-10920","month":"2026-06","title":"Chromium: CVE-2026-10920 Insufficient validation of untrusted input in WebShare","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10920"},{"cve":"CVE-2026-10921","month":"2026-06","title":"Chromium: CVE-2026-10921 Integer overflow in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10921"},{"cve":"CVE-2026-10922","month":"2026-06","title":"Chromium: CVE-2026-10922 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10922"},{"cve":"CVE-2026-10923","month":"2026-06","title":"Chromium: CVE-2026-10923 Use after free in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10923"},{"cve":"CVE-2026-10924","month":"2026-06","title":"Chromium: CVE-2026-10924 Integer overflow in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10924"},{"cve":"CVE-2026-10925","month":"2026-06","title":"Chromium: CVE-2026-10925 Out of bounds write in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10925"},{"cve":"CVE-2026-10926","month":"2026-06","title":"Chromium: CVE-2026-10926 Use after free in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10926"},{"cve":"CVE-2026-10927","month":"2026-06","title":"Chromium: CVE-2026-10927 Out of bounds read in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10927"},{"cve":"CVE-2026-10928","month":"2026-06","title":"Chromium: CVE-2026-10928 Script injection in Headless","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10928"},{"cve":"CVE-2026-10929","month":"2026-06","title":"Chromium: CVE-2026-10929 Heap buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10929"},{"cve":"CVE-2026-10930","month":"2026-06","title":"Chromium: CVE-2026-10930 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10930"},{"cve":"CVE-2026-10931","month":"2026-06","title":"Chromium: CVE-2026-10931 Use after free in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10931"},{"cve":"CVE-2026-10932","month":"2026-06","title":"Chromium: CVE-2026-10932 Use after free in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10932"},{"cve":"CVE-2026-10933","month":"2026-06","title":"Chromium: CVE-2026-10933 Use after free in Audio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10933"},{"cve":"CVE-2026-10934","month":"2026-06","title":"Chromium: CVE-2026-10934 Use after free in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10934"},{"cve":"CVE-2026-10935","month":"2026-06","title":"Chromium: CVE-2026-10935 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10935"},{"cve":"CVE-2026-10936","month":"2026-06","title":"Chromium: CVE-2026-10936 Type Confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10936"},{"cve":"CVE-2026-10937","month":"2026-06","title":"Chromium: CVE-2026-10937 Inappropriate implementation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10937"},{"cve":"CVE-2026-10938","month":"2026-06","title":"Chromium: CVE-2026-10938 Insufficient validation of untrusted input in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10938"},{"cve":"CVE-2026-10939","month":"2026-06","title":"Chromium: CVE-2026-10939 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10939"},{"cve":"CVE-2026-10940","month":"2026-06","title":"Chromium: CVE-2026-10940 Race in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10940"},{"cve":"CVE-2026-10941","month":"2026-06","title":"Chromium: CVE-2026-10941 Out of bounds memory access in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10941"},{"cve":"CVE-2026-10942","month":"2026-06","title":"Chromium: CVE-2026-10942 Insufficient validation of untrusted input in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10942"},{"cve":"CVE-2026-10943","month":"2026-06","title":"Chromium: CVE-2026-10943 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10943"},{"cve":"CVE-2026-10945","month":"2026-06","title":"Chromium: CVE-2026-10945 Use after free in PDF","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10945"},{"cve":"CVE-2026-10946","month":"2026-06","title":"Chromium: CVE-2026-10946 Heap buffer overflow in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10946"},{"cve":"CVE-2026-10947","month":"2026-06","title":"Chromium: CVE-2026-10947 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10947"},{"cve":"CVE-2026-10948","month":"2026-06","title":"Chromium: CVE-2026-10948 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10948"},{"cve":"CVE-2026-10949","month":"2026-06","title":"Chromium: CVE-2026-10949 Heap buffer overflow in Video","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10949"},{"cve":"CVE-2026-10953","month":"2026-06","title":"Chromium: CVE-2026-10953 Use after free in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10953"},{"cve":"CVE-2026-10954","month":"2026-06","title":"Chromium: CVE-2026-10954 Use after free in Actor","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10954"},{"cve":"CVE-2026-10955","month":"2026-06","title":"Chromium: CVE-2026-10955 Type Confusion in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10955"},{"cve":"CVE-2026-10956","month":"2026-06","title":"Chromium: CVE-2026-10956 Use after free in MimeHandlerView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10956"},{"cve":"CVE-2026-10957","month":"2026-06","title":"Chromium: CVE-2026-10957 Use after free in Glic","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10957"},{"cve":"CVE-2026-10959","month":"2026-06","title":"Chromium: CVE-2026-10959 Use after free in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10959"},{"cve":"CVE-2026-10960","month":"2026-06","title":"Chromium: CVE-2026-10960 Uninitialized Use in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10960"},{"cve":"CVE-2026-10962","month":"2026-06","title":"Chromium: CVE-2026-10962 Type Confusion in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10962"},{"cve":"CVE-2026-10963","month":"2026-06","title":"Chromium: CVE-2026-10963 Integer overflow in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10963"},{"cve":"CVE-2026-10964","month":"2026-06","title":"Chromium: CVE-2026-10964 Integer overflow in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10964"},{"cve":"CVE-2026-10965","month":"2026-06","title":"Chromium: CVE-2026-10965 Integer overflow in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10965"},{"cve":"CVE-2026-10966","month":"2026-06","title":"Chromium: CVE-2026-10966 Insufficient validation of untrusted input in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10966"},{"cve":"CVE-2026-10967","month":"2026-06","title":"Chromium: CVE-2026-10967 Use after free in SurfaceCapture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10967"},{"cve":"CVE-2026-10968","month":"2026-06","title":"Chromium: CVE-2026-10968 Insufficient validation of untrusted input in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10968"},{"cve":"CVE-2026-10969","month":"2026-06","title":"Chromium: CVE-2026-10969 Insufficient validation of untrusted input in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10969"},{"cve":"CVE-2026-10970","month":"2026-06","title":"Chromium: CVE-2026-10970 Insufficient validation of untrusted input in InterestGroups","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10970"},{"cve":"CVE-2026-10971","month":"2026-06","title":"Chromium: CVE-2026-10971 Insufficient validation of untrusted input in Printing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10971"},{"cve":"CVE-2026-10972","month":"2026-06","title":"Chromium: CVE-2026-10972 Use after free in Ozone","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10972"},{"cve":"CVE-2026-10973","month":"2026-06","title":"Chromium: CVE-2026-10973 Uninitialized Use in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10973"},{"cve":"CVE-2026-10974","month":"2026-06","title":"Chromium: CVE-2026-10974 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10974"},{"cve":"CVE-2026-10975","month":"2026-06","title":"Chromium: CVE-2026-10975 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10975"},{"cve":"CVE-2026-10976","month":"2026-06","title":"Chromium: CVE-2026-10976 Uninitialized Use in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10976"},{"cve":"CVE-2026-10977","month":"2026-06","title":"Chromium: CVE-2026-10977 Uninitialized Use in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10977"},{"cve":"CVE-2026-10978","month":"2026-06","title":"Chromium: CVE-2026-10978 Use after free in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10978"},{"cve":"CVE-2026-10979","month":"2026-06","title":"Chromium: CVE-2026-10979 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10979"},{"cve":"CVE-2026-10980","month":"2026-06","title":"Chromium: CVE-2026-10980 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10980"},{"cve":"CVE-2026-10981","month":"2026-06","title":"Chromium: CVE-2026-10981 Insufficient validation of untrusted input in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10981"},{"cve":"CVE-2026-10982","month":"2026-06","title":"Chromium: CVE-2026-10982 Use after free in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10982"},{"cve":"CVE-2026-10983","month":"2026-06","title":"Chromium: CVE-2026-10983 Insufficient validation of untrusted input in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10983"},{"cve":"CVE-2026-10984","month":"2026-06","title":"Chromium: CVE-2026-10984 Inappropriate implementation in Accessibility","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10984"},{"cve":"CVE-2026-10985","month":"2026-06","title":"Chromium: CVE-2026-10985 Out of bounds read in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10985"},{"cve":"CVE-2026-10986","month":"2026-06","title":"Chromium: CVE-2026-10986 Integer overflow in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10986"},{"cve":"CVE-2026-10987","month":"2026-06","title":"Chromium: CVE-2026-10987 Integer overflow in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10987"},{"cve":"CVE-2026-10988","month":"2026-06","title":"Chromium: CVE-2026-10988 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10988"},{"cve":"CVE-2026-10989","month":"2026-06","title":"Chromium: CVE-2026-10989 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10989"},{"cve":"CVE-2026-10990","month":"2026-06","title":"Chromium: CVE-2026-10990 Use after free in Glic","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10990"},{"cve":"CVE-2026-10991","month":"2026-06","title":"Chromium: CVE-2026-10991 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10991"},{"cve":"CVE-2026-10992","month":"2026-06","title":"Chromium: CVE-2026-10992 Insufficient data validation in Animation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10992"},{"cve":"CVE-2026-10993","month":"2026-06","title":"Chromium: CVE-2026-10993 Heap buffer overflow in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10993"},{"cve":"CVE-2026-10994","month":"2026-06","title":"Chromium: CVE-2026-10994 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10994"},{"cve":"CVE-2026-10995","month":"2026-06","title":"Chromium: CVE-2026-10995 Heap buffer overflow in TabStrip","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10995"},{"cve":"CVE-2026-10996","month":"2026-06","title":"Chromium: CVE-2026-10996 Inappropriate implementation in Workers","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10996"},{"cve":"CVE-2026-10997","month":"2026-06","title":"Chromium: CVE-2026-10997 Insufficient policy enforcement in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10997"},{"cve":"CVE-2026-10998","month":"2026-06","title":"Chromium: CVE-2026-10998 Out of bounds read in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10998"},{"cve":"CVE-2026-10999","month":"2026-06","title":"Chromium: CVE-2026-10999 Out of bounds memory access in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10999"},{"cve":"CVE-2026-11000","month":"2026-06","title":"Chromium: CVE-2026-11000 Use after free in Fonts","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11000"},{"cve":"CVE-2026-11001","month":"2026-06","title":"Chromium: CVE-2026-11001 Incorrect security UI in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11001"},{"cve":"CVE-2026-11002","month":"2026-06","title":"Chromium: CVE-2026-11002 Use after free in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11002"},{"cve":"CVE-2026-11003","month":"2026-06","title":"Chromium: CVE-2026-11003 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11003"},{"cve":"CVE-2026-11004","month":"2026-06","title":"Chromium: CVE-2026-11004 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11004"},{"cve":"CVE-2026-11005","month":"2026-06","title":"Chromium: CVE-2026-11005 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11005"},{"cve":"CVE-2026-11006","month":"2026-06","title":"Chromium: CVE-2026-11006 Out of bounds read in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11006"},{"cve":"CVE-2026-11007","month":"2026-06","title":"Chromium: CVE-2026-11007 Insufficient validation of untrusted input in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11007"},{"cve":"CVE-2026-11008","month":"2026-06","title":"Chromium: CVE-2026-11008 Insufficient validation of untrusted input in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11008"},{"cve":"CVE-2026-11009","month":"2026-06","title":"Chromium: CVE-2026-11009 Use after free in USB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11009"},{"cve":"CVE-2026-11010","month":"2026-06","title":"Chromium: CVE-2026-11010 Use after free in WebShare","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11010"},{"cve":"CVE-2026-11011","month":"2026-06","title":"Chromium: CVE-2026-11011 Insufficient policy enforcement in Password Manager","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11011"},{"cve":"CVE-2026-11012","month":"2026-06","title":"Chromium: CVE-2026-11012 Use after free in Serial","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11012"},{"cve":"CVE-2026-11013","month":"2026-06","title":"Chromium: CVE-2026-11013 Insufficient validation of untrusted input in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11013"},{"cve":"CVE-2026-11014","month":"2026-06","title":"Chromium: CVE-2026-11014 Insufficient policy enforcement in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11014"},{"cve":"CVE-2026-11015","month":"2026-06","title":"Chromium: CVE-2026-11015 Out of bounds read in WebGPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11015"},{"cve":"CVE-2026-11016","month":"2026-06","title":"Chromium: CVE-2026-11016 Insufficient validation of untrusted input in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11016"},{"cve":"CVE-2026-11017","month":"2026-06","title":"Chromium: CVE-2026-11017 Inappropriate implementation in Link Preview","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11017"},{"cve":"CVE-2026-11018","month":"2026-06","title":"Chromium: CVE-2026-11018 Insufficient policy enforcement in Actor","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11018"},{"cve":"CVE-2026-11019","month":"2026-06","title":"Chromium: CVE-2026-11019 Inappropriate implementation in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11019"},{"cve":"CVE-2026-11020","month":"2026-06","title":"Chromium: CVE-2026-11020 Inappropriate implementation in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11020"},{"cve":"CVE-2026-11021","month":"2026-06","title":"Chromium: CVE-2026-11021 Insufficient validation of untrusted input in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11021"},{"cve":"CVE-2026-11022","month":"2026-06","title":"Chromium: CVE-2026-11022 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11022"},{"cve":"CVE-2026-11023","month":"2026-06","title":"Chromium: CVE-2026-11023 Insufficient validation of untrusted input in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11023"},{"cve":"CVE-2026-11024","month":"2026-06","title":"Chromium: CVE-2026-11024 Stack buffer overflow in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11024"},{"cve":"CVE-2026-11025","month":"2026-06","title":"Chromium: CVE-2026-11025 Insufficient policy enforcement in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11025"},{"cve":"CVE-2026-11026","month":"2026-06","title":"Chromium: CVE-2026-11026 Insufficient policy enforcement in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11026"},{"cve":"CVE-2026-11027","month":"2026-06","title":"Chromium: CVE-2026-11027 Insufficient validation of untrusted input in Glic","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11027"},{"cve":"CVE-2026-11028","month":"2026-06","title":"Chromium: CVE-2026-11028 Use after free in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11028"},{"cve":"CVE-2026-11029","month":"2026-06","title":"Chromium: CVE-2026-11029 Insufficient validation of untrusted input in Drag and Drop","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11029"},{"cve":"CVE-2026-11030","month":"2026-06","title":"Chromium: CVE-2026-11030 Use after free in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11030"},{"cve":"CVE-2026-11031","month":"2026-06","title":"Chromium: CVE-2026-11031 Insufficient validation of untrusted input in Password Manager","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11031"},{"cve":"CVE-2026-11032","month":"2026-06","title":"Chromium: CVE-2026-11032 Insufficient data validation in Password Manager","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11032"},{"cve":"CVE-2026-11033","month":"2026-06","title":"Chromium: CVE-2026-11033 Uninitialized Use in WebML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11033"},{"cve":"CVE-2026-11034","month":"2026-06","title":"Chromium: CVE-2026-11034 Insufficient validation of untrusted input in Tab Group Sync","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11034"},{"cve":"CVE-2026-11035","month":"2026-06","title":"Chromium: CVE-2026-11035 Insufficient validation of untrusted input in Custom Tabs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11035"},{"cve":"CVE-2026-11036","month":"2026-06","title":"Chromium: CVE-2026-11036 Inappropriate implementation in DOM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11036"},{"cve":"CVE-2026-11037","month":"2026-06","title":"Chromium: CVE-2026-11037 Out of bounds write in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11037"},{"cve":"CVE-2026-11038","month":"2026-06","title":"Chromium: CVE-2026-11038 Insufficient validation of untrusted input in Subresource Integrity","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11038"},{"cve":"CVE-2026-11039","month":"2026-06","title":"Chromium: CVE-2026-11039 Uninitialized Use in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11039"},{"cve":"CVE-2026-11040","month":"2026-06","title":"Chromium: CVE-2026-11040 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11040"},{"cve":"CVE-2026-11041","month":"2026-06","title":"Chromium: CVE-2026-11041 Insufficient validation of untrusted input in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11041"},{"cve":"CVE-2026-11042","month":"2026-06","title":"Chromium: CVE-2026-11042 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11042"},{"cve":"CVE-2026-11043","month":"2026-06","title":"Chromium: CVE-2026-11043 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11043"},{"cve":"CVE-2026-11044","month":"2026-06","title":"Chromium: CVE-2026-11044 Integer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11044"},{"cve":"CVE-2026-11045","month":"2026-06","title":"Chromium: CVE-2026-11045 Insufficient validation of untrusted input in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11045"},{"cve":"CVE-2026-11046","month":"2026-06","title":"Chromium: CVE-2026-11046 Insufficient validation of untrusted input in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11046"},{"cve":"CVE-2026-11047","month":"2026-06","title":"Chromium: CVE-2026-11047 Insufficient validation of untrusted input in Base","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11047"},{"cve":"CVE-2026-11048","month":"2026-06","title":"Chromium: CVE-2026-11048 Inappropriate implementation in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11048"},{"cve":"CVE-2026-11049","month":"2026-06","title":"Chromium: CVE-2026-11049 Use after free in Password Manager","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11049"},{"cve":"CVE-2026-11050","month":"2026-06","title":"Chromium: CVE-2026-11050 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11050"},{"cve":"CVE-2026-11051","month":"2026-06","title":"Chromium: CVE-2026-11051 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11051"},{"cve":"CVE-2026-11052","month":"2026-06","title":"Chromium: CVE-2026-11052 Type Confusion in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11052"},{"cve":"CVE-2026-11053","month":"2026-06","title":"Chromium: CVE-2026-11053 VULNERABILITY in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11053"},{"cve":"CVE-2026-11054","month":"2026-06","title":"Chromium: CVE-2026-11054 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11054"},{"cve":"CVE-2026-11055","month":"2026-06","title":"Chromium: CVE-2026-11055 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11055"},{"cve":"CVE-2026-11056","month":"2026-06","title":"Chromium: CVE-2026-11056 Insufficient validation of untrusted input in SiteIsolation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11056"},{"cve":"CVE-2026-11057","month":"2026-06","title":"Chromium: CVE-2026-11057 Uninitialized Use in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11057"},{"cve":"CVE-2026-11058","month":"2026-06","title":"Chromium: CVE-2026-11058 Integer overflow in CredentialProvider","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11058"},{"cve":"CVE-2026-11059","month":"2026-06","title":"Chromium: CVE-2026-11059 Use after free in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11059"},{"cve":"CVE-2026-11060","month":"2026-06","title":"Chromium: CVE-2026-11060 Use after free in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11060"},{"cve":"CVE-2026-11061","month":"2026-06","title":"Chromium: CVE-2026-11061 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11061"},{"cve":"CVE-2026-11062","month":"2026-06","title":"Chromium: CVE-2026-11062 Insufficient policy enforcement in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11062"},{"cve":"CVE-2026-11063","month":"2026-06","title":"Chromium: CVE-2026-11063 Insufficient validation of untrusted input in WebNN","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11063"},{"cve":"CVE-2026-11064","month":"2026-06","title":"Chromium: CVE-2026-11064 Uninitialized Use in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11064"},{"cve":"CVE-2026-11065","month":"2026-06","title":"Chromium: CVE-2026-11065 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11065"},{"cve":"CVE-2026-11066","month":"2026-06","title":"Chromium: CVE-2026-11066 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11066"},{"cve":"CVE-2026-11067","month":"2026-06","title":"Chromium: CVE-2026-11067 Uninitialized Use in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11067"},{"cve":"CVE-2026-11068","month":"2026-06","title":"Chromium: CVE-2026-11068 Use after free in WebSockets","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11068"},{"cve":"CVE-2026-11069","month":"2026-06","title":"Chromium: CVE-2026-11069 Insufficient validation of untrusted input in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11069"},{"cve":"CVE-2026-11070","month":"2026-06","title":"Chromium: CVE-2026-11070 Insufficient validation of untrusted input in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11070"},{"cve":"CVE-2026-11071","month":"2026-06","title":"Chromium: CVE-2026-11071 Use after free in Base","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11071"},{"cve":"CVE-2026-11072","month":"2026-06","title":"Chromium: CVE-2026-11072 Use after free in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11072"},{"cve":"CVE-2026-11073","month":"2026-06","title":"Chromium: CVE-2026-11073 Use after free in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11073"},{"cve":"CVE-2026-11074","month":"2026-06","title":"Chromium: CVE-2026-11074 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11074"},{"cve":"CVE-2026-11075","month":"2026-06","title":"Chromium: CVE-2026-11075 Out of bounds read in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11075"},{"cve":"CVE-2026-11076","month":"2026-06","title":"Chromium: CVE-2026-11076 Type Confusion in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11076"},{"cve":"CVE-2026-11077","month":"2026-06","title":"Chromium: CVE-2026-11077 Out of bounds read in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11077"},{"cve":"CVE-2026-11078","month":"2026-06","title":"Chromium: CVE-2026-11078 Insufficient validation of untrusted input in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11078"},{"cve":"CVE-2026-11079","month":"2026-06","title":"Chromium: CVE-2026-11079 Insufficient validation of untrusted input in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11079"},{"cve":"CVE-2026-11080","month":"2026-06","title":"Chromium: CVE-2026-11080 Use after free in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11080"},{"cve":"CVE-2026-11081","month":"2026-06","title":"Chromium: CVE-2026-11081 Policy bypass in Canvas","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11081"},{"cve":"CVE-2026-11082","month":"2026-06","title":"Chromium: CVE-2026-11082 Use after free in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11082"},{"cve":"CVE-2026-11083","month":"2026-06","title":"Chromium: CVE-2026-11083 Inappropriate implementation in Password Manager","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11083"},{"cve":"CVE-2026-11084","month":"2026-06","title":"Chromium: CVE-2026-11084 Inappropriate implementation in Password Manager","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11084"},{"cve":"CVE-2026-11085","month":"2026-06","title":"Chromium: CVE-2026-11085 Integer overflow in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11085"},{"cve":"CVE-2026-11086","month":"2026-06","title":"Chromium: CVE-2026-11086 Insufficient validation of untrusted input in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11086"},{"cve":"CVE-2026-11087","month":"2026-06","title":"Chromium: CVE-2026-11087 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11087"},{"cve":"CVE-2026-11088","month":"2026-06","title":"Chromium: CVE-2026-11088 Integer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11088"},{"cve":"CVE-2026-11089","month":"2026-06","title":"Chromium: CVE-2026-11089 Uninitialized Use in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11089"},{"cve":"CVE-2026-11090","month":"2026-06","title":"Chromium: CVE-2026-11090 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11090"},{"cve":"CVE-2026-11091","month":"2026-06","title":"Chromium: CVE-2026-11091 Inappropriate implementation in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11091"},{"cve":"CVE-2026-11092","month":"2026-06","title":"Chromium: CVE-2026-11092 Insufficient policy enforcement in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11092"},{"cve":"CVE-2026-11093","month":"2026-06","title":"Chromium: CVE-2026-11093 Insufficient validation of untrusted input in Printing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11093"},{"cve":"CVE-2026-11094","month":"2026-06","title":"Chromium: CVE-2026-11094 Use after free in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11094"},{"cve":"CVE-2026-11095","month":"2026-06","title":"Chromium: CVE-2026-11095 Insufficient validation of untrusted input in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11095"},{"cve":"CVE-2026-11096","month":"2026-06","title":"Chromium: CVE-2026-11096 Out of bounds read in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11096"},{"cve":"CVE-2026-11097","month":"2026-06","title":"Chromium: CVE-2026-11097 Inappropriate implementation in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11097"},{"cve":"CVE-2026-11098","month":"2026-06","title":"Chromium: CVE-2026-11098 Insufficient validation of untrusted input in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11098"},{"cve":"CVE-2026-11099","month":"2026-06","title":"Chromium: CVE-2026-11099 Vulnerability in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11099"},{"cve":"CVE-2026-11100","month":"2026-06","title":"Chromium: CVE-2026-11100 Use after free in File Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11100"},{"cve":"CVE-2026-11101","month":"2026-06","title":"Chromium: CVE-2026-11101 Uninitialized Use in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11101"},{"cve":"CVE-2026-11102","month":"2026-06","title":"Chromium: CVE-2026-11102 Inappropriate implementation in Isolated Web Apps","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11102"},{"cve":"CVE-2026-11103","month":"2026-06","title":"Chromium: CVE-2026-11103 Inappropriate implementation in Installer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11103"},{"cve":"CVE-2026-11104","month":"2026-06","title":"Chromium: CVE-2026-11104 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11104"},{"cve":"CVE-2026-11105","month":"2026-06","title":"Chromium: CVE-2026-11105 Insufficient validation of untrusted input in WebUI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11105"},{"cve":"CVE-2026-11106","month":"2026-06","title":"Chromium: CVE-2026-11106 Inappropriate implementation in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11106"},{"cve":"CVE-2026-11107","month":"2026-06","title":"Chromium: CVE-2026-11107 Inappropriate implementation in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11107"},{"cve":"CVE-2026-11108","month":"2026-06","title":"Chromium: CVE-2026-11108 Inappropriate implementation in NFC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11108"},{"cve":"CVE-2026-11109","month":"2026-06","title":"Chromium: CVE-2026-11109 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11109"},{"cve":"CVE-2026-11110","month":"2026-06","title":"Chromium: CVE-2026-11110 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11110"},{"cve":"CVE-2026-11111","month":"2026-06","title":"Chromium: CVE-2026-11111 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11111"},{"cve":"CVE-2026-11112","month":"2026-06","title":"Chromium: CVE-2026-11112 Insufficient validation of untrusted input in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11112"},{"cve":"CVE-2026-11113","month":"2026-06","title":"Chromium: CVE-2026-11113 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11113"},{"cve":"CVE-2026-11114","month":"2026-06","title":"Chromium: CVE-2026-11114 Use after free in Device Trust","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11114"},{"cve":"CVE-2026-11115","month":"2026-06","title":"Chromium: CVE-2026-11115 Use after free in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11115"},{"cve":"CVE-2026-11116","month":"2026-06","title":"Chromium: CVE-2026-11116 Use after free in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11116"},{"cve":"CVE-2026-11117","month":"2026-06","title":"Chromium: CVE-2026-11117 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11117"},{"cve":"CVE-2026-11118","month":"2026-06","title":"Chromium: CVE-2026-11118 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11118"},{"cve":"CVE-2026-11119","month":"2026-06","title":"Chromium: CVE-2026-11119 Insufficient validation of untrusted input in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11119"},{"cve":"CVE-2026-11120","month":"2026-06","title":"Chromium: CVE-2026-11120 Insufficient validation of untrusted input in Enterprise Reporting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11120"},{"cve":"CVE-2026-11121","month":"2026-06","title":"Chromium: CVE-2026-11121 Insufficient validation of untrusted input in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11121"},{"cve":"CVE-2026-11122","month":"2026-06","title":"Chromium: CVE-2026-11122 Inappropriate implementation in Keyboard","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11122"},{"cve":"CVE-2026-11123","month":"2026-06","title":"Chromium: CVE-2026-11123 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11123"},{"cve":"CVE-2026-11124","month":"2026-06","title":"Chromium: CVE-2026-11124 Heap buffer overflow in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11124"},{"cve":"CVE-2026-11125","month":"2026-06","title":"Chromium: CVE-2026-11125 Use after free in Compositing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11125"},{"cve":"CVE-2026-11126","month":"2026-06","title":"Chromium: CVE-2026-11126 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11126"},{"cve":"CVE-2026-11127","month":"2026-06","title":"Chromium: CVE-2026-11127 Inappropriate implementation in WebAPKs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11127"},{"cve":"CVE-2026-11128","month":"2026-06","title":"Chromium: CVE-2026-11128 Insufficient validation of untrusted input in Web Share","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11128"},{"cve":"CVE-2026-11129","month":"2026-06","title":"Chromium: CVE-2026-11129 Inappropriate implementation in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11129"},{"cve":"CVE-2026-11130","month":"2026-06","title":"Chromium: CVE-2026-11130 Use after free in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11130"},{"cve":"CVE-2026-11131","month":"2026-06","title":"Chromium: CVE-2026-11131 Use after free in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11131"},{"cve":"CVE-2026-11132","month":"2026-06","title":"Chromium: CVE-2026-11132 Policy bypass in Paint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11132"},{"cve":"CVE-2026-11133","month":"2026-06","title":"Chromium: CVE-2026-11133 Insufficient policy enforcement in Paint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11133"},{"cve":"CVE-2026-11134","month":"2026-06","title":"Chromium: CVE-2026-11134 Insufficient data validation in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11134"},{"cve":"CVE-2026-11135","month":"2026-06","title":"Chromium: CVE-2026-11135 Insufficient policy enforcement in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11135"},{"cve":"CVE-2026-11136","month":"2026-06","title":"Chromium: CVE-2026-11136 Use after free in Canvas","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11136"},{"cve":"CVE-2026-11137","month":"2026-06","title":"Chromium: CVE-2026-11137 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11137"},{"cve":"CVE-2026-11138","month":"2026-06","title":"Chromium: CVE-2026-11138 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11138"},{"cve":"CVE-2026-11139","month":"2026-06","title":"Chromium: CVE-2026-11139 Policy bypass in Paint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11139"},{"cve":"CVE-2026-11140","month":"2026-06","title":"Chromium: CVE-2026-11140 Insufficient validation of untrusted input in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11140"},{"cve":"CVE-2026-11141","month":"2026-06","title":"Chromium: CVE-2026-11141 Uninitialized Use in Audio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11141"},{"cve":"CVE-2026-11142","month":"2026-06","title":"Chromium: CVE-2026-11142 Policy bypass in Paint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11142"},{"cve":"CVE-2026-11143","month":"2026-06","title":"Chromium: CVE-2026-11143 Heap buffer overflow in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11143"},{"cve":"CVE-2026-11144","month":"2026-06","title":"Chromium: CVE-2026-11144 Use after free in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11144"},{"cve":"CVE-2026-11145","month":"2026-06","title":"Chromium: CVE-2026-11145 Race in Geolocation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11145"},{"cve":"CVE-2026-11146","month":"2026-06","title":"Chromium: CVE-2026-11146 Insufficient validation of untrusted input in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11146"},{"cve":"CVE-2026-11147","month":"2026-06","title":"Chromium: CVE-2026-11147 Use after free in WebML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11147"},{"cve":"CVE-2026-11148","month":"2026-06","title":"Chromium: CVE-2026-11148 Inappropriate implementation in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11148"},{"cve":"CVE-2026-11149","month":"2026-06","title":"Chromium: CVE-2026-11149 Insufficient validation of untrusted input in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11149"},{"cve":"CVE-2026-11150","month":"2026-06","title":"Chromium: CVE-2026-11150 Inappropriate implementation in XML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11150"},{"cve":"CVE-2026-11151","month":"2026-06","title":"Chromium: CVE-2026-11151 Insufficient validation of untrusted input in Password Manager","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11151"},{"cve":"CVE-2026-11152","month":"2026-06","title":"Chromium: CVE-2026-11152 Object lifecycle issue in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11152"},{"cve":"CVE-2026-11153","month":"2026-06","title":"Chromium: CVE-2026-11153 Side-channel information leakage in Forms","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11153"},{"cve":"CVE-2026-11154","month":"2026-06","title":"Chromium: CVE-2026-11154 Use after free in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11154"},{"cve":"CVE-2026-11155","month":"2026-06","title":"Chromium: CVE-2026-11155 Insufficient policy enforcement in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11155"},{"cve":"CVE-2026-11156","month":"2026-06","title":"Chromium: CVE-2026-11156 Inappropriate implementation in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11156"},{"cve":"CVE-2026-11157","month":"2026-06","title":"Chromium: CVE-2026-11157 Script injection in Accessibility","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11157"},{"cve":"CVE-2026-11158","month":"2026-06","title":"Chromium: CVE-2026-11158 Insufficient validation of untrusted input in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11158"},{"cve":"CVE-2026-11159","month":"2026-06","title":"Chromium: CVE-2026-11159 Uninitialized Use in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11159"},{"cve":"CVE-2026-11160","month":"2026-06","title":"Chromium: CVE-2026-11160 Out of bounds read in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11160"},{"cve":"CVE-2026-11161","month":"2026-06","title":"Chromium: CVE-2026-11161 Insufficient data validation in DataTransfer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11161"},{"cve":"CVE-2026-11162","month":"2026-06","title":"Chromium: CVE-2026-11162 Insufficient policy enforcement in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11162"},{"cve":"CVE-2026-11163","month":"2026-06","title":"Chromium: CVE-2026-11163 Use after free in Messages","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11163"},{"cve":"CVE-2026-11164","month":"2026-06","title":"Chromium: CVE-2026-11164 Use after free in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11164"},{"cve":"CVE-2026-11166","month":"2026-06","title":"Chromium: CVE-2026-11166 Inappropriate implementation in SVG","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11166"},{"cve":"CVE-2026-11167","month":"2026-06","title":"Chromium: CVE-2026-11167 Inappropriate implementation in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11167"},{"cve":"CVE-2026-11168","month":"2026-06","title":"Chromium: CVE-2026-11168 Insufficient policy enforcement in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11168"},{"cve":"CVE-2026-11169","month":"2026-06","title":"Chromium: CVE-2026-11169 Inappropriate implementation in XML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11169"},{"cve":"CVE-2026-11170","month":"2026-06","title":"Chromium: CVE-2026-11170 Inappropriate implementation in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11170"},{"cve":"CVE-2026-11171","month":"2026-06","title":"Chromium: CVE-2026-11171 Integer overflow in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11171"},{"cve":"CVE-2026-11172","month":"2026-06","title":"Chromium: CVE-2026-11172 Incorrect security UI in Contact Picker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11172"},{"cve":"CVE-2026-11173","month":"2026-06","title":"Chromium: CVE-2026-11173 Out of bounds write in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11173"},{"cve":"CVE-2026-11174","month":"2026-06","title":"Chromium: CVE-2026-11174 Insufficient policy enforcement in Site Isolation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11174"},{"cve":"CVE-2026-11175","month":"2026-06","title":"Chromium: CVE-2026-11175 Incorrect security UI in Messages","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11175"},{"cve":"CVE-2026-11176","month":"2026-06","title":"Chromium: CVE-2026-11176 Inappropriate implementation in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11176"},{"cve":"CVE-2026-11177","month":"2026-06","title":"Chromium: CVE-2026-11177 Use after free in Omnibox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11177"},{"cve":"CVE-2026-11178","month":"2026-06","title":"Chromium: CVE-2026-11178 Policy bypass in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11178"},{"cve":"CVE-2026-11179","month":"2026-06","title":"Chromium: CVE-2026-11179 Inappropriate implementation in ORB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11179"},{"cve":"CVE-2026-11180","month":"2026-06","title":"Chromium: CVE-2026-11180 Policy bypass in SVG","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11180"},{"cve":"CVE-2026-11181","month":"2026-06","title":"Chromium: CVE-2026-11181 Inappropriate implementation in Media Session","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11181"},{"cve":"CVE-2026-11182","month":"2026-06","title":"Chromium: CVE-2026-11182 Inappropriate implementation in SVG","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11182"},{"cve":"CVE-2026-11184","month":"2026-06","title":"Chromium: CVE-2026-11184 Insufficient policy enforcement in Actor","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11184"},{"cve":"CVE-2026-11185","month":"2026-06","title":"Chromium: CVE-2026-11185 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11185"},{"cve":"CVE-2026-11186","month":"2026-06","title":"Chromium: CVE-2026-11186 Inappropriate implementation in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11186"},{"cve":"CVE-2026-11187","month":"2026-06","title":"Chromium: CVE-2026-11187 Insufficient policy enforcement in Glic","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11187"},{"cve":"CVE-2026-11188","month":"2026-06","title":"Chromium: CVE-2026-11188 Use after free in USB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11188"},{"cve":"CVE-2026-11189","month":"2026-06","title":"Chromium: CVE-2026-11189 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11189"},{"cve":"CVE-2026-11190","month":"2026-06","title":"Chromium: CVE-2026-11190 Insufficient policy enforcement in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11190"},{"cve":"CVE-2026-11191","month":"2026-06","title":"Chromium: CVE-2026-11191 Out of bounds memory access in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11191"},{"cve":"CVE-2026-11192","month":"2026-06","title":"Chromium: CVE-2026-11192 Insufficient validation of untrusted input in Password Manager","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11192"},{"cve":"CVE-2026-11193","month":"2026-06","title":"Chromium: CVE-2026-11193 Insufficient policy enforcement in Password Manager","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11193"},{"cve":"CVE-2026-11194","month":"2026-06","title":"Chromium: CVE-2026-11194 Inappropriate implementation in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11194"},{"cve":"CVE-2026-11195","month":"2026-06","title":"Chromium: CVE-2026-11195 Inappropriate implementation in MHTML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11195"},{"cve":"CVE-2026-11196","month":"2026-06","title":"Chromium: CVE-2026-11196 Type Confusion in XML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11196"},{"cve":"CVE-2026-11197","month":"2026-06","title":"Chromium: CVE-2026-11197 Insufficient policy enforcement in Workers","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11197"},{"cve":"CVE-2026-11198","month":"2026-06","title":"Chromium: CVE-2026-11198 Insufficient validation of untrusted input in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11198"},{"cve":"CVE-2026-11199","month":"2026-06","title":"Chromium: CVE-2026-11199 Insufficient validation of untrusted input in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11199"},{"cve":"CVE-2026-11200","month":"2026-06","title":"Chromium: CVE-2026-11200 Inappropriate implementation in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11200"},{"cve":"CVE-2026-11201","month":"2026-06","title":"Chromium: CVE-2026-11201 Use after free in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11201"},{"cve":"CVE-2026-11203","month":"2026-06","title":"Chromium: CVE-2026-11203 Policy bypass in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11203"},{"cve":"CVE-2026-11206","month":"2026-06","title":"Chromium: CVE-2026-11206 Policy bypass in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11206"},{"cve":"CVE-2026-11207","month":"2026-06","title":"Chromium: CVE-2026-11207 Insufficient validation of untrusted input in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11207"},{"cve":"CVE-2026-11208","month":"2026-06","title":"Chromium: CVE-2026-11208 Use after free in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11208"},{"cve":"CVE-2026-11209","month":"2026-06","title":"Chromium: CVE-2026-11209 Insufficient policy enforcement in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11209"},{"cve":"CVE-2026-11210","month":"2026-06","title":"Chromium: CVE-2026-11210 Insufficient policy enforcement in Safe Browsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11210"},{"cve":"CVE-2026-11211","month":"2026-06","title":"Chromium: CVE-2026-11211 Integer overflow in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11211"},{"cve":"CVE-2026-11212","month":"2026-06","title":"Chromium: CVE-2026-11212 Insufficient policy enforcement in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11212"},{"cve":"CVE-2026-11213","month":"2026-06","title":"Chromium: CVE-2026-11213 Insufficient validation of untrusted input in Reading Mode","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11213"},{"cve":"CVE-2026-11215","month":"2026-06","title":"Chromium: CVE-2026-11215 Inappropriate implementation in Cronet","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11215"},{"cve":"CVE-2026-11216","month":"2026-06","title":"Chromium: CVE-2026-11216 Incorrect security UI in File Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11216"},{"cve":"CVE-2026-11217","month":"2026-06","title":"Chromium: CVE-2026-11217 Insufficient policy enforcement in Fenced Frames","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11217"},{"cve":"CVE-2026-11218","month":"2026-06","title":"Chromium: CVE-2026-11218 Inappropriate implementation in PlatformIntegration","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11218"},{"cve":"CVE-2026-11219","month":"2026-06","title":"Chromium: CVE-2026-11219 Insufficient data validation in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11219"},{"cve":"CVE-2026-11220","month":"2026-06","title":"Chromium: CVE-2026-11220 Insufficient validation of untrusted input in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11220"},{"cve":"CVE-2026-11221","month":"2026-06","title":"Chromium: CVE-2026-11221 Insufficient validation of untrusted input in PointerLock","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11221"},{"cve":"CVE-2026-11222","month":"2026-06","title":"Chromium: CVE-2026-11222 Incorrect security UI in Tab Strip","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11222"},{"cve":"CVE-2026-11223","month":"2026-06","title":"Chromium: CVE-2026-11223 Insufficient validation of untrusted input in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11223"},{"cve":"CVE-2026-11224","month":"2026-06","title":"Chromium: CVE-2026-11224 Use after free in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11224"},{"cve":"CVE-2026-11225","month":"2026-06","title":"Chromium: CVE-2026-11225 Incorrect security UI in WebUI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11225"},{"cve":"CVE-2026-11226","month":"2026-06","title":"Chromium: CVE-2026-11226 Insufficient policy enforcement in PreviewTab","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11226"},{"cve":"CVE-2026-11227","month":"2026-06","title":"Chromium: CVE-2026-11227 Incorrect security UI in Tab Hover Cards","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11227"},{"cve":"CVE-2026-11228","month":"2026-06","title":"Chromium: CVE-2026-11228 Incorrect security UI in File Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11228"},{"cve":"CVE-2026-11229","month":"2026-06","title":"Chromium: CVE-2026-11229 Insufficient policy enforcement in Enterprise","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11229"},{"cve":"CVE-2026-11230","month":"2026-06","title":"Chromium: CVE-2026-11230 Use after free in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11230"},{"cve":"CVE-2026-11231","month":"2026-06","title":"Chromium: CVE-2026-11231 Inappropriate implementation in Safe Browsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11231"},{"cve":"CVE-2026-11232","month":"2026-06","title":"Chromium: CVE-2026-11232 Inappropriate implementation in TabGroups","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11232"},{"cve":"CVE-2026-11233","month":"2026-06","title":"Chromium: CVE-2026-11233 Insufficient validation of untrusted input in FoldableAPIs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11233"},{"cve":"CVE-2026-11234","month":"2026-06","title":"Chromium: CVE-2026-11234 Insufficient policy enforcement in FoldableAPIs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11234"},{"cve":"CVE-2026-11235","month":"2026-06","title":"Chromium: CVE-2026-11235 Insufficient validation of untrusted input in Compositing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11235"},{"cve":"CVE-2026-11236","month":"2026-06","title":"Chromium: CVE-2026-11236 Insufficient policy enforcement in Web Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11236"},{"cve":"CVE-2026-11237","month":"2026-06","title":"Chromium: CVE-2026-11237 Insufficient validation of untrusted input in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11237"},{"cve":"CVE-2026-11238","month":"2026-06","title":"Chromium: CVE-2026-11238 Inappropriate implementation in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11238"},{"cve":"CVE-2026-11239","month":"2026-06","title":"Chromium: CVE-2026-11239 Insufficient validation of untrusted input in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11239"},{"cve":"CVE-2026-11240","month":"2026-06","title":"Chromium: CVE-2026-11240 Insufficient validation of untrusted input in Loader","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11240"},{"cve":"CVE-2026-11241","month":"2026-06","title":"Chromium: CVE-2026-11241 Insufficient validation of untrusted input in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11241"},{"cve":"CVE-2026-11242","month":"2026-06","title":"Chromium: CVE-2026-11242 Insufficient validation of untrusted input in Plugins","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11242"},{"cve":"CVE-2026-11243","month":"2026-06","title":"Chromium: CVE-2026-11243 Incorrect security UI in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11243"},{"cve":"CVE-2026-11244","month":"2026-06","title":"Chromium: CVE-2026-11244 Insufficient validation of untrusted input in WebAuthentication","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11244"},{"cve":"CVE-2026-11245","month":"2026-06","title":"Chromium: CVE-2026-11245 Inappropriate implementation in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11245"},{"cve":"CVE-2026-11246","month":"2026-06","title":"Chromium: CVE-2026-11246 Insufficient validation of untrusted input in IndexedDB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11246"},{"cve":"CVE-2026-11247","month":"2026-06","title":"Chromium: CVE-2026-11247 Insufficient policy enforcement in CustomTabs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11247"},{"cve":"CVE-2026-11248","month":"2026-06","title":"Chromium: CVE-2026-11248 Policy bypass in Google Lens","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11248"},{"cve":"CVE-2026-11249","month":"2026-06","title":"Chromium: CVE-2026-11249 Use after free in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11249"},{"cve":"CVE-2026-11250","month":"2026-06","title":"Chromium: CVE-2026-11250 Inappropriate implementation in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11250"},{"cve":"CVE-2026-11251","month":"2026-06","title":"Chromium: CVE-2026-11251 Insufficient validation of untrusted input in Password Manager","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11251"},{"cve":"CVE-2026-11252","month":"2026-06","title":"Chromium: CVE-2026-11252 Policy bypass in Content Settings","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11252"},{"cve":"CVE-2026-11253","month":"2026-06","title":"Chromium: CVE-2026-11253 Race in Permissions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11253"},{"cve":"CVE-2026-11254","month":"2026-06","title":"Chromium: CVE-2026-11254 Inappropriate implementation in Permissions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11254"},{"cve":"CVE-2026-11255","month":"2026-06","title":"Chromium: CVE-2026-11255 Insufficient validation of untrusted input in Storage Access API","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11255"},{"cve":"CVE-2026-11256","month":"2026-06","title":"Chromium: CVE-2026-11256 Out of bounds read in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11256"},{"cve":"CVE-2026-11257","month":"2026-06","title":"Chromium: CVE-2026-11257 Inappropriate implementation in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11257"},{"cve":"CVE-2026-11258","month":"2026-06","title":"Chromium: CVE-2026-11258 Inappropriate implementation in File System Access","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11258"},{"cve":"CVE-2026-11259","month":"2026-06","title":"Chromium: CVE-2026-11259 Insufficient validation of untrusted input in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11259"},{"cve":"CVE-2026-11260","month":"2026-06","title":"Chromium: CVE-2026-11260 Policy bypass in Permissions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11260"},{"cve":"CVE-2026-11261","month":"2026-06","title":"Chromium: CVE-2026-11261 Insufficient validation of untrusted input in PDF","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11261"},{"cve":"CVE-2026-11262","month":"2026-06","title":"Chromium: CVE-2026-11262 Use after free in TabStrip","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11262"},{"cve":"CVE-2026-11263","month":"2026-06","title":"Chromium: CVE-2026-11263 Insufficient policy enforcement in WebAuthentication","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11263"},{"cve":"CVE-2026-11264","month":"2026-06","title":"Chromium: CVE-2026-11264 Policy bypass in Content Security Policy","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11264"},{"cve":"CVE-2026-11265","month":"2026-06","title":"Chromium: CVE-2026-11265 Insufficient data validation in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11265"},{"cve":"CVE-2026-11266","month":"2026-06","title":"Chromium: CVE-2026-11266 Policy bypass in SafeBrowsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11266"},{"cve":"CVE-2026-11267","month":"2026-06","title":"Chromium: CVE-2026-11267 Insufficient policy enforcement in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11267"},{"cve":"CVE-2026-11268","month":"2026-06","title":"Chromium: CVE-2026-11268 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11268"},{"cve":"CVE-2026-11269","month":"2026-06","title":"Chromium: CVE-2026-11269 Inappropriate implementation in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11269"},{"cve":"CVE-2026-11270","month":"2026-06","title":"Chromium: CVE-2026-11270 Inappropriate implementation in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11270"},{"cve":"CVE-2026-11271","month":"2026-06","title":"Chromium: CVE-2026-11271 Incorrect security UI in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11271"},{"cve":"CVE-2026-11273","month":"2026-06","title":"Chromium: CVE-2026-11273 Insufficient validation of untrusted input in Omnibox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11273"},{"cve":"CVE-2026-11275","month":"2026-06","title":"Chromium: CVE-2026-11275 Insufficient policy enforcement in Page Info","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11275"},{"cve":"CVE-2026-11276","month":"2026-06","title":"Chromium: CVE-2026-11276 Inappropriate implementation in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11276"},{"cve":"CVE-2026-11278","month":"2026-06","title":"Chromium: CVE-2026-11278 Inappropriate implementation in CustomTabs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11278"},{"cve":"CVE-2026-11279","month":"2026-06","title":"Chromium: CVE-2026-11279 Out of bounds read in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11279"},{"cve":"CVE-2026-11281","month":"2026-06","title":"Chromium: CVE-2026-11281 Integer overflow in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11281"},{"cve":"CVE-2026-11282","month":"2026-06","title":"Chromium: CVE-2026-11282 Policy bypass in Sandbox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11282"},{"cve":"CVE-2026-11283","month":"2026-06","title":"Chromium: CVE-2026-11283 Policy bypass in Shortcuts","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11283"},{"cve":"CVE-2026-11284","month":"2026-06","title":"Chromium: CVE-2026-11284 Side-channel information leakage in PerformanceAPIs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11284"},{"cve":"CVE-2026-11286","month":"2026-06","title":"Chromium: CVE-2026-11286 Insufficient validation of untrusted input in Wallet","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11286"},{"cve":"CVE-2026-11287","month":"2026-06","title":"Chromium: CVE-2026-11287 Insufficient validation of untrusted input in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11287"},{"cve":"CVE-2026-11288","month":"2026-06","title":"Chromium: CVE-2026-11288 Policy bypass in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11288"},{"cve":"CVE-2026-11289","month":"2026-06","title":"Chromium: CVE-2026-11289 Side-channel information leakage in Paint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11289"},{"cve":"CVE-2026-11290","month":"2026-06","title":"Chromium: CVE-2026-11290 Integer overflow in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11290"},{"cve":"CVE-2026-11291","month":"2026-06","title":"Chromium: CVE-2026-11291 Policy bypass in Android Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11291"},{"cve":"CVE-2026-11292","month":"2026-06","title":"Chromium: CVE-2026-11292 Policy bypass in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11292"},{"cve":"CVE-2026-11293","month":"2026-06","title":"Chromium: CVE-2026-11293 Use after free in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11293"},{"cve":"CVE-2026-11294","month":"2026-06","title":"Chromium: CVE-2026-11294 Inappropriate implementation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11294"},{"cve":"CVE-2026-11295","month":"2026-06","title":"Chromium: CVE-2026-11295 Inappropriate implementation in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11295"},{"cve":"CVE-2026-11296","month":"2026-06","title":"Chromium: CVE-2026-11296 Inappropriate implementation in ImageCapture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11296"},{"cve":"CVE-2026-11297","month":"2026-06","title":"Chromium: CVE-2026-11297 Insufficient validation of untrusted input in Reader Mode","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11297"},{"cve":"CVE-2026-11299","month":"2026-06","title":"Chromium: CVE-2026-11299 Out of bounds read in Fonts","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11299"},{"cve":"CVE-2026-11300","month":"2026-06","title":"Chromium: CVE-2026-11300 Inappropriate implementation in Permissions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11300"},{"cve":"CVE-2026-11301","month":"2026-06","title":"Chromium: CVE-2026-11301 Out of bounds read in LiveCaption","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11301"},{"cve":"CVE-2026-11303","month":"2026-06","title":"Chromium: CVE-2026-11303 Use after free in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11303"},{"cve":"CVE-2026-11304","month":"2026-06","title":"Chromium: CVE-2026-11304 Use after free in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11304"},{"cve":"CVE-2026-11305","month":"2026-06","title":"Chromium: CVE-2026-11305 Use after free in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11305"},{"cve":"CVE-2026-11306","month":"2026-06","title":"Chromium: CVE-2026-11306 Use after free in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11306"},{"cve":"CVE-2026-11307","month":"2026-06","title":"Chromium: CVE-2026-11307 Use after free in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11307"},{"cve":"CVE-2026-11308","month":"2026-06","title":"Chromium: CVE-2026-11308 Inappropriate implementation in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11308"},{"cve":"CVE-2026-11309","month":"2026-06","title":"Chromium: CVE-2026-11309 Insufficient policy enforcement in History","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11309"},{"cve":"CVE-2026-11628","month":"2026-06","title":"Chromium: CVE-2026-11628 Use after free in Ozone","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11628"},{"cve":"CVE-2026-11629","month":"2026-06","title":"Chromium: CVE-2026-11629 Use after free in Ozone","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11629"},{"cve":"CVE-2026-11630","month":"2026-06","title":"Chromium: CVE-2026-11630 Use after free in File Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11630"},{"cve":"CVE-2026-11631","month":"2026-06","title":"Chromium: CVE-2026-11631 Use after free in Aura","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11631"},{"cve":"CVE-2026-11632","month":"2026-06","title":"Chromium: CVE-2026-11632 Use after free in TabStrip","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11632"},{"cve":"CVE-2026-11633","month":"2026-06","title":"Chromium: CVE-2026-11633 Use after free in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11633"},{"cve":"CVE-2026-11634","month":"2026-06","title":"Chromium: CVE-2026-11634 Use after free in Gamepad","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11634"},{"cve":"CVE-2026-11635","month":"2026-06","title":"Chromium: CVE-2026-11635 Use after free in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11635"},{"cve":"CVE-2026-11636","month":"2026-06","title":"Chromium: CVE-2026-11636 Use after free in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11636"},{"cve":"CVE-2026-11637","month":"2026-06","title":"Chromium: CVE-2026-11637 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11637"},{"cve":"CVE-2026-11638","month":"2026-06","title":"Chromium: CVE-2026-11638 Use after free in Printing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11638"},{"cve":"CVE-2026-11639","month":"2026-06","title":"Chromium: CVE-2026-11639 Use after free in Compositing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11639"},{"cve":"CVE-2026-11640","month":"2026-06","title":"Chromium: CVE-2026-11640 Integer overflow in libyuv","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11640"},{"cve":"CVE-2026-11641","month":"2026-06","title":"Chromium: CVE-2026-11641 Use after free in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11641"},{"cve":"CVE-2026-11642","month":"2026-06","title":"Chromium: CVE-2026-11642 Use after free in Web Apps","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11642"},{"cve":"CVE-2026-11643","month":"2026-06","title":"Chromium: CVE-2026-11643 Use after free in Proxy","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11643"},{"cve":"CVE-2026-11644","month":"2026-06","title":"Chromium: CVE-2026-11644 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11644"},{"cve":"CVE-2026-11645","month":"2026-06","title":"Chromium: CVE-2026-11645 Out of bounds memory access in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":true,"kev_added":"2026-06-09","class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11645"},{"cve":"CVE-2026-11646","month":"2026-06","title":"Chromium: CVE-2026-11646 Use after free in ViewTransitions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11646"},{"cve":"CVE-2026-11647","month":"2026-06","title":"Chromium: CVE-2026-11647 Use after free in Printing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11647"},{"cve":"CVE-2026-11648","month":"2026-06","title":"Chromium: CVE-2026-11648 Use after free in FullScreen","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11648"},{"cve":"CVE-2026-11649","month":"2026-06","title":"Chromium: CVE-2026-11649 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11649"},{"cve":"CVE-2026-11650","month":"2026-06","title":"Chromium: CVE-2026-11650 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11650"},{"cve":"CVE-2026-11651","month":"2026-06","title":"Chromium: CVE-2026-11651 Use after free in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11651"},{"cve":"CVE-2026-11652","month":"2026-06","title":"Chromium: CVE-2026-11652 Use after free in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11652"},{"cve":"CVE-2026-11653","month":"2026-06","title":"Chromium: CVE-2026-11653 Insufficient validation of untrusted input in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11653"},{"cve":"CVE-2026-11654","month":"2026-06","title":"Chromium: CVE-2026-11654 Use after free in CameraCapture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11654"},{"cve":"CVE-2026-11655","month":"2026-06","title":"Chromium: CVE-2026-11655 Integer overflow in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11655"},{"cve":"CVE-2026-11656","month":"2026-06","title":"Chromium: CVE-2026-11656 Use after free in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11656"},{"cve":"CVE-2026-11657","month":"2026-06","title":"Chromium: CVE-2026-11657 Use after free in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11657"},{"cve":"CVE-2026-11658","month":"2026-06","title":"Chromium: CVE-2026-11658 Insufficient validation of untrusted input in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11658"},{"cve":"CVE-2026-11659","month":"2026-06","title":"Chromium: CVE-2026-11659 Insufficient validation of untrusted input in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11659"},{"cve":"CVE-2026-11660","month":"2026-06","title":"Chromium: CVE-2026-11660 Insufficient validation of untrusted input in New Tab Page","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11660"},{"cve":"CVE-2026-11661","month":"2026-06","title":"Chromium: CVE-2026-11661 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11661"},{"cve":"CVE-2026-11662","month":"2026-06","title":"Chromium: CVE-2026-11662 Type Confusion in Bindings","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11662"},{"cve":"CVE-2026-11663","month":"2026-06","title":"Chromium: CVE-2026-11663 Use after free in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11663"},{"cve":"CVE-2026-11664","month":"2026-06","title":"Chromium: CVE-2026-11664 Use after free in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11664"},{"cve":"CVE-2026-11665","month":"2026-06","title":"Chromium: CVE-2026-11665 Out of bounds read in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11665"},{"cve":"CVE-2026-11666","month":"2026-06","title":"Chromium: CVE-2026-11666 Insufficient validation of untrusted input in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11666"},{"cve":"CVE-2026-11667","month":"2026-06","title":"Chromium: CVE-2026-11667 Out of bounds read in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11667"},{"cve":"CVE-2026-11668","month":"2026-06","title":"Chromium: CVE-2026-11668 Uninitialized Use in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11668"},{"cve":"CVE-2026-11669","month":"2026-06","title":"Chromium: CVE-2026-11669 Integer overflow in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11669"},{"cve":"CVE-2026-11670","month":"2026-06","title":"Chromium: CVE-2026-11670 Use after free in PDF","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11670"},{"cve":"CVE-2026-11671","month":"2026-06","title":"Chromium: CVE-2026-11671 Use after free in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11671"},{"cve":"CVE-2026-11672","month":"2026-06","title":"Chromium: CVE-2026-11672 Out of bounds write in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11672"},{"cve":"CVE-2026-11673","month":"2026-06","title":"Chromium: CVE-2026-11673 Use after free in InterestGroups","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11673"},{"cve":"CVE-2026-11674","month":"2026-06","title":"Chromium: CVE-2026-11674 Use after free in Guest View","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11674"},{"cve":"CVE-2026-11675","month":"2026-06","title":"Chromium: CVE-2026-11675 Insufficient validation of untrusted input in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11675"},{"cve":"CVE-2026-11676","month":"2026-06","title":"Chromium: CVE-2026-11676 Insufficient validation of untrusted input in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11676"},{"cve":"CVE-2026-11677","month":"2026-06","title":"Chromium: CVE-2026-11677 Race in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11677"},{"cve":"CVE-2026-11678","month":"2026-06","title":"Chromium: CVE-2026-11678 Integer overflow in libyuv","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11678"},{"cve":"CVE-2026-11679","month":"2026-06","title":"Chromium: CVE-2026-11679 Use after free in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11679"},{"cve":"CVE-2026-11680","month":"2026-06","title":"Chromium: CVE-2026-11680 Use after free in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11680"},{"cve":"CVE-2026-11681","month":"2026-06","title":"Chromium: CVE-2026-11681 Use after free in Ozone","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11681"},{"cve":"CVE-2026-11682","month":"2026-06","title":"Chromium: CVE-2026-11682 Insufficient validation of untrusted input in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11682"},{"cve":"CVE-2026-11683","month":"2026-06","title":"Chromium: CVE-2026-11683 Use after free in WebCodecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11683"},{"cve":"CVE-2026-11684","month":"2026-06","title":"Chromium: CVE-2026-11684 Insufficient policy enforcement in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11684"},{"cve":"CVE-2026-11685","month":"2026-06","title":"Chromium: CVE-2026-11685 Insufficient data validation in MediaCapture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11685"},{"cve":"CVE-2026-11686","month":"2026-06","title":"Chromium: CVE-2026-11686 Insufficient validation of untrusted input in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11686"},{"cve":"CVE-2026-11687","month":"2026-06","title":"Chromium: CVE-2026-11687 Use after free in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11687"},{"cve":"CVE-2026-11688","month":"2026-06","title":"Chromium: CVE-2026-11688 Object lifecycle issue in SVG","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11688"},{"cve":"CVE-2026-11689","month":"2026-06","title":"Chromium: CVE-2026-11689 Insufficient validation of untrusted input in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11689"},{"cve":"CVE-2026-11690","month":"2026-06","title":"Chromium: CVE-2026-11690 Out of bounds read and write in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11690"},{"cve":"CVE-2026-11691","month":"2026-06","title":"Chromium: CVE-2026-11691 Insufficient validation of untrusted input in New Tab Page","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11691"},{"cve":"CVE-2026-11692","month":"2026-06","title":"Chromium: CVE-2026-11692 Use after free in Read Anything","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11692"},{"cve":"CVE-2026-11693","month":"2026-06","title":"Chromium: CVE-2026-11693 Inappropriate implementation in Plugins","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11693"},{"cve":"CVE-2026-11694","month":"2026-06","title":"Chromium: CVE-2026-11694 Use after free in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11694"},{"cve":"CVE-2026-11695","month":"2026-06","title":"Chromium: CVE-2026-11695 Inappropriate implementation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11695"},{"cve":"CVE-2026-11696","month":"2026-06","title":"Chromium: CVE-2026-11696 Uninitialized Use in Video","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11696"},{"cve":"CVE-2026-11697","month":"2026-06","title":"Chromium: CVE-2026-11697 Insufficient validation of untrusted input in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11697"},{"cve":"CVE-2026-11698","month":"2026-06","title":"Chromium: CVE-2026-11698 Use after free in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11698"},{"cve":"CVE-2026-11699","month":"2026-06","title":"Chromium: CVE-2026-11699 Use after free in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11699"},{"cve":"CVE-2026-11700","month":"2026-06","title":"Chromium: CVE-2026-11700 Use after free in Tracing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11700"},{"cve":"CVE-2026-11701","month":"2026-06","title":"Chromium: CVE-2026-11701 Insufficient validation of untrusted input in Guest View","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11701"},{"cve":"CVE-2026-12007","month":"2026-06","title":"Chromium: CVE-2026-12007 Use after free\u00a0 Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12007"},{"cve":"CVE-2026-12008","month":"2026-06","title":"Chromium: CVE-2026-12008 Use after free\u00a0 DigitalCredentials","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12008"},{"cve":"CVE-2026-12009","month":"2026-06","title":"Chromium: CVE-2026-12009 Insufficient validation of untrusted input\u00a0 Accessibility","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12009"},{"cve":"CVE-2026-12010","month":"2026-06","title":"Chromium: CVE-2026-12010 Heap buffer overflow\u00a0 GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12010"},{"cve":"CVE-2026-12011","month":"2026-06","title":"Chromium: CVE-2026-12011 Use after free\u00a0 WebMIDI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12011"},{"cve":"CVE-2026-12012","month":"2026-06","title":"Chromium: CVE-2026-12012 Use after free\u00a0 Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12012"},{"cve":"CVE-2026-12013","month":"2026-06","title":"Chromium: CVE-2026-12013 Use after free\u00a0 Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12013"},{"cve":"CVE-2026-12014","month":"2026-06","title":"Chromium: CVE-2026-12014 Use after free\u00a0 Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12014"},{"cve":"CVE-2026-12015","month":"2026-06","title":"Chromium: CVE-2026-12015 Use after free\u00a0 Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12015"},{"cve":"CVE-2026-12016","month":"2026-06","title":"Chromium: CVE-2026-12016 Insufficient validation of untrusted input\u00a0 DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12016"},{"cve":"CVE-2026-12017","month":"2026-06","title":"Chromium: CVE-2026-12017 Insufficient validation of untrusted input\u00a0 Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12017"},{"cve":"CVE-2026-12018","month":"2026-06","title":"Chromium: CVE-2026-12018 Inappropriate implementation\u00a0 Mojo","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12018"},{"cve":"CVE-2026-12019","month":"2026-06","title":"Chromium: CVE-2026-12019 Out of bounds write\u00a0 Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12019"},{"cve":"CVE-2026-12028","month":"2026-06","title":"Chromium: CVE-2026-12028 Use after free\u00a0 GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12028"},{"cve":"CVE-2026-12030","month":"2026-06","title":"Chromium: CVE-2026-12031 Inappropriate implementation\u00a0 Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12030"},{"cve":"CVE-2026-12032","month":"2026-06","title":"Chromium: CVE-2026-12032 Inappropriate implementation\u00a0 Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12032"},{"cve":"CVE-2026-12437","month":"2026-06","title":"Chromium: CVE-2026-12437 Use after free in WebShare","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12437"},{"cve":"CVE-2026-12438","month":"2026-06","title":"Chromium: CVE-2026-12438 Inappropriate implementation in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12438"},{"cve":"CVE-2026-12439","month":"2026-06","title":"Chromium: CVE-2026-12439 Use after free in Digital Credentials","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12439"},{"cve":"CVE-2026-12440","month":"2026-06","title":"Chromium: CVE-2026-12440 Use after free in DigitalCredentials","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12440"},{"cve":"CVE-2026-12441","month":"2026-06","title":"Chromium: CVE-2026-12441 Use after free in File Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12441"},{"cve":"CVE-2026-12442","month":"2026-06","title":"Chromium: CVE-2026-12442 Use after free in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12442"},{"cve":"CVE-2026-12443","month":"2026-06","title":"Chromium: CVE-2026-12443 Use after free in Web Authentication","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12443"},{"cve":"CVE-2026-12444","month":"2026-06","title":"Chromium: CVE-2026-12444 Out of bounds read in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12444"},{"cve":"CVE-2026-12445","month":"2026-06","title":"Chromium: CVE-2026-12445 Use after free in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12445"},{"cve":"CVE-2026-12446","month":"2026-06","title":"Chromium: CVE-2026-12446 Insufficient data validation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12446"},{"cve":"CVE-2026-12447","month":"2026-06","title":"Chromium: CVE-2026-12447 Heap buffer overflow in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12447"},{"cve":"CVE-2026-12448","month":"2026-06","title":"Chromium: CVE-2026-12448 Inappropriate implementation in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12448"},{"cve":"CVE-2026-12449","month":"2026-06","title":"Chromium: CVE-2026-12449 Use after free in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12449"},{"cve":"CVE-2026-12451","month":"2026-06","title":"Chromium: CVE-2026-12451 Use after free in DigitalCredentials","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12451"},{"cve":"CVE-2026-12452","month":"2026-06","title":"Chromium: CVE-2026-12452 Use after free in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12452"},{"cve":"CVE-2026-12453","month":"2026-06","title":"Chromium: CVE-2026-12453 Insufficient validation of untrusted input in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12453"},{"cve":"CVE-2026-12454","month":"2026-06","title":"Chromium: CVE-2026-12454 Race in Safe Browsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12454"},{"cve":"CVE-2026-12455","month":"2026-06","title":"Chromium: CVE-2026-12455 Use after free in Tab Strip","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12455"},{"cve":"CVE-2026-12456","month":"2026-06","title":"Chromium: CVE-2026-12456 Insufficient validation of untrusted input in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12456"},{"cve":"CVE-2026-12457","month":"2026-06","title":"Chromium: CVE-2026-12457 Insufficient data validation in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12457"},{"cve":"CVE-2026-12458","month":"2026-06","title":"Chromium: CVE-2026-12458 Incorrect security UI in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12458"},{"cve":"CVE-2026-12459","month":"2026-06","title":"Chromium: CVE-2026-12459 Inappropriate implementation in Serial","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12459"},{"cve":"CVE-2026-12460","month":"2026-06","title":"Chromium: CVE-2026-12460 Insufficient policy enforcement in File System Access","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12460"},{"cve":"CVE-2026-12461","month":"2026-06","title":"Chromium: CVE-2026-12461 Out of bounds read in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12461"},{"cve":"CVE-2026-12462","month":"2026-06","title":"Chromium: CVE-2026-12462 Use after free in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12462"},{"cve":"CVE-2026-12463","month":"2026-06","title":"Chromium: CVE-2026-12463 Inappropriate implementation in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12463"},{"cve":"CVE-2026-12464","month":"2026-06","title":"Chromium: CVE-2026-12464 Use after free in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12464"},{"cve":"CVE-2026-12465","month":"2026-06","title":"Chromium: CVE-2026-12465 Insufficient validation of untrusted input in Metrics","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12465"},{"cve":"CVE-2026-12466","month":"2026-06","title":"Chromium: CVE-2026-12466 Heap buffer overflow in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12466"},{"cve":"CVE-2026-12467","month":"2026-06","title":"Chromium: CVE-2026-12467 Use after free in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12467"},{"cve":"CVE-2026-12468","month":"2026-06","title":"Chromium: CVE-2026-12468 Inappropriate implementation in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12468"},{"cve":"CVE-2026-12469","month":"2026-06","title":"Chromium: CVE-2026-12469 Uninitialized Use in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12469"},{"cve":"CVE-2026-13021","month":"2026-06","title":"Chromium: CVE-2026-13021 Inappropriate implementation in DeviceBoundSessionCredentials","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13021"},{"cve":"CVE-2026-13022","month":"2026-06","title":"Chromium: CVE-2026-13022 Inappropriate implementation in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13022"},{"cve":"CVE-2026-13023","month":"2026-06","title":"Chromium: CVE-2026-13023 Uninitialized Use in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13023"},{"cve":"CVE-2026-13024","month":"2026-06","title":"Chromium: CVE-2026-13024 Insufficient validation of untrusted input in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13024"},{"cve":"CVE-2026-13025","month":"2026-06","title":"Chromium: CVE-2026-13025 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13025"},{"cve":"CVE-2026-13026","month":"2026-06","title":"Chromium: CVE-2026-13026 Use after free in Digital Credentials","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13026"},{"cve":"CVE-2026-13027","month":"2026-06","title":"Chromium: CVE-2026-13027 Use after free in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13027"},{"cve":"CVE-2026-13029","month":"2026-06","title":"Chromium: CVE-2026-13029 Use after free in Web Authentication","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13029"},{"cve":"CVE-2026-13031","month":"2026-06","title":"Chromium: CVE-2026-13031 Use after free in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13031"},{"cve":"CVE-2026-13033","month":"2026-06","title":"Chromium: CVE-2026-13033 Out of bounds read in Blink>InterestGroups","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13033"},{"cve":"CVE-2026-13034","month":"2026-06","title":"Chromium: CVE-2026-13034 Inappropriate implementation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13034"},{"cve":"CVE-2026-13035","month":"2026-06","title":"Chromium: CVE-2026-13035 Use after free in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13035"},{"cve":"CVE-2026-13036","month":"2026-06","title":"Chromium: CVE-2026-13036 Use after free in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13036"},{"cve":"CVE-2026-13038","month":"2026-06","title":"Chromium: CVE-2026-13038 Use after free in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13038"},{"cve":"CVE-2026-26142","month":"2026-06","title":"Nuance PowerScribe Remote Code Execution Vulnerability","family":"Other","component":"Nuance PowerScribe","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26142"},{"cve":"CVE-2026-32174","month":"2026-06","title":"Azure Bot Service Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Bot Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32174"},{"cve":"CVE-2026-32193","month":"2026-06","title":"Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability","family":"Azure","component":"Microsoft Azure Kubernetes Service","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32193"},{"cve":"CVE-2026-32208","month":"2026-06","title":"Microsoft Entra ID Spoofing Vulnerability","family":"Browser","component":"Microsoft Entra ID","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32208"},{"cve":"CVE-2026-33113","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33113"},{"cve":"CVE-2026-33828","month":"2026-06","title":"Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Azure Attestation service and Device Health Attestation Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-501"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33828"},{"cve":"CVE-2026-34335","month":"2026-06","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34335"},{"cve":"CVE-2026-40371","month":"2026-06","title":"Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability","family":"Microsoft Dynamics","component":"Microsoft Dynamics 365 (on-premises)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-280"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40371"},{"cve":"CVE-2026-40376","month":"2026-06","title":"Visual Studio Code Elevation of Privilege Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40376"},{"cve":"CVE-2026-40404","month":"2026-06","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40404"},{"cve":"CVE-2026-40409","month":"2026-06","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40409"},{"cve":"CVE-2026-41092","month":"2026-06","title":"Microsoft Kinect Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Kinect","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41092"},{"cve":"CVE-2026-41098","month":"2026-06","title":"Azure Stack Edge Spoofing Vulnerability","family":"Azure","component":"Azure Stack Edge","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41098"},{"cve":"CVE-2026-41108","month":"2026-06","title":"Windows DNS Client Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41108"},{"cve":"CVE-2026-42824","month":"2026-06","title":"M365 Copilot Information Disclosure Vulnerability","family":"Apps","component":"M365 Copilot","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42824"},{"cve":"CVE-2026-42828","month":"2026-06","title":"Windows Projected File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Projected File System Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42828"},{"cve":"CVE-2026-42829","month":"2026-06","title":"Windows Administrator Protection Secure Feature Bypass Vulnerability","family":"Windows","component":"Windows Administrator Protection","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42829"},{"cve":"CVE-2026-42835","month":"2026-06","title":"Microsoft Teams for Android Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Teams for Android","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-74"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42835"},{"cve":"CVE-2026-42836","month":"2026-06","title":"Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability","family":"Windows","component":"Function Discovery Service (fdwsd.dll)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42836"},{"cve":"CVE-2026-42837","month":"2026-06","title":"Windows Projected File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Projected File System Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42837"},{"cve":"CVE-2026-42895","month":"2026-06","title":"Microsoft Copilot Tampering Vulnerability","family":"Apps","component":"Microsoft Copilot","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Critical","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42895"},{"cve":"CVE-2026-42902","month":"2026-06","title":"Microsoft PowerToys Elevation of Privilege Vulnerability","family":"Apps","component":"Microsoft PowerToys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42902"},{"cve":"CVE-2026-42903","month":"2026-06","title":"Windows Kerberos Denial of Service Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42903"},{"cve":"CVE-2026-42904","month":"2026-06","title":"Windows TCP/IP Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":9.6,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42904"},{"cve":"CVE-2026-42905","month":"2026-06","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42905"},{"cve":"CVE-2026-42906","month":"2026-06","title":"Windows Shell Information Disclosure Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42906"},{"cve":"CVE-2026-42907","month":"2026-06","title":"Windows Shell Information Disclosure Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42907"},{"cve":"CVE-2026-42908","month":"2026-06","title":"Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability","family":"Windows","component":"Windows RDP","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42908"},{"cve":"CVE-2026-42909","month":"2026-06","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42909"},{"cve":"CVE-2026-42910","month":"2026-06","title":"Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hotpatch Monitoring Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42910"},{"cve":"CVE-2026-42911","month":"2026-06","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42911"},{"cve":"CVE-2026-42912","month":"2026-06","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42912"},{"cve":"CVE-2026-42913","month":"2026-06","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42913"},{"cve":"CVE-2026-42914","month":"2026-06","title":"Windows Kerberos Denial of Service Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42914"},{"cve":"CVE-2026-42915","month":"2026-06","title":"Microsoft Windows VMSwitch Denial of Service Vulnerability","family":"Windows","component":"Windows VMSwitch","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-131"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42915"},{"cve":"CVE-2026-42916","month":"2026-06","title":"NT OS Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NT OS Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42916"},{"cve":"CVE-2026-42968","month":"2026-06","title":"Windows Telephony Server Information Disclosure Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42968"},{"cve":"CVE-2026-42969","month":"2026-06","title":"Windows Push Notification Information Disclosure Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42969"},{"cve":"CVE-2026-42970","month":"2026-06","title":"Windows Push Notification Information Disclosure Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42970"},{"cve":"CVE-2026-42971","month":"2026-06","title":"Windows Push Notification Information Disclosure Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42971"},{"cve":"CVE-2026-42972","month":"2026-06","title":"Windows Hyper-V Information Disclosure Vulnerability","family":"Windows","component":"Role: Windows Hyper-V","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42972"},{"cve":"CVE-2026-42973","month":"2026-06","title":"Windows Push Notification Information Disclosure Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42973"},{"cve":"CVE-2026-42974","month":"2026-06","title":"Windows Performance Monitor Remote Code Execution Vulnerability","family":"Windows","component":"Windows Performance Monitor","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42974"},{"cve":"CVE-2026-42977","month":"2026-06","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42977"},{"cve":"CVE-2026-42978","month":"2026-06","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42978"},{"cve":"CVE-2026-42979","month":"2026-06","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42979"},{"cve":"CVE-2026-42980","month":"2026-06","title":"NT OS Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NT OS Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42980"},{"cve":"CVE-2026-42981","month":"2026-06","title":"Windows Performance Monitor Remote Code Execution Vulnerability","family":"Windows","component":"Windows Performance Monitor","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42981"},{"cve":"CVE-2026-42983","month":"2026-06","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42983"},{"cve":"CVE-2026-42984","month":"2026-06","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42984"},{"cve":"CVE-2026-42985","month":"2026-06","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42985"},{"cve":"CVE-2026-42986","month":"2026-06","title":"Microsoft Graphics Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42986"},{"cve":"CVE-2026-42987","month":"2026-06","title":"Windows Deployment Services (WDS) Remote Code Execution","family":"Windows","component":"Windows Deployment Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42987"},{"cve":"CVE-2026-42989","month":"2026-06","title":"Winlogon Elevation of Privilege Vulnerability","family":"Windows","component":"Winlogon","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42989"},{"cve":"CVE-2026-42991","month":"2026-06","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42991"},{"cve":"CVE-2026-42992","month":"2026-06","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42992"},{"cve":"CVE-2026-42993","month":"2026-06","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42993"},{"cve":"CVE-2026-44799","month":"2026-06","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44799"},{"cve":"CVE-2026-44801","month":"2026-06","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44801"},{"cve":"CVE-2026-44802","month":"2026-06","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44802"},{"cve":"CVE-2026-44803","month":"2026-06","title":"Windows Graphics Component Remote Code Execution Vulnerability","family":"Windows","component":"Windows Win32K - GRFX","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44803"},{"cve":"CVE-2026-44804","month":"2026-06","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44804"},{"cve":"CVE-2026-44805","month":"2026-06","title":"Windows Network Controller (NC) Host Agent Denial of Service Vulnerability","family":"Windows","component":"Windows Network Controller (NC) Host Agent","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44805"},{"cve":"CVE-2026-44807","month":"2026-06","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44807"},{"cve":"CVE-2026-44808","month":"2026-06","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44808"},{"cve":"CVE-2026-44809","month":"2026-06","title":"Windows Common Log File System Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Common Log File System Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44809"},{"cve":"CVE-2026-44810","month":"2026-06","title":"Microsoft Cryptographic Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cryptographic Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44810"},{"cve":"CVE-2026-44811","month":"2026-06","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44811"},{"cve":"CVE-2026-44812","month":"2026-06","title":"Windows Graphics Component Remote Code Execution Vulnerability","family":"Windows","component":"Windows Win32K - GRFX","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44812"},{"cve":"CVE-2026-44813","month":"2026-06","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44813"},{"cve":"CVE-2026-44814","month":"2026-06","title":"Windows DWM Core Library Information Disclosure  Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44814"},{"cve":"CVE-2026-44815","month":"2026-06","title":"DHCP Client Service Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44815"},{"cve":"CVE-2026-44817","month":"2026-06","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44817"},{"cve":"CVE-2026-44818","month":"2026-06","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44818"},{"cve":"CVE-2026-44819","month":"2026-06","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44819"},{"cve":"CVE-2026-44820","month":"2026-06","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44820"},{"cve":"CVE-2026-44821","month":"2026-06","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44821"},{"cve":"CVE-2026-44822","month":"2026-06","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44822"},{"cve":"CVE-2026-44823","month":"2026-06","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44823"},{"cve":"CVE-2026-44824","month":"2026-06","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44824"},{"cve":"CVE-2026-45453","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45453"},{"cve":"CVE-2026-45454","month":"2026-06","title":"Microsoft SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45454"},{"cve":"CVE-2026-45455","month":"2026-06","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45455"},{"cve":"CVE-2026-45456","month":"2026-06","title":"Microsoft Outlook and Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45456"},{"cve":"CVE-2026-45457","month":"2026-06","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45457"},{"cve":"CVE-2026-45458","month":"2026-06","title":"Microsoft Outlook and Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45458"},{"cve":"CVE-2026-45459","month":"2026-06","title":"Microsoft Excel Security Feature Bypass Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45459"},{"cve":"CVE-2026-45460","month":"2026-06","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45460"},{"cve":"CVE-2026-45461","month":"2026-06","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45461"},{"cve":"CVE-2026-45462","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45462"},{"cve":"CVE-2026-45463","month":"2026-06","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45463"},{"cve":"CVE-2026-45464","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45464"},{"cve":"CVE-2026-45465","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45465"},{"cve":"CVE-2026-45466","month":"2026-06","title":"Microsoft Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45466"},{"cve":"CVE-2026-45467","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45467"},{"cve":"CVE-2026-45468","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45468"},{"cve":"CVE-2026-45469","month":"2026-06","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45469"},{"cve":"CVE-2026-45471","month":"2026-06","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45471"},{"cve":"CVE-2026-45472","month":"2026-06","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45472"},{"cve":"CVE-2026-45474","month":"2026-06","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45474"},{"cve":"CVE-2026-45475","month":"2026-06","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45475"},{"cve":"CVE-2026-45476","month":"2026-06","title":"Microsoft Azure Network Adapter Elevation of Privilege Vulnerability","family":"Other","component":"Linux MANA Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45476"},{"cve":"CVE-2026-45479","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45479"},{"cve":"CVE-2026-45480","month":"2026-06","title":"Azure Active Directory Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Active Directory","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45480"},{"cve":"CVE-2026-45481","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45481"},{"cve":"CVE-2026-45482","month":"2026-06","title":"Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability","family":"Developer Tools","component":"GitHub Copilot and Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45482"},{"cve":"CVE-2026-45483","month":"2026-06","title":"Microsoft Office Project Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office Project","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45483"},{"cve":"CVE-2026-45484","month":"2026-06","title":"Microsoft SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45484"},{"cve":"CVE-2026-45485","month":"2026-06","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45485"},{"cve":"CVE-2026-45486","month":"2026-06","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45486"},{"cve":"CVE-2026-45487","month":"2026-06","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Program Compatibility Assistant Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45487"},{"cve":"CVE-2026-45490","month":"2026-06","title":".NET SDK Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45490"},{"cve":"CVE-2026-45491","month":"2026-06","title":".NET Tampering Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491"},{"cve":"CVE-2026-45497","month":"2026-06","title":"Microsoft M365 Copilot Remote Code Execution Vulnerability","family":"Apps","component":"Microsoft Copilot","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45497"},{"cve":"CVE-2026-45500","month":"2026-06","title":"Microsoft Exchange Server Spoofing Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45500"},{"cve":"CVE-2026-45501","month":"2026-06","title":"Microsoft Exchange Server Spoofing Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45501"},{"cve":"CVE-2026-45502","month":"2026-06","title":"Microsoft Exchange Server Information Disclosure Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45502"},{"cve":"CVE-2026-45503","month":"2026-06","title":"Microsoft Exchange Server Information Disclosure Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45503"},{"cve":"CVE-2026-45504","month":"2026-06","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45504"},{"cve":"CVE-2026-45583","month":"2026-06","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45583"},{"cve":"CVE-2026-45586","month":"2026-06","title":"Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Collaborative Translation Framework","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":true,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45586"},{"cve":"CVE-2026-45588","month":"2026-06","title":"Secure Boot Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Secure Boot","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45588"},{"cve":"CVE-2026-45591","month":"2026-06","title":"ASP.NET Core Denial of Service Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45591"},{"cve":"CVE-2026-45592","month":"2026-06","title":"Windows Internet (wininet.dll) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Internet (wininet.dll)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45592"},{"cve":"CVE-2026-45593","month":"2026-06","title":"Windows SDK Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SDK","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45593"},{"cve":"CVE-2026-45594","month":"2026-06","title":"Windows Application Identity (AppID) Information Disclosure Vulnerability","family":"Windows","component":"Windows Application Identity (AppID) Subsystem","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45594"},{"cve":"CVE-2026-45595","month":"2026-06","title":"Windows Mark of the Web Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Mark of the Web (MOTW)","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C","cwe":["CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45595"},{"cve":"CVE-2026-45596","month":"2026-06","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45596"},{"cve":"CVE-2026-45597","month":"2026-06","title":"Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability","family":"Windows","component":"UI Automation Manager (uiamanager.dll)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45597"},{"cve":"CVE-2026-45598","month":"2026-06","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45598"},{"cve":"CVE-2026-45599","month":"2026-06","title":"Windows UPnP Device Host Remote Code Execution Vulnerability","family":"Windows","component":"Universal Plug and Play (upnp.dll)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45599"},{"cve":"CVE-2026-45600","month":"2026-06","title":"Windows Kernel-Mode Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel-Mode Drivers","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45600"},{"cve":"CVE-2026-45601","month":"2026-06","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45601"},{"cve":"CVE-2026-45602","month":"2026-06","title":"Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-349"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45602"},{"cve":"CVE-2026-45603","month":"2026-06","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45603"},{"cve":"CVE-2026-45604","month":"2026-06","title":"Windows Managed Installer Information Disclosure Vulnerability","family":"Windows","component":"Windows Application Identity (AppID) Subsystem","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45604"},{"cve":"CVE-2026-45605","month":"2026-06","title":"Windows Bluetooth Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bluetooth Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45605"},{"cve":"CVE-2026-45606","month":"2026-06","title":"Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability","family":"Windows","component":"Microsoft UxTheme Library (uxtheme.dll)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45606"},{"cve":"CVE-2026-45607","month":"2026-06","title":"Windows Hyper-V Remote Code Execution Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45607"},{"cve":"CVE-2026-45608","month":"2026-06","title":"Windows DHCP Client Information Disclosure Vulnerability","family":"Windows","component":"Windows DHCP Client","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45608"},{"cve":"CVE-2026-45634","month":"2026-06","title":"Windows DHCP Client Information Disclosure Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45634"},{"cve":"CVE-2026-45635","month":"2026-06","title":"Windows UPnP Device Host Remote Code Execution Vulnerability","family":"Windows","component":"Universal Plug and Play (upnp.dll)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45635"},{"cve":"CVE-2026-45636","month":"2026-06","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45636"},{"cve":"CVE-2026-45637","month":"2026-06","title":"Microsoft DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45637"},{"cve":"CVE-2026-45638","month":"2026-06","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45638"},{"cve":"CVE-2026-45639","month":"2026-06","title":"Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability","family":"Windows","component":"Windows RDP","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45639"},{"cve":"CVE-2026-45640","month":"2026-06","title":"Windows Bluetooth Port Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bluetooth Port Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45640"},{"cve":"CVE-2026-45641","month":"2026-06","title":"Windows Hyper-V Remote Code Execution Vulnerability","family":"Windows","component":"Role: Windows Hyper-V","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45641"},{"cve":"CVE-2026-45642","month":"2026-06","title":"Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability","family":"Windows","component":"Microsoft Azure Attestation service and Device Health Attestation Service","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":3.9,"vector":"CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45642"},{"cve":"CVE-2026-45643","month":"2026-06","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45643"},{"cve":"CVE-2026-45644","month":"2026-06","title":"Microsoft Live Share Canvas SDK Elevation of Privilege Vulnerability","family":"Developer Tools","component":"Microsoft Live Share Canvas SDK","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45644"},{"cve":"CVE-2026-45645","month":"2026-06","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45645"},{"cve":"CVE-2026-45647","month":"2026-06","title":"Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability","family":"System Center","component":"Microsoft Defender for Endpoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45647"},{"cve":"CVE-2026-45648","month":"2026-06","title":"Windows Active Directory Domain Services Remote Code Execution Vulnerability","family":"Windows","component":"Active Directory Domain Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45648"},{"cve":"CVE-2026-45649","month":"2026-06","title":"Office for Android Spoofing Vulnerability","family":"Microsoft Office","component":"Office for Android","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45649"},{"cve":"CVE-2026-45650","month":"2026-06","title":"Microsoft Bing Search Spoofing Vulnerability","family":"Apps","component":"Microsoft Bing","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45650"},{"cve":"CVE-2026-45653","month":"2026-06","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45653"},{"cve":"CVE-2026-45654","month":"2026-06","title":"Secure Boot Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Secure Boot","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45654"},{"cve":"CVE-2026-45655","month":"2026-06","title":"Windows BitLocker Security Feature Bypass Vulnerability","family":"Windows","component":"Windows BitLocker","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45655"},{"cve":"CVE-2026-45656","month":"2026-06","title":"UEFI Secure Boot Security Feature Bypass Vulnerability","family":"Windows","component":"Windows UEFI","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45656"},{"cve":"CVE-2026-45657","month":"2026-06","title":"Windows Kernel Remote Code Execution Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45657"},{"cve":"CVE-2026-45658","month":"2026-06","title":"Windows BitLocker Security Feature Bypass Vulnerability","family":"Windows","component":"Windows BitLocker","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45658"},{"cve":"CVE-2026-47281","month":"2026-06","title":"Visual Studio Code Elevation of Privilege Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862","CWE-306","CWE-798"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47281"},{"cve":"CVE-2026-47284","month":"2026-06","title":"Visual Studio Code Information Disclosure Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47284"},{"cve":"CVE-2026-47287","month":"2026-06","title":"Visual Studio Code Tampering Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47287"},{"cve":"CVE-2026-47288","month":"2026-06","title":"Windows Kerberos Key Distribution Center (KDC) Remote Code Execution","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47288"},{"cve":"CVE-2026-47289","month":"2026-06","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47289"},{"cve":"CVE-2026-47291","month":"2026-06","title":"HTTP.sys Remote Code Execution Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47291"},{"cve":"CVE-2026-47292","month":"2026-06","title":"Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-829","CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47292"},{"cve":"CVE-2026-47293","month":"2026-06","title":"Microsoft Office Click-To-Run Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office Click-To-Run","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47293"},{"cve":"CVE-2026-47298","month":"2026-06","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47298"},{"cve":"CVE-2026-47631","month":"2026-06","title":"Microsoft Exchange Server Spoofing Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47631"},{"cve":"CVE-2026-47633","month":"2026-06","title":"Microsoft Cost Management Information Disclosure Vulnerability","family":"Azure","component":"Cost Management Interactive Experiences","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47633"},{"cve":"CVE-2026-47634","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-74"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47634"},{"cve":"CVE-2026-47635","month":"2026-06","title":"Microsoft Outlook and Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47635"},{"cve":"CVE-2026-47636","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47636"},{"cve":"CVE-2026-47637","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47637"},{"cve":"CVE-2026-47638","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47638"},{"cve":"CVE-2026-47639","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47639"},{"cve":"CVE-2026-47640","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47640"},{"cve":"CVE-2026-47641","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47641"},{"cve":"CVE-2026-47643","month":"2026-06","title":"Azure Stack Edge Remote Code Execution Vulnerability","family":"Azure","component":"Azure Stack Edge","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47643"},{"cve":"CVE-2026-47644","month":"2026-06","title":"Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability","family":"Browser","component":"Copilot Chat (Microsoft Edge)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-74"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47644"},{"cve":"CVE-2026-47645","month":"2026-06","title":"Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability","family":"Apps","component":"Microsoft 365 Copilot's Business Chat","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-601"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47645"},{"cve":"CVE-2026-47646","month":"2026-06","title":"Dynamics 365 Customer Voice Spoofing Vulnerability","family":"Microsoft Dynamics","component":"Dynamics 365 Customer Voice","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47646"},{"cve":"CVE-2026-47647","month":"2026-06","title":"Dynamics 365 Elevation of Privilege Vulnerability","family":"Other","component":"Microsoft Dynamics 365","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47647"},{"cve":"CVE-2026-47648","month":"2026-06","title":"Windows Storage Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47648"},{"cve":"CVE-2026-47652","month":"2026-06","title":"Windows Hyper-V Remote Code Execution Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47652"},{"cve":"CVE-2026-47653","month":"2026-06","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47653"},{"cve":"CVE-2026-47654","month":"2026-06","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47654"},{"cve":"CVE-2026-47655","month":"2026-06","title":"Microsoft Graph Information Disclosure Vulnerability","family":"Azure","component":"Microsoft Graph","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47655"},{"cve":"CVE-2026-47656","month":"2026-06","title":"Windows Boot Manager Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Boot Manager","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47656"},{"cve":"CVE-2026-48560","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48560"},{"cve":"CVE-2026-48562","month":"2026-06","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48562"},{"cve":"CVE-2026-48563","month":"2026-06","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48563"},{"cve":"CVE-2026-48565","month":"2026-06","title":"Windows Narrator Braille Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Narrator Braille","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48565"},{"cve":"CVE-2026-48566","month":"2026-06","title":"Windows DWM Core Library Information Disclosure  Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48566"},{"cve":"CVE-2026-48567","month":"2026-06","title":"Azure HorizonDB  Elevation of Privilege Vulnerability","family":"Azure","component":"Azure HorizonDB","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-290"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48567"},{"cve":"CVE-2026-48568","month":"2026-06","title":"Secure Boot Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Secure Boot","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48568"},{"cve":"CVE-2026-48569","month":"2026-06","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-20","CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48569"},{"cve":"CVE-2026-48570","month":"2026-06","title":"Secure Boot Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Secure Boot","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C","cwe":["CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48570"},{"cve":"CVE-2026-48573","month":"2026-06","title":"Secure Boot Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Secure Boot","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-1329"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48573"},{"cve":"CVE-2026-48574","month":"2026-06","title":"Windows Media Remote Code Execution Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48574"},{"cve":"CVE-2026-48575","month":"2026-06","title":"Secure Boot Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Secure Boot","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48575"},{"cve":"CVE-2026-48576","month":"2026-06","title":"Secure Boot Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Secure Boot","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-1329"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48576"},{"cve":"CVE-2026-48578","month":"2026-06","title":"Secure Boot Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Secure Boot","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48578"},{"cve":"CVE-2026-48579","month":"2026-06","title":"Microsoft Exchange Online Information Disclosure Vulnerability","family":"Server Software","component":"Microsoft Exchange Online","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48579"},{"cve":"CVE-2026-48582","month":"2026-06","title":"Microsoft Exchange Online Elevation of Privilege Vulnerability","family":"Server Software","component":"Microsoft Exchange Online","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48582"},{"cve":"CVE-2026-48583","month":"2026-06","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48583"},{"cve":"CVE-2026-48584","month":"2026-06","title":"Microsoft Azure Synapse Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Synapse","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-250"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48584"},{"cve":"CVE-2026-49160","month":"2026-06","title":"HTTP.sys Denial of Service Vulnerability","family":"Windows","component":"HTTP/2","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-400"],"exploited":false,"disclosed":true,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49160"},{"cve":"CVE-2026-49161","month":"2026-06","title":"Microsoft PC Manager Security Feature Bypass Vulnerability","family":"Apps","component":"Window PC Manager","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49161"},{"cve":"CVE-2026-50507","month":"2026-06","title":"Windows BitLocker Security Feature Bypass Vulnerability","family":"Windows","component":"Windows BitLocker","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":true,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50507"},{"cve":"CVE-2026-50508","month":"2026-06","title":"Windows NTLM Spoofing Vulnerability","family":"Windows","component":"Windows NTLM","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50508"},{"cve":"CVE-2026-50511","month":"2026-06","title":"Microsoft PC Manager Elevation of Privilege Vulnerability","family":"Apps","component":"Window PC Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50511"},{"cve":"CVE-2026-50512","month":"2026-06","title":"Microsoft PC Manager Elevation of Privilege Vulnerability","family":"Apps","component":"Window PC Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50512"},{"cve":"CVE-2026-50519","month":"2026-06","title":"Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability","family":"Other","component":"GitHub Copilot and Visual Studio Code","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-1188"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50519"},{"cve":"CVE-2026-50521","month":"2026-06","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50521"},{"cve":"CVE-2026-50656","month":"2026-06","title":"Microsoft Defender Elevation of Privilege Vulnerability","family":"System Center","component":"Microsoft Defender","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":true,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50656"},{"cve":"CVE-2026-54130","month":"2026-06","title":"M365 Copilot Information Disclosure Vulnerability","family":"Apps","component":"M365 Copilot","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54130"},{"cve":"CVE-2026-8863","month":"2026-06","title":"UEFI Secure Boot Security Feature Bypass Vulnerability","family":"Windows","component":"Windows UEFI","cna":"CERT/CC","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1329"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8863"},{"cve":"CVE-2026-58050","month":"2026-06","title":"libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58050"},{"cve":"CVE-2026-35188","month":"2026-06","title":"Double-free When Checking OCSP Stapled Response","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35188"},{"cve":"CVE-2026-42765","month":"2026-06","title":"NULL Dereference in Certificate Verification with OCSP Checking","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42765"},{"cve":"CVE-2026-46669","month":"2026-06","title":"`openvm-pairing` pairing check missing proper subfield check on scaling factor","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46669"},{"cve":"CVE-2026-34182","month":"2026-06","title":"CMS AuthEnvelopedData Processing May Accept Forged Messages","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-354"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34182"},{"cve":"CVE-2026-10722","month":"2026-06","title":"cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10722"},{"cve":"CVE-2026-40930","month":"2026-06","title":"LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","cwe":["CWE-436"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40930"},{"cve":"CVE-2026-46285","month":"2026-06","title":"mtd: docg3: fix use-after-free in docg3_release()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46285"},{"cve":"CVE-2026-46301","month":"2026-06","title":"spi: topcliff-pch: fix use-after-free on unbind","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46301"},{"cve":"CVE-2026-46643","month":"2026-06","title":"Snappy: Binary path is never shell-escaped due to an inverted is_executable check","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46643"},{"cve":"CVE-2026-48854","month":"2026-06","title":"Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48854"},{"cve":"CVE-2026-49356","month":"2026-06","title":"Babel: Arbitrary File Read via sourceMappingURL Comment in @babel/core","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":3.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49356"},{"cve":"CVE-2026-53043","month":"2026-06","title":"ocfs2/dlm: validate qr_numregions in dlm_match_regions()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53043"},{"cve":"CVE-2026-53159","month":"2026-06","title":"misc: fastrpc: fix DMA address corruption due to find_vma misuse","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53159"},{"cve":"CVE-2026-53065","month":"2026-06","title":"ASoC: sti: use managed regmap_field allocations","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53065"},{"cve":"CVE-2026-53194","month":"2026-06","title":"USB: serial: kl5kusb105: fix bulk-out buffer overflow","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53194"},{"cve":"CVE-2026-53161","month":"2026-06","title":"misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53161"},{"cve":"CVE-2026-53158","month":"2026-06","title":"misc: fastrpc: Fix NULL pointer dereference in rpmsg callback","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53158"},{"cve":"CVE-2026-52911","month":"2026-06","title":"ksmbd: scope conn->binding slowpath to bound sessions only","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52911"},{"cve":"CVE-2026-52996","month":"2026-06","title":"ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52996"},{"cve":"CVE-2026-53049","month":"2026-06","title":"gfs2: add some missing log locking","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53049"},{"cve":"CVE-2026-53045","month":"2026-06","title":"memory: tegra124-emc: Fix dll_change check","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53045"},{"cve":"CVE-2026-53039","month":"2026-06","title":"ocfs2: validate group add input before caching","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53039"},{"cve":"CVE-2026-53041","month":"2026-06","title":"ocfs2: fix listxattr handling when the buffer is full","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53041"},{"cve":"CVE-2026-53217","month":"2026-06","title":"net: mvpp2: sync RX data at the hardware packet offset","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53217"},{"cve":"CVE-2026-53046","month":"2026-06","title":"ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53046"},{"cve":"CVE-2026-53048","month":"2026-06","title":"gfs2: prevent NULL pointer dereference during unmount","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53048"},{"cve":"CVE-2026-53247","month":"2026-06","title":"net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53247"},{"cve":"CVE-2026-56123","month":"2026-06","title":"socat 1.8.0.0 - 1.8.1.1 Heap Buffer Overflow via SOCKS5 Reply Parser","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56123"},{"cve":"CVE-2026-53196","month":"2026-06","title":"USB: serial: io_ti: fix heap overflow in get_manuf_info()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53196"},{"cve":"CVE-2026-53215","month":"2026-06","title":"net: mvpp2: refill RX buffers before XDP or skb use","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53215"},{"cve":"CVE-2026-48779","month":"2026-06","title":"ws: Memory exhaustion DoS from tiny fragments and data chunks","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48779"},{"cve":"CVE-2026-57918","month":"2026-06","title":"libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in rpc_read_from_socket in lib/socket.c during a connection to a crafted NFS server, when the expected pdu size exceeds the absolute pdu size from the xid/record-marker.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57918"},{"cve":"CVE-2026-6291","month":"2026-06","title":"Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-208"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6291"},{"cve":"CVE-2026-7532","month":"2026-06","title":"iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7532"},{"cve":"CVE-2026-6450","month":"2026-06","title":"CRL critical extension bypass in ParseCRL_Extensions","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6450"},{"cve":"CVE-2026-55960","month":"2026-06","title":"Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55960"},{"cve":"CVE-2026-55964","month":"2026-06","title":"Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption)","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55964"},{"cve":"CVE-2026-6329","month":"2026-06","title":"PKCS#12 MAC verification uses attacker-controlled comparison length","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6329"},{"cve":"CVE-2026-55961","month":"2026-06","title":"wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55961"},{"cve":"CVE-2026-6678","month":"2026-06","title":"Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6678"},{"cve":"CVE-2026-6094","month":"2026-06","title":"Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6094"},{"cve":"CVE-2026-6331","month":"2026-06","title":"HMAC zero-length tag forgery in EVP_DigestVerifyFinal","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6331"},{"cve":"CVE-2026-6330","month":"2026-06","title":"ML-KEM ARM64 NEON ciphertext comparison only compares half of the input","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-327"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6330"},{"cve":"CVE-2026-6731","month":"2026-06","title":"X.509 name constraint bypass via Subject CN treated as a DNS name","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6731"},{"cve":"CVE-2026-55958","month":"2026-06","title":"Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55958"},{"cve":"CVE-2026-6325","month":"2026-06","title":"Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6325"},{"cve":"CVE-2026-10592","month":"2026-06","title":"Wildcard DNS SAN bypasses CA name-constraint checks","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10592"},{"cve":"CVE-2026-10512","month":"2026-06","title":"X25519 x86_64 assembly final reduction leaves non-canonical field element","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-682"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10512"},{"cve":"CVE-2026-8720","month":"2026-06","title":"HMAC-BLAKE2 final discards message when key length exceeds block size","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-354"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8720"},{"cve":"CVE-2026-10098","month":"2026-06","title":"OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10098"},{"cve":"CVE-2026-10097","month":"2026-06","title":"ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-697"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10097"},{"cve":"CVE-2026-11310","month":"2026-06","title":"X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11310"},{"cve":"CVE-2026-46272","month":"2026-06","title":"coresight: tmc-etr: Fix race condition between sysfs and perf mode","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46272"},{"cve":"CVE-2026-37460","month":"2026-06","title":"Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-37460"},{"cve":"CVE-2026-50265","month":"2026-06","title":"Rejected reason: This CVE ID was assigned as a duplicate of CVE-2026-50292","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50265"},{"cve":"CVE-2026-46293","month":"2026-06","title":"clk: microchip: mpfs-ccc: fix out of bounds access during output registration","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46293"},{"cve":"CVE-2026-46683","month":"2026-06","title":"Snappy: SSRF and local file read via the xsl-style-sheet option","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46683"},{"cve":"CVE-2026-44705","month":"2026-06","title":"tmp: Path Traversal via unsanitized prefix/postfix enables directory escape","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44705"},{"cve":"CVE-2026-11526","month":"2026-06","title":"GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11526"},{"cve":"CVE-2026-54411","month":"2026-06","title":"Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences. The comparison uses strncmp() (or strncasecmp() when PAM_ICASE_ARG is set) preceded by a length-equality check, so the time to reject a candidate depends on the index of the first differing byte and on whether the candidate's length matches the stored password, leaking the password length and individual prefix bytes. The vulnerable path is reached when the administrator configures pam_userdb with crypt=none, with an unrecognized crypt method, or without a crypt= argument, causing the module to store and compare credentials in plaintext.","family":"Other","component":"Mariner","cna":"TuranSec","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-208"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54411"},{"cve":"CVE-2026-12143","month":"2026-06","title":"form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)","family":"Other","component":"Mariner","cna":"harborist","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-93"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12143"},{"cve":"CVE-2026-11816","month":"2026-06","title":"Path Traversal in keras-team/keras","family":"Other","component":"Mariner","cna":"@huntr_ai","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11816"},{"cve":"CVE-2026-53195","month":"2026-06","title":"USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53195"},{"cve":"CVE-2026-52913","month":"2026-06","title":"batman-adv: v: stop OGMv2 on disabled interface","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52913"},{"cve":"CVE-2026-47241","month":"2026-06","title":"Net::IMAP: Denial of Service via incomplete raw argument validation","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-162"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47241"},{"cve":"CVE-2026-53052","month":"2026-06","title":"ASoC: qcom: qdsp6: topology: check widget type before accessing data","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53052"},{"cve":"CVE-2026-53098","month":"2026-06","title":"wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53098"},{"cve":"CVE-2026-52992","month":"2026-06","title":"fs/adfs: validate nzones in adfs_validate_bblk()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52992"},{"cve":"CVE-2026-53160","month":"2026-06","title":"misc: fastrpc: fix use-after-free race in fastrpc_map_create","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53160"},{"cve":"CVE-2026-53130","month":"2026-06","title":"fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53130"},{"cve":"CVE-2026-52964","month":"2026-06","title":"ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52964"},{"cve":"CVE-2026-53016","month":"2026-06","title":"crypto: ccp - copy IV using skcipher ivsize","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53016"},{"cve":"CVE-2026-52935","month":"2026-06","title":"xfrm: espintcp: do not reuse an in-progress partial send","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52935"},{"cve":"CVE-2026-52944","month":"2026-06","title":"ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52944"},{"cve":"CVE-2026-53320","month":"2026-06","title":"nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53320"},{"cve":"CVE-2026-53296","month":"2026-06","title":"mailbox: mailbox-test: free channels on probe error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53296"},{"cve":"CVE-2026-53309","month":"2026-06","title":"ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53309"},{"cve":"CVE-2026-53306","month":"2026-06","title":"tty: hvc_iucv: fix off-by-one in number of supported devices","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53306"},{"cve":"CVE-2026-53294","month":"2026-06","title":"mailbox: mailbox-test: don't free the reused channel","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53294"},{"cve":"CVE-2026-53303","month":"2026-06","title":"f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53303"},{"cve":"CVE-2026-53279","month":"2026-06","title":"drm/gma500/oaktrail_lvds: fix hang on init failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53279"},{"cve":"CVE-2026-53655","month":"2026-06","title":"node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cwe":["CWE-436"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53655"},{"cve":"CVE-2026-58055","month":"2026-06","title":"nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58055"},{"cve":"CVE-2026-11979","month":"2026-06","title":"Stack-Based Buffer Overflow in libxml2","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11979"},{"cve":"CVE-2026-57231","month":"2026-06","title":"Podman: Malformed Image can trick podman run into leaking host environment variables into the container","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57231"},{"cve":"CVE-2026-11703","month":"2026-06","title":"Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11703"},{"cve":"CVE-2026-55967","month":"2026-06","title":"AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-323"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55967"},{"cve":"CVE-2026-55962","month":"2026-06","title":"TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55962"},{"cve":"CVE-2026-11999","month":"2026-06","title":"X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert()","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11999"},{"cve":"CVE-2026-7511","month":"2026-06","title":"PKCS7_verify signer confusion allows forged signatures to be accepted","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7511"},{"cve":"CVE-2026-6091","month":"2026-06","title":"Partial-chain verification accepts untrusted intermediate as trust anchor","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6091"},{"cve":"CVE-2026-12340","month":"2026-06","title":"Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12340"},{"cve":"CVE-2026-6092","month":"2026-06","title":"Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-757"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6092"},{"cve":"CVE-2026-6412","month":"2026-06","title":"Continued acceptance of SHA-1/MD5 digests in certificate processing","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-327"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6412"},{"cve":"CVE-2026-7531","month":"2026-06","title":"Use-after-free in PQC hybrid key-share handling","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7531"},{"cve":"CVE-2026-13028","month":"2026-07","title":"Chromium: CVE-2026-13028 Use after free in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13028"},{"cve":"CVE-2026-13030","month":"2026-07","title":"Chromium: CVE-2026-13030 Uninitialized Use in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13030"},{"cve":"CVE-2026-13032","month":"2026-07","title":"Chromium: CVE-2026-13032 Use after free in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13032"},{"cve":"CVE-2026-13037","month":"2026-07","title":"Chromium: CVE-2026-13037 Use after free in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13037"},{"cve":"CVE-2026-13282","month":"2026-07","title":"Chromium: CVE-2026-13282 Use after free in AdFilter","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13282"},{"cve":"CVE-2026-13283","month":"2026-07","title":"Chromium: CVE-2026-13282: Use after free in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13283"},{"cve":"CVE-2026-13774","month":"2026-07","title":"Chromium: CVE-2026-13774 Use after free in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13774"},{"cve":"CVE-2026-13775","month":"2026-07","title":"Chromium: CVE-2026-13775 Use after free in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13775"},{"cve":"CVE-2026-13776","month":"2026-07","title":"Chromium: CVE-2026-13776 Type Confusion in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13776"},{"cve":"CVE-2026-13777","month":"2026-07","title":"Chromium: CVE-2026-13777 Insufficient validation of untrusted input in iOSWeb","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13777"},{"cve":"CVE-2026-13778","month":"2026-07","title":"Chromium: CVE-2026-13778 Use after free in WebUSB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13778"},{"cve":"CVE-2026-13779","month":"2026-07","title":"Chromium: CVE-2026-13779 Use after free in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13779"},{"cve":"CVE-2026-13780","month":"2026-07","title":"Chromium: CVE-2026-13780 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13780"},{"cve":"CVE-2026-13781","month":"2026-07","title":"Chromium: CVE-2026-13781 Insufficient validation of untrusted input in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13781"},{"cve":"CVE-2026-13782","month":"2026-07","title":"Chromium: CVE-2026-13782 Use after free in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13782"},{"cve":"CVE-2026-13783","month":"2026-07","title":"Chromium: CVE-2026-13783 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13783"},{"cve":"CVE-2026-13784","month":"2026-07","title":"Chromium: CVE-2026-13784 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13784"},{"cve":"CVE-2026-13785","month":"2026-07","title":"Chromium: CVE-2026-13785 Use after free in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13785"},{"cve":"CVE-2026-13786","month":"2026-07","title":"Chromium: CVE-2026-13786 Use after free in Ozone","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13786"},{"cve":"CVE-2026-13787","month":"2026-07","title":"Chromium: CVE-2026-13787 Use after free in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13787"},{"cve":"CVE-2026-13788","month":"2026-07","title":"Chromium: CVE-2026-13788 Use after free in Fullscreen","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13788"},{"cve":"CVE-2026-13790","month":"2026-07","title":"Chromium: CVE-2026-13790 Side-channel information leakage in Scroll","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13790"},{"cve":"CVE-2026-13791","month":"2026-07","title":"Chromium: CVE-2026-13791 Insufficient validation of untrusted input in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13791"},{"cve":"CVE-2026-13792","month":"2026-07","title":"Chromium: CVE-2026-13792 Use after free in Touchbar","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13792"},{"cve":"CVE-2026-13793","month":"2026-07","title":"Chromium: CVE-2026-13793 Insufficient policy enforcement in SVG","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13793"},{"cve":"CVE-2026-13794","month":"2026-07","title":"Chromium: CVE-2026-13794 Insufficient validation of untrusted input in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13794"},{"cve":"CVE-2026-13795","month":"2026-07","title":"Chromium: CVE-2026-13795 Insufficient policy enforcement in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13795"},{"cve":"CVE-2026-13796","month":"2026-07","title":"Chromium: CVE-2026-13796 Integer overflow in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13796"},{"cve":"CVE-2026-13797","month":"2026-07","title":"Chromium: CVE-2026-13797 Insufficient validation of untrusted input in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13797"},{"cve":"CVE-2026-13798","month":"2026-07","title":"Chromium: CVE-2026-13798 Heap buffer overflow in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13798"},{"cve":"CVE-2026-13799","month":"2026-07","title":"Chromium: CVE-2026-13799 Use after free in QUIC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13799"},{"cve":"CVE-2026-13800","month":"2026-07","title":"Chromium: CVE-2026-13800 Inappropriate implementation in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13800"},{"cve":"CVE-2026-13801","month":"2026-07","title":"Chromium: CVE-2026-13801 Integer overflow in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13801"},{"cve":"CVE-2026-13802","month":"2026-07","title":"Chromium: CVE-2026-13802 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13802"},{"cve":"CVE-2026-13803","month":"2026-07","title":"Chromium: CVE-2026-13803 Type Confusion in Chrome Tabs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13803"},{"cve":"CVE-2026-13804","month":"2026-07","title":"Chromium: CVE-2026-13804 Use after free in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13804"},{"cve":"CVE-2026-13805","month":"2026-07","title":"Chromium: CVE-2026-13805 Use after free in GFX","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13805"},{"cve":"CVE-2026-13806","month":"2026-07","title":"Chromium: CVE-2026-13806 Insufficient validation of untrusted input in Accessibility","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13806"},{"cve":"CVE-2026-13807","month":"2026-07","title":"Chromium: CVE-2026-13807 Use after free in Import","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13807"},{"cve":"CVE-2026-13808","month":"2026-07","title":"Chromium: CVE-2026-13808 Insufficient data validation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13808"},{"cve":"CVE-2026-13809","month":"2026-07","title":"Chromium: CVE-2026-13809 Side-channel information leakage in Safe Browsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13809"},{"cve":"CVE-2026-13810","month":"2026-07","title":"Chromium: CVE-2026-13810 Inappropriate implementation in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13810"},{"cve":"CVE-2026-13811","month":"2026-07","title":"Chromium: CVE-2026-13811 Use after free in IME","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13811"},{"cve":"CVE-2026-13812","month":"2026-07","title":"Chromium: CVE-2026-13812 Insufficient validation of untrusted input in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13812"},{"cve":"CVE-2026-13813","month":"2026-07","title":"Chromium: CVE-2026-13813 Insufficient validation of untrusted input in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13813"},{"cve":"CVE-2026-13814","month":"2026-07","title":"Chromium: CVE-2026-13814 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13814"},{"cve":"CVE-2026-13815","month":"2026-07","title":"Chromium: CVE-2026-13815 Use after free in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13815"},{"cve":"CVE-2026-13816","month":"2026-07","title":"Chromium: CVE-2026-13816 Insufficient validation of untrusted input in File Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13816"},{"cve":"CVE-2026-13817","month":"2026-07","title":"Chromium: CVE-2026-13817 Insufficient validation of untrusted input in Glic","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13817"},{"cve":"CVE-2026-13818","month":"2026-07","title":"Chromium: CVE-2026-13818 Inappropriate implementation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13818"},{"cve":"CVE-2026-13819","month":"2026-07","title":"Chromium: CVE-2026-13819 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13819"},{"cve":"CVE-2026-13820","month":"2026-07","title":"Chromium: CVE-2026-13820 Out of bounds read in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13820"},{"cve":"CVE-2026-13821","month":"2026-07","title":"Chromium: CVE-2026-13821 Use after free in Canvas","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13821"},{"cve":"CVE-2026-13822","month":"2026-07","title":"Chromium: CVE-2026-13822 Inappropriate implementation in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13822"},{"cve":"CVE-2026-13823","month":"2026-07","title":"Chromium: CVE-2026-13823 Use after free in Glic","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13823"},{"cve":"CVE-2026-13824","month":"2026-07","title":"Chromium: CVE-2026-13824 Insufficient validation of untrusted input in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13824"},{"cve":"CVE-2026-13825","month":"2026-07","title":"Chromium: CVE-2026-13825 Uninitialized Use in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13825"},{"cve":"CVE-2026-13826","month":"2026-07","title":"Chromium: CVE-2026-13826 Inappropriate implementation in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13826"},{"cve":"CVE-2026-13827","month":"2026-07","title":"Chromium: CVE-2026-13827 Use after free in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13827"},{"cve":"CVE-2026-13828","month":"2026-07","title":"Chromium: CVE-2026-13828 Inappropriate implementation in Enterprise","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13828"},{"cve":"CVE-2026-13829","month":"2026-07","title":"Chromium: CVE-2026-13829 Insufficient validation of untrusted input in Settings","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13829"},{"cve":"CVE-2026-13830","month":"2026-07","title":"Chromium: CVE-2026-13830 Use after free in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13830"},{"cve":"CVE-2026-13831","month":"2026-07","title":"Chromium: CVE-2026-13831 Use after free in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13831"},{"cve":"CVE-2026-13832","month":"2026-07","title":"Chromium: CVE-2026-13832 Use after free in Headless","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13832"},{"cve":"CVE-2026-13833","month":"2026-07","title":"Chromium: CVE-2026-13833 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13833"},{"cve":"CVE-2026-13834","month":"2026-07","title":"Chromium: CVE-2026-13834 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13834"},{"cve":"CVE-2026-13835","month":"2026-07","title":"Chromium: CVE-2026-13835 Inappropriate implementation in XML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13835"},{"cve":"CVE-2026-13836","month":"2026-07","title":"Chromium: CVE-2026-13836 Inappropriate implementation in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13836"},{"cve":"CVE-2026-13837","month":"2026-07","title":"Chromium: CVE-2026-13837 Inappropriate implementation in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13837"},{"cve":"CVE-2026-13838","month":"2026-07","title":"Chromium: CVE-2026-13838 Inappropriate implementation in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13838"},{"cve":"CVE-2026-13839","month":"2026-07","title":"Chromium: CVE-2026-13839 Inappropriate implementation in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13839"},{"cve":"CVE-2026-13840","month":"2026-07","title":"Chromium: CVE-2026-13840 Insufficient policy enforcement in Canvas","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13840"},{"cve":"CVE-2026-13841","month":"2026-07","title":"Chromium: CVE-2026-13841 Integer overflow in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13841"},{"cve":"CVE-2026-13842","month":"2026-07","title":"Chromium: CVE-2026-13842 Incorrect security UI in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13842"},{"cve":"CVE-2026-13843","month":"2026-07","title":"Chromium: CVE-2026-13843 Insufficient validation of untrusted input in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13843"},{"cve":"CVE-2026-13844","month":"2026-07","title":"Chromium: CVE-2026-13844 Use after free in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13844"},{"cve":"CVE-2026-13845","month":"2026-07","title":"Chromium: CVE-2026-13845 Use after free in DOM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13845"},{"cve":"CVE-2026-13846","month":"2026-07","title":"Chromium: CVE-2026-13846 Use after free in USB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13846"},{"cve":"CVE-2026-13847","month":"2026-07","title":"Chromium: CVE-2026-13847 Insufficient validation of untrusted input in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13847"},{"cve":"CVE-2026-13848","month":"2026-07","title":"Chromium: CVE-2026-13848 Use after free in Forms","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13848"},{"cve":"CVE-2026-13849","month":"2026-07","title":"Chromium: CVE-2026-13849 Insufficient validation of untrusted input in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13849"},{"cve":"CVE-2026-13850","month":"2026-07","title":"Chromium: CVE-2026-13850 Insufficient validation of untrusted input in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13850"},{"cve":"CVE-2026-13851","month":"2026-07","title":"Chromium: CVE-2026-13851 Insufficient validation of untrusted input in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13851"},{"cve":"CVE-2026-13852","month":"2026-07","title":"Chromium: CVE-2026-13852 Insufficient validation of untrusted input in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13852"},{"cve":"CVE-2026-13853","month":"2026-07","title":"Chromium: CVE-2026-13853 Use after free in Journeys","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13853"},{"cve":"CVE-2026-13854","month":"2026-07","title":"Chromium: CVE-2026-13854 Use after free in Ozone","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13854"},{"cve":"CVE-2026-13855","month":"2026-07","title":"Chromium: CVE-2026-13855 Use after free in Ozone","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13855"},{"cve":"CVE-2026-13856","month":"2026-07","title":"Chromium: CVE-2026-13856 Insufficient validation of untrusted input in Speech","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13856"},{"cve":"CVE-2026-13857","month":"2026-07","title":"Chromium: CVE-2026-13857 Inappropriate implementation in Geometry","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13857"},{"cve":"CVE-2026-13858","month":"2026-07","title":"Chromium: CVE-2026-13858 Out of bounds read in FFmpeg","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13858"},{"cve":"CVE-2026-13859","month":"2026-07","title":"Chromium: CVE-2026-13859 Inappropriate implementation in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13859"},{"cve":"CVE-2026-13860","month":"2026-07","title":"Chromium: CVE-2026-13860 Incorrect security UI in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13860"},{"cve":"CVE-2026-13861","month":"2026-07","title":"Chromium: CVE-2026-13861 Use after free in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13861"},{"cve":"CVE-2026-13862","month":"2026-07","title":"CVE-2026-13862","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13862"},{"cve":"CVE-2026-13863","month":"2026-07","title":"Chromium: CVE-2026-13863 Insufficient validation of untrusted input in CustomTabs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13863"},{"cve":"CVE-2026-13864","month":"2026-07","title":"Chromium: CVE-2026-13864 Insufficient policy enforcement in WebHID","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13864"},{"cve":"CVE-2026-13865","month":"2026-07","title":"Chromium: CVE-2026-13865 Insufficient validation of untrusted input in Enterprise","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13865"},{"cve":"CVE-2026-13866","month":"2026-07","title":"Chromium: CVE-2026-13866 Insufficient validation of untrusted input in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13866"},{"cve":"CVE-2026-13867","month":"2026-07","title":"Chromium: CVE-2026-13867 Inappropriate implementation in Geolocation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13867"},{"cve":"CVE-2026-13868","month":"2026-07","title":"Chromium: CVE-2026-13868 Inappropriate implementation in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13868"},{"cve":"CVE-2026-13869","month":"2026-07","title":"Chromium: CVE-2026-13869 Use after free in Device","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13869"},{"cve":"CVE-2026-13870","month":"2026-07","title":"Chromium: CVE-2026-13870 Use after free in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13870"},{"cve":"CVE-2026-13871","month":"2026-07","title":"Chromium: CVE-2026-13871 Insufficient data validation in GuestView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13871"},{"cve":"CVE-2026-13872","month":"2026-07","title":"Chromium: CVE-2026-13872 Insufficient validation of untrusted input in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13872"},{"cve":"CVE-2026-13873","month":"2026-07","title":"Chromium: CVE-2026-13873 Out of bounds memory access in Layout","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13873"},{"cve":"CVE-2026-13874","month":"2026-07","title":"Chromium: CVE-2026-13874 Inappropriate implementation in DataTransfer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13874"},{"cve":"CVE-2026-13875","month":"2026-07","title":"Chromium: CVE-2026-13875 Insufficient validation of untrusted input in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13875"},{"cve":"CVE-2026-13876","month":"2026-07","title":"Chromium: CVE-2026-13876 Inappropriate implementation in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13876"},{"cve":"CVE-2026-13877","month":"2026-07","title":"Chromium: CVE-2026-13877 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13877"},{"cve":"CVE-2026-13878","month":"2026-07","title":"Chromium: CVE-2026-13878 Use after free in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13878"},{"cve":"CVE-2026-13879","month":"2026-07","title":"Chromium: CVE-2026-13879 Use after free in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13879"},{"cve":"CVE-2026-13880","month":"2026-07","title":"Chromium: CVE-2026-13880 Use after free in USB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13880"},{"cve":"CVE-2026-13881","month":"2026-07","title":"Chromium: CVE-2026-13881 Insufficient data validation in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13881"},{"cve":"CVE-2026-13882","month":"2026-07","title":"Chromium: CVE-2026-13882 Inappropriate implementation in USB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13882"},{"cve":"CVE-2026-13883","month":"2026-07","title":"Chromium: CVE-2026-13883 Type Confusion in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13883"},{"cve":"CVE-2026-13884","month":"2026-07","title":"Chromium: CVE-2026-13884 Heap buffer overflow in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13884"},{"cve":"CVE-2026-13885","month":"2026-07","title":"Chromium: CVE-2026-13885 Use after free in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13885"},{"cve":"CVE-2026-13886","month":"2026-07","title":"Chromium: CVE-2026-13886 Policy bypass in Isolated Web Apps","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13886"},{"cve":"CVE-2026-13887","month":"2026-07","title":"Chromium: CVE-2026-13887 Insufficient policy enforcement in NFC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13887"},{"cve":"CVE-2026-13888","month":"2026-07","title":"Chromium: CVE-2026-13888 Use after free in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13888"},{"cve":"CVE-2026-13889","month":"2026-07","title":"Chromium: CVE-2026-13889 Insufficient validation of untrusted input in WebAuthentication","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13889"},{"cve":"CVE-2026-13890","month":"2026-07","title":"Chromium: CVE-2026-13890 Out of bounds read in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13890"},{"cve":"CVE-2026-13891","month":"2026-07","title":"Chromium: CVE-2026-13891 Insufficient validation of untrusted input in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13891"},{"cve":"CVE-2026-13892","month":"2026-07","title":"Chromium: CVE-2026-13892 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13892"},{"cve":"CVE-2026-13893","month":"2026-07","title":"Chromium: CVE-2026-13893 Insufficient validation of untrusted input in WebUI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13893"},{"cve":"CVE-2026-13894","month":"2026-07","title":"Chromium: CVE-2026-13894 Insufficient policy enforcement in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13894"},{"cve":"CVE-2026-13895","month":"2026-07","title":"Chromium: CVE-2026-13895 Inappropriate implementation in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13895"},{"cve":"CVE-2026-13896","month":"2026-07","title":"Chromium: CVE-2026-13896 Insufficient policy enforcement in Glic","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13896"},{"cve":"CVE-2026-13897","month":"2026-07","title":"Chromium: CVE-2026-13897 Insufficient policy enforcement in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13897"},{"cve":"CVE-2026-13898","month":"2026-07","title":"Chromium: CVE-2026-13898 Use after free in Cast Receiver","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13898"},{"cve":"CVE-2026-13899","month":"2026-07","title":"Chromium: CVE-2026-13899 Use after free in HTML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13899"},{"cve":"CVE-2026-13900","month":"2026-07","title":"Chromium: CVE-2026-13900 Insufficient validation of untrusted input in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13900"},{"cve":"CVE-2026-13901","month":"2026-07","title":"Chromium: CVE-2026-13901 Insufficient validation of untrusted input in Serial","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13901"},{"cve":"CVE-2026-13902","month":"2026-07","title":"Chromium: CVE-2026-13902 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13902"},{"cve":"CVE-2026-13903","month":"2026-07","title":"Chromium: CVE-2026-13903 Insufficient policy enforcement in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13903"},{"cve":"CVE-2026-13904","month":"2026-07","title":"Chromium: CVE-2026-13904 Incorrect security UI in Safe Browsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13904"},{"cve":"CVE-2026-13905","month":"2026-07","title":"Chromium: CVE-2026-13905 Incorrect security UI in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13905"},{"cve":"CVE-2026-13906","month":"2026-07","title":"Chromium: CVE-2026-13906 Out of bounds read in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13906"},{"cve":"CVE-2026-13907","month":"2026-07","title":"Chromium: CVE-2026-13907 Inappropriate implementation in iOSWeb","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13907"},{"cve":"CVE-2026-13908","month":"2026-07","title":"Chromium: CVE-2026-13908 Insufficient validation of untrusted input in Omnibox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13908"},{"cve":"CVE-2026-13909","month":"2026-07","title":"Chromium: CVE-2026-13909 Insufficient policy enforcement in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13909"},{"cve":"CVE-2026-13910","month":"2026-07","title":"Chromium: CVE-2026-13910 Insufficient policy enforcement in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13910"},{"cve":"CVE-2026-13911","month":"2026-07","title":"Chromium: CVE-2026-13911 Insufficient data validation in Spellcheck","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13911"},{"cve":"CVE-2026-13912","month":"2026-07","title":"Chromium: CVE-2026-13912 Incorrect security UI in Safe Browsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13912"},{"cve":"CVE-2026-13913","month":"2026-07","title":"Chromium: CVE-2026-13913 Insufficient policy enforcement in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13913"},{"cve":"CVE-2026-13914","month":"2026-07","title":"Chromium: CVE-2026-13914 Inappropriate implementation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13914"},{"cve":"CVE-2026-13915","month":"2026-07","title":"Chromium: CVE-2026-13915 Use after free in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13915"},{"cve":"CVE-2026-13916","month":"2026-07","title":"Chromium: CVE-2026-13916 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13916"},{"cve":"CVE-2026-13917","month":"2026-07","title":"Chromium: CVE-2026-13917 Insufficient validation of untrusted input in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13917"},{"cve":"CVE-2026-13918","month":"2026-07","title":"Chromium: CVE-2026-13918 Use after free in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13918"},{"cve":"CVE-2026-13919","month":"2026-07","title":"Chromium: CVE-2026-13919 Insufficient data validation in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13919"},{"cve":"CVE-2026-13920","month":"2026-07","title":"Chromium: CVE-2026-13920 Insufficient validation of untrusted input in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13920"},{"cve":"CVE-2026-13921","month":"2026-07","title":"Chromium: CVE-2026-13921 Insufficient validation of untrusted input in DeviceBoundSessionCredentials","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13921"},{"cve":"CVE-2026-13922","month":"2026-07","title":"Chromium: CVE-2026-13922 Side-channel information leakage in Paint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13922"},{"cve":"CVE-2026-13923","month":"2026-07","title":"Chromium: CVE-2026-13923 Uninitialized Use in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13923"},{"cve":"CVE-2026-13924","month":"2026-07","title":"Chromium: CVE-2026-13924 Insufficient validation of untrusted input in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13924"},{"cve":"CVE-2026-13925","month":"2026-07","title":"Chromium: CVE-2026-13925 Inappropriate implementation in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13925"},{"cve":"CVE-2026-13926","month":"2026-07","title":"Chromium: CVE-2026-13926 Insufficient validation of untrusted input in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13926"},{"cve":"CVE-2026-13927","month":"2026-07","title":"Chromium: CVE-2026-13927 Insufficient validation of untrusted input in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13927"},{"cve":"CVE-2026-13928","month":"2026-07","title":"Chromium: CVE-2026-13928 Insufficient validation of untrusted input in Enterprise","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13928"},{"cve":"CVE-2026-13929","month":"2026-07","title":"Chromium: CVE-2026-13929 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13929"},{"cve":"CVE-2026-13930","month":"2026-07","title":"Chromium: CVE-2026-13930 Insufficient policy enforcement in Actor","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13930"},{"cve":"CVE-2026-13931","month":"2026-07","title":"Chromium: CVE-2026-13931 Inappropriate implementation in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13931"},{"cve":"CVE-2026-13932","month":"2026-07","title":"Chromium: CVE-2026-13932 Inappropriate implementation in Sharing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13932"},{"cve":"CVE-2026-13933","month":"2026-07","title":"Chromium: CVE-2026-13933 Insufficient policy enforcement in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13933"},{"cve":"CVE-2026-13934","month":"2026-07","title":"Chromium: CVE-2026-13934 Insufficient validation of untrusted input in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13934"},{"cve":"CVE-2026-13935","month":"2026-07","title":"Chromium: CVE-2026-13935 Side-channel information leakage in ComputePressure","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13935"},{"cve":"CVE-2026-13936","month":"2026-07","title":"Chromium: CVE-2026-13936 Inappropriate implementation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13936"},{"cve":"CVE-2026-13937","month":"2026-07","title":"Chromium: CVE-2026-13937 Insufficient policy enforcement in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13937"},{"cve":"CVE-2026-13938","month":"2026-07","title":"Chromium: CVE-2026-13938 Integer overflow in Fonts","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13938"},{"cve":"CVE-2026-13939","month":"2026-07","title":"Chromium: CVE-2026-13939 Insufficient validation of untrusted input in WebShare","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13939"},{"cve":"CVE-2026-13940","month":"2026-07","title":"Chromium: CVE-2026-13940 Uninitialized Use in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13940"},{"cve":"CVE-2026-13941","month":"2026-07","title":"Chromium: CVE-2026-13941 Inappropriate implementation in SiteSettings","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13941"},{"cve":"CVE-2026-13942","month":"2026-07","title":"Chromium: CVE-2026-13942 Insufficient validation of untrusted input in Video Capture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13942"},{"cve":"CVE-2026-13943","month":"2026-07","title":"Chromium: CVE-2026-13943 Uninitialized Use in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13943"},{"cve":"CVE-2026-13944","month":"2026-07","title":"Chromium: CVE-2026-13944 Inappropriate implementation in DataTransfer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13944"},{"cve":"CVE-2026-13945","month":"2026-07","title":"Chromium: CVE-2026-13945 Insufficient policy enforcement in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13945"},{"cve":"CVE-2026-13946","month":"2026-07","title":"Chromium: CVE-2026-13946 Inappropriate implementation in ScriptInjections","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13946"},{"cve":"CVE-2026-13947","month":"2026-07","title":"Chromium: CVE-2026-13947 Uninitialized Use in XR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13947"},{"cve":"CVE-2026-13948","month":"2026-07","title":"Chromium: CVE-2026-13948 Insufficient policy enforcement in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13948"},{"cve":"CVE-2026-13949","month":"2026-07","title":"Chromium: CVE-2026-13949 Insufficient policy enforcement in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13949"},{"cve":"CVE-2026-13950","month":"2026-07","title":"Chromium: CVE-2026-13950 Uninitialized Use in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13950"},{"cve":"CVE-2026-13951","month":"2026-07","title":"Chromium: CVE-2026-13951 Policy bypass in USB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13951"},{"cve":"CVE-2026-13952","month":"2026-07","title":"Chromium: CVE-2026-13952 Inappropriate implementation in PerformanceAPIs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13952"},{"cve":"CVE-2026-13953","month":"2026-07","title":"Chromium: CVE-2026-13953 Inappropriate implementation in SplitView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13953"},{"cve":"CVE-2026-13954","month":"2026-07","title":"Chromium: CVE-2026-13954 Insufficient policy enforcement in XML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13954"},{"cve":"CVE-2026-13955","month":"2026-07","title":"Chromium: CVE-2026-13955 Insufficient validation of untrusted input in CustomTabs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13955"},{"cve":"CVE-2026-13956","month":"2026-07","title":"Chromium: CVE-2026-13956 Incorrect security UI in PageInfo","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13956"},{"cve":"CVE-2026-13957","month":"2026-07","title":"Chromium: CVE-2026-13957 Incorrect security UI in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13957"},{"cve":"CVE-2026-13958","month":"2026-07","title":"Chromium: CVE-2026-13958 Uninitialized Use in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13958"},{"cve":"CVE-2026-13959","month":"2026-07","title":"Chromium: CVE-2026-13959 Insufficient validation of untrusted input in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13959"},{"cve":"CVE-2026-13960","month":"2026-07","title":"Chromium: CVE-2026-13960 Inappropriate implementation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13960"},{"cve":"CVE-2026-13961","month":"2026-07","title":"Chromium: CVE-2026-13961 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13961"},{"cve":"CVE-2026-13962","month":"2026-07","title":"Chromium: CVE-2026-13962 Insufficient data validation in PDF","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13962"},{"cve":"CVE-2026-13963","month":"2026-07","title":"Chromium: CVE-2026-13963 Inappropriate implementation in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13963"},{"cve":"CVE-2026-13964","month":"2026-07","title":"Chromium: CVE-2026-13964 Insufficient policy enforcement in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13964"},{"cve":"CVE-2026-13965","month":"2026-07","title":"Chromium: CVE-2026-13965 Use after free in Oilpan","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13965"},{"cve":"CVE-2026-13966","month":"2026-07","title":"Chromium: CVE-2026-13966 Inappropriate implementation in History","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13966"},{"cve":"CVE-2026-13967","month":"2026-07","title":"Chromium: CVE-2026-13967 Type Confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13967"},{"cve":"CVE-2026-13968","month":"2026-07","title":"Chromium: CVE-2026-13968 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13968"},{"cve":"CVE-2026-13969","month":"2026-07","title":"Chromium: CVE-2026-13969 Uninitialized Use in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13969"},{"cve":"CVE-2026-13970","month":"2026-07","title":"Chromium: CVE-2026-13970 Uninitialized Use in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13970"},{"cve":"CVE-2026-13971","month":"2026-07","title":"Chromium: CVE-2026-13971 Uninitialized Use in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13971"},{"cve":"CVE-2026-13972","month":"2026-07","title":"Chromium: CVE-2026-13972 Inappropriate implementation in Paint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13972"},{"cve":"CVE-2026-13973","month":"2026-07","title":"Chromium: CVE-2026-13973 Inappropriate implementation in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13973"},{"cve":"CVE-2026-13974","month":"2026-07","title":"Chromium: CVE-2026-13974 Integer overflow in Safe Browsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13974"},{"cve":"CVE-2026-13975","month":"2026-07","title":"Chromium: CVE-2026-13975 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13975"},{"cve":"CVE-2026-13976","month":"2026-07","title":"Chromium: CVE-2026-13976 Heap buffer overflow in Storage","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13976"},{"cve":"CVE-2026-13977","month":"2026-07","title":"Chromium: CVE-2026-13977 Inappropriate implementation in HTMLParser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13977"},{"cve":"CVE-2026-13978","month":"2026-07","title":"Chromium: CVE-2026-13978 Insufficient policy enforcement in PageInfo","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13978"},{"cve":"CVE-2026-13979","month":"2026-07","title":"Chromium: CVE-2026-13979 Inappropriate implementation in Paint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13979"},{"cve":"CVE-2026-13980","month":"2026-07","title":"Chromium: CVE-2026-13980 Incorrect security UI in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13980"},{"cve":"CVE-2026-13981","month":"2026-07","title":"Chromium: CVE-2026-13981 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13981"},{"cve":"CVE-2026-13982","month":"2026-07","title":"Chromium: CVE-2026-13982 Incorrect security UI in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13982"},{"cve":"CVE-2026-13983","month":"2026-07","title":"Chromium: CVE-2026-13983 Incorrect security UI in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13983"},{"cve":"CVE-2026-13984","month":"2026-07","title":"Chromium: CVE-2026-13984 Incorrect security UI in TabStrip","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13984"},{"cve":"CVE-2026-13985","month":"2026-07","title":"Chromium: CVE-2026-13985 Inappropriate implementation in MediaCapture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13985"},{"cve":"CVE-2026-13986","month":"2026-07","title":"Chromium: CVE-2026-13986 Inappropriate implementation in Media UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13986"},{"cve":"CVE-2026-13987","month":"2026-07","title":"Chromium: CVE-2026-13987 Incorrect security UI in Mobile","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13987"},{"cve":"CVE-2026-13988","month":"2026-07","title":"Chromium: CVE-2026-13988 Inappropriate implementation in Paint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13988"},{"cve":"CVE-2026-13989","month":"2026-07","title":"Chromium: CVE-2026-13989 Insufficient policy enforcement in PageInfo","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13989"},{"cve":"CVE-2026-13990","month":"2026-07","title":"Chromium: CVE-2026-13990 Insufficient validation of untrusted input in DataTransfer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13990"},{"cve":"CVE-2026-13991","month":"2026-07","title":"Chromium: CVE-2026-13991 Insufficient validation of untrusted input in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13991"},{"cve":"CVE-2026-13992","month":"2026-07","title":"Chromium: CVE-2026-13992 Inappropriate implementation in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13992"},{"cve":"CVE-2026-13993","month":"2026-07","title":"Chromium: CVE-2026-13993 Incorrect security UI in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13993"},{"cve":"CVE-2026-13994","month":"2026-07","title":"Chromium: CVE-2026-13994 Inappropriate implementation in Credential Management","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13994"},{"cve":"CVE-2026-13995","month":"2026-07","title":"Chromium: CVE-2026-13995 Insufficient validation of untrusted input in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13995"},{"cve":"CVE-2026-13996","month":"2026-07","title":"Chromium: CVE-2026-13996 Incorrect security UI in Permissions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13996"},{"cve":"CVE-2026-13997","month":"2026-07","title":"Chromium: CVE-2026-13997 Incorrect security UI in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13997"},{"cve":"CVE-2026-13998","month":"2026-07","title":"Chromium: CVE-2026-13998 Incorrect security UI in File Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13998"},{"cve":"CVE-2026-13999","month":"2026-07","title":"Chromium: CVE-2026-13999 Inappropriate implementation in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13999"},{"cve":"CVE-2026-14000","month":"2026-07","title":"Chromium: CVE-2026-14000 Inappropriate implementation in XML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14000"},{"cve":"CVE-2026-14001","month":"2026-07","title":"Chromium: CVE-2026-14001 Inappropriate implementation in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14001"},{"cve":"CVE-2026-14002","month":"2026-07","title":"Chromium: CVE-2026-14002 Inappropriate implementation in Geolocation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14002"},{"cve":"CVE-2026-14003","month":"2026-07","title":"Chromium: CVE-2026-14003 Insufficient policy enforcement in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14003"},{"cve":"CVE-2026-14004","month":"2026-07","title":"Chromium: CVE-2026-14004 Inappropriate implementation in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14004"},{"cve":"CVE-2026-14005","month":"2026-07","title":"Chromium: CVE-2026-14005 Use after free in Omnibox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14005"},{"cve":"CVE-2026-14006","month":"2026-07","title":"Chromium: CVE-2026-14006 Use after free in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14006"},{"cve":"CVE-2026-14007","month":"2026-07","title":"Chromium: CVE-2026-14007 Insufficient policy enforcement in PermissionsPolicy","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14007"},{"cve":"CVE-2026-14008","month":"2026-07","title":"Chromium: CVE-2026-14008 Uninitialized Use in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14008"},{"cve":"CVE-2026-14009","month":"2026-07","title":"Chromium: CVE-2026-14009 Insufficient data validation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14009"},{"cve":"CVE-2026-14010","month":"2026-07","title":"Chromium: CVE-2026-14010 Uninitialized Use in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14010"},{"cve":"CVE-2026-14011","month":"2026-07","title":"Chromium: CVE-2026-14011 Out of bounds read in SurfaceCapture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14011"},{"cve":"CVE-2026-14012","month":"2026-07","title":"Chromium: CVE-2026-14012 Side-channel information leakage in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14012"},{"cve":"CVE-2026-14013","month":"2026-07","title":"Chromium: CVE-2026-14013 Inappropriate implementation in SVG","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14013"},{"cve":"CVE-2026-14014","month":"2026-07","title":"Chromium: CVE-2026-14014 Inappropriate implementation in Paint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14014"},{"cve":"CVE-2026-14015","month":"2026-07","title":"Chromium: CVE-2026-14015 Inappropriate implementation in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14015"},{"cve":"CVE-2026-14016","month":"2026-07","title":"Chromium: CVE-2026-14016 Insufficient policy enforcement in SVG","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14016"},{"cve":"CVE-2026-14017","month":"2026-07","title":"Chromium: CVE-2026-14017 Inappropriate implementation in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14017"},{"cve":"CVE-2026-14018","month":"2026-07","title":"Chromium: CVE-2026-14018 Use after free in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14018"},{"cve":"CVE-2026-14019","month":"2026-07","title":"Chromium: CVE-2026-14019 Inappropriate implementation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14019"},{"cve":"CVE-2026-14020","month":"2026-07","title":"Chromium: CVE-2026-14020 Insufficient validation of untrusted input in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14020"},{"cve":"CVE-2026-14021","month":"2026-07","title":"Chromium: CVE-2026-14021 Insufficient validation of untrusted input in StorageAccessAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14021"},{"cve":"CVE-2026-14022","month":"2026-07","title":"Chromium: CVE-2026-14022 Insufficient validation of untrusted input in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14022"},{"cve":"CVE-2026-14023","month":"2026-07","title":"Chromium: CVE-2026-14023 Insufficient validation of untrusted input in SanitizerAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14023"},{"cve":"CVE-2026-14024","month":"2026-07","title":"Chromium: CVE-2026-14024 Use after free in Ozone","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14024"},{"cve":"CVE-2026-14025","month":"2026-07","title":"Chromium: CVE-2026-14025 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14025"},{"cve":"CVE-2026-14026","month":"2026-07","title":"Chromium: CVE-2026-14026 Incorrect security UI in SplitView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14026"},{"cve":"CVE-2026-14027","month":"2026-07","title":"Chromium: CVE-2026-14027 Use after free in SignIn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14027"},{"cve":"CVE-2026-14028","month":"2026-07","title":"Chromium: CVE-2026-14028 Incorrect security UI in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14028"},{"cve":"CVE-2026-14030","month":"2026-07","title":"Chromium: CVE-2026-14030 Incorrect security UI in SplitView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14030"},{"cve":"CVE-2026-14031","month":"2026-07","title":"Chromium: CVE-2026-14031 Incorrect security UI in File Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14031"},{"cve":"CVE-2026-14032","month":"2026-07","title":"Chromium: CVE-2026-14032 Use after free in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14032"},{"cve":"CVE-2026-14033","month":"2026-07","title":"Chromium: CVE-2026-14033 Insufficient policy enforcement in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14033"},{"cve":"CVE-2026-14034","month":"2026-07","title":"Chromium: CVE-2026-14034 Inappropriate implementation in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14034"},{"cve":"CVE-2026-14035","month":"2026-07","title":"Chromium: CVE-2026-14035 Insufficient policy enforcement in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14035"},{"cve":"CVE-2026-14036","month":"2026-07","title":"Chromium: CVE-2026-14036 Insufficient policy enforcement in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14036"},{"cve":"CVE-2026-14037","month":"2026-07","title":"Chromium: CVE-2026-14037 Insufficient policy enforcement in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14037"},{"cve":"CVE-2026-14038","month":"2026-07","title":"Chromium: CVE-2026-14038 Insufficient validation of untrusted input in New Tab Page","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14038"},{"cve":"CVE-2026-14039","month":"2026-07","title":"Chromium: CVE-2026-14039 Insufficient policy enforcement in GetUserMedia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14039"},{"cve":"CVE-2026-14040","month":"2026-07","title":"Chromium: CVE-2026-14040 Use after free in BrowserTag","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14040"},{"cve":"CVE-2026-14041","month":"2026-07","title":"Chromium: CVE-2026-14041 Insufficient policy enforcement in Serial","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14041"},{"cve":"CVE-2026-14042","month":"2026-07","title":"Chromium: CVE-2026-14042 Inappropriate implementation in Isolated Web Apps","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14042"},{"cve":"CVE-2026-14043","month":"2026-07","title":"Chromium: CVE-2026-14043 Use after free in GetUserMedia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14043"},{"cve":"CVE-2026-14044","month":"2026-07","title":"Chromium: CVE-2026-14044 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14044"},{"cve":"CVE-2026-14045","month":"2026-07","title":"Chromium: CVE-2026-14045 Insufficient validation of untrusted input in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14045"},{"cve":"CVE-2026-14046","month":"2026-07","title":"Chromium: CVE-2026-14046 Inappropriate implementation in CustomTabs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14046"},{"cve":"CVE-2026-14047","month":"2026-07","title":"Chromium: CVE-2026-14047 Insufficient policy enforcement in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14047"},{"cve":"CVE-2026-14048","month":"2026-07","title":"Chromium: CVE-2026-14048 Use after free in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14048"},{"cve":"CVE-2026-14049","month":"2026-07","title":"Chromium: CVE-2026-14049 Inappropriate implementation in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14049"},{"cve":"CVE-2026-14050","month":"2026-07","title":"Chromium: CVE-2026-14050 Insufficient policy enforcement in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14050"},{"cve":"CVE-2026-14051","month":"2026-07","title":"Chromium: CVE-2026-14051 Uninitialized Use in GamepadAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14051"},{"cve":"CVE-2026-14052","month":"2026-07","title":"Chromium: CVE-2026-14052 Insufficient policy enforcement in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14052"},{"cve":"CVE-2026-14053","month":"2026-07","title":"Chromium: CVE-2026-14053 Insufficient policy enforcement in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14053"},{"cve":"CVE-2026-14054","month":"2026-07","title":"Chromium: CVE-2026-14054 Insufficient policy enforcement in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14054"},{"cve":"CVE-2026-14055","month":"2026-07","title":"Chromium: CVE-2026-14055 Insufficient validation of untrusted input in Device Trust","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14055"},{"cve":"CVE-2026-14056","month":"2026-07","title":"Chromium: CVE-2026-14056 Insufficient validation of untrusted input in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14056"},{"cve":"CVE-2026-14057","month":"2026-07","title":"Chromium: CVE-2026-14057 Insufficient policy enforcement in FedCM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14057"},{"cve":"CVE-2026-14058","month":"2026-07","title":"Chromium: CVE-2026-14058 Policy bypass in Parser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14058"},{"cve":"CVE-2026-14059","month":"2026-07","title":"Chromium: CVE-2026-14059 Insufficient policy enforcement in Related-Website-Sets","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14059"},{"cve":"CVE-2026-14060","month":"2026-07","title":"Chromium: CVE-2026-14060 Insufficient validation of untrusted input in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14060"},{"cve":"CVE-2026-14061","month":"2026-07","title":"Chromium: CVE-2026-14061 Inappropriate implementation in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14061"},{"cve":"CVE-2026-14062","month":"2026-07","title":"Chromium: CVE-2026-14062 Inappropriate implementation in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14062"},{"cve":"CVE-2026-14063","month":"2026-07","title":"Chromium: CVE-2026-14063 Out of bounds memory access in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14063"},{"cve":"CVE-2026-14064","month":"2026-07","title":"Chromium: CVE-2026-14064 Use after free in PageInfo","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14064"},{"cve":"CVE-2026-14065","month":"2026-07","title":"Chromium: CVE-2026-14065 Insufficient validation of untrusted input in PageInfo","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14065"},{"cve":"CVE-2026-14066","month":"2026-07","title":"Chromium: CVE-2026-14066 Insufficient validation of untrusted input in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14066"},{"cve":"CVE-2026-14067","month":"2026-07","title":"Chromium: CVE-2026-14067 Use after free in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14067"},{"cve":"CVE-2026-14068","month":"2026-07","title":"Chromium: CVE-2026-14068 Inappropriate implementation in Omnibox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14068"},{"cve":"CVE-2026-14069","month":"2026-07","title":"Chromium: CVE-2026-14069 Integer overflow in WebNN","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14069"},{"cve":"CVE-2026-14070","month":"2026-07","title":"Chromium: CVE-2026-14070 Uninitialized Use in WebNN","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14070"},{"cve":"CVE-2026-14071","month":"2026-07","title":"Chromium: CVE-2026-14071 Side-channel information leakage in WebAudio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14071"},{"cve":"CVE-2026-14072","month":"2026-07","title":"Chromium: CVE-2026-14072 Incorrect security UI in SplitView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14072"},{"cve":"CVE-2026-14073","month":"2026-07","title":"Chromium: CVE-2026-14073 Insufficient policy enforcement in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14073"},{"cve":"CVE-2026-14074","month":"2026-07","title":"Chromium: CVE-2026-14074 Side-channel information leakage in WebAuthentication","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14074"},{"cve":"CVE-2026-14075","month":"2026-07","title":"Chromium: CVE-2026-14075 Policy bypass in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14075"},{"cve":"CVE-2026-14076","month":"2026-07","title":"Chromium: CVE-2026-14076 Policy bypass in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14076"},{"cve":"CVE-2026-14077","month":"2026-07","title":"Chromium: CVE-2026-14077 Incorrect security UI in Select","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14077"},{"cve":"CVE-2026-14078","month":"2026-07","title":"Chromium: CVE-2026-14078 Policy bypass in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14078"},{"cve":"CVE-2026-14079","month":"2026-07","title":"Chromium: CVE-2026-14079 Policy bypass in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14079"},{"cve":"CVE-2026-14080","month":"2026-07","title":"Chromium: CVE-2026-14080 Insufficient validation of untrusted input in TabSwitcher","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14080"},{"cve":"CVE-2026-14081","month":"2026-07","title":"Chromium: CVE-2026-14081 Insufficient policy enforcement in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14081"},{"cve":"CVE-2026-14082","month":"2026-07","title":"Chromium: CVE-2026-14082 Race in Storage","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14082"},{"cve":"CVE-2026-14083","month":"2026-07","title":"Chromium: CVE-2026-14083 Insufficient validation of untrusted input in HTML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14083"},{"cve":"CVE-2026-14084","month":"2026-07","title":"Chromium: CVE-2026-14084 Insufficient validation of untrusted input in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14084"},{"cve":"CVE-2026-14085","month":"2026-07","title":"Chromium: CVE-2026-14085 Side-channel information leakage in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14085"},{"cve":"CVE-2026-14086","month":"2026-07","title":"Chromium: CVE-2026-14086 Insufficient policy enforcement in HID","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14086"},{"cve":"CVE-2026-14087","month":"2026-07","title":"Chromium: CVE-2026-14087 Insufficient validation of untrusted input in WebNN","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14087"},{"cve":"CVE-2026-14088","month":"2026-07","title":"Chromium: CVE-2026-14088 Uninitialized Use in Canvas","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14088"},{"cve":"CVE-2026-14089","month":"2026-07","title":"Chromium: CVE-2026-14089 Insufficient validation of untrusted input in PopupBlocker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14089"},{"cve":"CVE-2026-14090","month":"2026-07","title":"Chromium: CVE-2026-14090 Out of bounds read in CameraCapture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14090"},{"cve":"CVE-2026-14091","month":"2026-07","title":"Chromium: CVE-2026-14091 Use after free in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14091"},{"cve":"CVE-2026-14092","month":"2026-07","title":"Chromium: CVE-2026-14092 Insufficient policy enforcement in Privacy","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14092"},{"cve":"CVE-2026-14093","month":"2026-07","title":"Chromium: CVE-2026-14093 Use after free in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14093"},{"cve":"CVE-2026-14094","month":"2026-07","title":"Chromium: CVE-2026-14094 Use after free in Installer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14094"},{"cve":"CVE-2026-14095","month":"2026-07","title":"Chromium: CVE-2026-14095 Insufficient validation of untrusted input in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14095"},{"cve":"CVE-2026-14096","month":"2026-07","title":"Chromium: CVE-2026-14096 Object lifecycle issue in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14096"},{"cve":"CVE-2026-14097","month":"2026-07","title":"Chromium: CVE-2026-14097 Inappropriate implementation in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14097"},{"cve":"CVE-2026-14098","month":"2026-07","title":"Chromium: CVE-2026-14098 Inappropriate implementation in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14098"},{"cve":"CVE-2026-14099","month":"2026-07","title":"Chromium: CVE-2026-14099 Use after free in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14099"},{"cve":"CVE-2026-14100","month":"2026-07","title":"Chromium: CVE-2026-14100 Insufficient data validation in NetworkCache","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14100"},{"cve":"CVE-2026-14101","month":"2026-07","title":"Chromium: CVE-2026-14101 Insufficient policy enforcement in Sandbox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14101"},{"cve":"CVE-2026-14102","month":"2026-07","title":"Chromium: CVE-2026-14102 Use after free in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14102"},{"cve":"CVE-2026-14103","month":"2026-07","title":"Chromium: CVE-2026-14103 Use after free in SSL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14103"},{"cve":"CVE-2026-14104","month":"2026-07","title":"Chromium: CVE-2026-14104 Insufficient validation of untrusted input in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14104"},{"cve":"CVE-2026-14105","month":"2026-07","title":"Chromium: CVE-2026-14105 Insufficient policy enforcement in Speech","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14105"},{"cve":"CVE-2026-14106","month":"2026-07","title":"Chromium: CVE-2026-14106 Insufficient validation of untrusted input in Text","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14106"},{"cve":"CVE-2026-14107","month":"2026-07","title":"Chromium: CVE-2026-14107 Use after free in Scheduling","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14107"},{"cve":"CVE-2026-14108","month":"2026-07","title":"Chromium: CVE-2026-14108 Use after free in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14108"},{"cve":"CVE-2026-14109","month":"2026-07","title":"Chromium: CVE-2026-14109 Insufficient policy enforcement in Mojo","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14109"},{"cve":"CVE-2026-14110","month":"2026-07","title":"Chromium: CVE-2026-14110 Inappropriate implementation in DarkMode","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14110"},{"cve":"CVE-2026-14111","month":"2026-07","title":"Chromium: CVE-2026-14111 Use after free in WebProtect","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14111"},{"cve":"CVE-2026-14112","month":"2026-07","title":"Chromium: CVE-2026-14112 Inappropriate implementation in Enterprise","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14112"},{"cve":"CVE-2026-14113","month":"2026-07","title":"Chromium: CVE-2026-14113 Use after free in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14113"},{"cve":"CVE-2026-14114","month":"2026-07","title":"Chromium: CVE-2026-14114 Inappropriate implementation in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14114"},{"cve":"CVE-2026-14115","month":"2026-07","title":"Chromium: CVE-2026-14115 Insufficient validation of untrusted input in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14115"},{"cve":"CVE-2026-14116","month":"2026-07","title":"Chromium: CVE-2026-14116 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14116"},{"cve":"CVE-2026-14117","month":"2026-07","title":"Chromium: CVE-2026-14117 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14117"},{"cve":"CVE-2026-14118","month":"2026-07","title":"Chromium: CVE-2026-14118 Insufficient data validation in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14118"},{"cve":"CVE-2026-14119","month":"2026-07","title":"Chromium: CVE-2026-14119 Type Confusion in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14119"},{"cve":"CVE-2026-14120","month":"2026-07","title":"Chromium: CVE-2026-14120 Inappropriate implementation in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14120"},{"cve":"CVE-2026-14121","month":"2026-07","title":"Chromium: CVE-2026-14121 Use after free in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14121"},{"cve":"CVE-2026-14122","month":"2026-07","title":"Chromium: CVE-2026-14122 Insufficient validation of untrusted input in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14122"},{"cve":"CVE-2026-14123","month":"2026-07","title":"Chromium: CVE-2026-14123 Incorrect security UI in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14123"},{"cve":"CVE-2026-14124","month":"2026-07","title":"Chromium: CVE-2026-14124 Inappropriate implementation in CredentialProvider","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14124"},{"cve":"CVE-2026-14125","month":"2026-07","title":"Chromium: CVE-2026-14125 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14125"},{"cve":"CVE-2026-14126","month":"2026-07","title":"Chromium: CVE-2026-14126 Incorrect security UI in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14126"},{"cve":"CVE-2026-14127","month":"2026-07","title":"Chromium: CVE-2026-14127 Inappropriate implementation in Printing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14127"},{"cve":"CVE-2026-14128","month":"2026-07","title":"Chromium: CVE-2026-14128 Insufficient data validation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14128"},{"cve":"CVE-2026-14129","month":"2026-07","title":"Chromium: CVE-2026-14129 Incorrect security UI in PreviewTab","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14129"},{"cve":"CVE-2026-14130","month":"2026-07","title":"Chromium: CVE-2026-14130 Incorrect security UI in Omnibox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14130"},{"cve":"CVE-2026-14131","month":"2026-07","title":"Chromium: CVE-2026-14131 Insufficient validation of untrusted input in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14131"},{"cve":"CVE-2026-14132","month":"2026-07","title":"Chromium: CVE-2026-14132 Inappropriate implementation in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14132"},{"cve":"CVE-2026-14133","month":"2026-07","title":"Chromium: CVE-2026-14133 Race in History Embeddings","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14133"},{"cve":"CVE-2026-14134","month":"2026-07","title":"Chromium: CVE-2026-14134 Inappropriate implementation in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14134"},{"cve":"CVE-2026-14135","month":"2026-07","title":"Chromium: CVE-2026-14135 Insufficient validation of untrusted input in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14135"},{"cve":"CVE-2026-14136","month":"2026-07","title":"Chromium: CVE-2026-14136 Incorrect security UI in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14136"},{"cve":"CVE-2026-14137","month":"2026-07","title":"Chromium: CVE-2026-14137 Insufficient validation of untrusted input in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14137"},{"cve":"CVE-2026-14138","month":"2026-07","title":"Chromium: CVE-2026-14138 Inappropriate implementation in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14138"},{"cve":"CVE-2026-14139","month":"2026-07","title":"Chromium: CVE-2026-14139 Inappropriate implementation in TabStrip","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14139"},{"cve":"CVE-2026-14140","month":"2026-07","title":"Chromium: CVE-2026-14140 Insufficient validation of untrusted input in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14140"},{"cve":"CVE-2026-14141","month":"2026-07","title":"Chromium: CVE-2026-14141 Incorrect security UI in Document Picture-in-Picture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14141"},{"cve":"CVE-2026-14142","month":"2026-07","title":"Chromium: CVE-2026-14142 Inappropriate implementation in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14142"},{"cve":"CVE-2026-14143","month":"2026-07","title":"Chromium: CVE-2026-14143 Incorrect security UI in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14143"},{"cve":"CVE-2026-14144","month":"2026-07","title":"Chromium: CVE-2026-14144 Incorrect security UI in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14144"},{"cve":"CVE-2026-14145","month":"2026-07","title":"Chromium: CVE-2026-14145 Inappropriate implementation in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14145"},{"cve":"CVE-2026-14146","month":"2026-07","title":"Chromium: CVE-2026-14146 Inappropriate implementation in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14146"},{"cve":"CVE-2026-14147","month":"2026-07","title":"Chromium: CVE-2026-14147 Inappropriate implementation in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14147"},{"cve":"CVE-2026-14148","month":"2026-07","title":"Chromium: CVE-2026-14148 Type Confusion in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14148"},{"cve":"CVE-2026-14149","month":"2026-07","title":"Chromium: CVE-2026-14149 Use after free in Audio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14149"},{"cve":"CVE-2026-14150","month":"2026-07","title":"Chromium: CVE-2026-14150 Insufficient validation of untrusted input in Speech","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14150"},{"cve":"CVE-2026-14151","month":"2026-07","title":"Chromium: CVE-2026-14151 Inappropriate implementation in AI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14151"},{"cve":"CVE-2026-14152","month":"2026-07","title":"Chromium: CVE-2026-14152 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14152"},{"cve":"CVE-2026-14153","month":"2026-07","title":"Chromium: CVE-2026-14153 Inappropriate implementation in Glic","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14153"},{"cve":"CVE-2026-14154","month":"2026-07","title":"Chromium: CVE-2026-14154 Inappropriate implementation in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14154"},{"cve":"CVE-2026-14155","month":"2026-07","title":"Chromium: CVE-2026-14155 Insufficient policy enforcement in StorageAccessAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14155"},{"cve":"CVE-2026-14156","month":"2026-07","title":"Chromium: CVE-2026-14156 Policy bypass in StorageAccessAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14156"},{"cve":"CVE-2026-14382","month":"2026-07","title":"Chromium: CVE-2026-14382 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14382"},{"cve":"CVE-2026-14385","month":"2026-07","title":"Chromium: CVE-2026-14385 Heap buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14385"},{"cve":"CVE-2026-14386","month":"2026-07","title":"Chromium: CVE-2026-14386 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14386"},{"cve":"CVE-2026-14388","month":"2026-07","title":"Chromium: CVE-2026-14388 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14388"},{"cve":"CVE-2026-14390","month":"2026-07","title":"Chromium: CVE-2026-14390 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14390"},{"cve":"CVE-2026-14391","month":"2026-07","title":"Chromium: CVE-2026-14391 Integer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14391"},{"cve":"CVE-2026-14392","month":"2026-07","title":"Chromium: CVE-2026-14392 Out of bounds write in Tint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14392"},{"cve":"CVE-2026-14393","month":"2026-07","title":"Chromium: CVE-2026-14393 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14393"},{"cve":"CVE-2026-14394","month":"2026-07","title":"Chromium: CVE-2026-14394 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14394"},{"cve":"CVE-2026-14395","month":"2026-07","title":"Chromium: CVE-2026-14395 Out of bounds write in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14395"},{"cve":"CVE-2026-14396","month":"2026-07","title":"Chromium: CVE-2026-14396 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14396"},{"cve":"CVE-2026-14397","month":"2026-07","title":"Chromium: CVE-2026-14397 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14397"},{"cve":"CVE-2026-14398","month":"2026-07","title":"Chromium: CVE-2026-14398 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14398"},{"cve":"CVE-2026-14399","month":"2026-07","title":"Chromium: CVE-2026-14399 Uninitialized Use in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14399"},{"cve":"CVE-2026-14400","month":"2026-07","title":"Chromium: CVE-2026-14400 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14400"},{"cve":"CVE-2026-14401","month":"2026-07","title":"Chromium: CVE-2026-14401 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14401"},{"cve":"CVE-2026-14402","month":"2026-07","title":"Chromium: CVE-2026-14402 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14402"},{"cve":"CVE-2026-14403","month":"2026-07","title":"Chromium: CVE-2026-14403 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14403"},{"cve":"CVE-2026-14404","month":"2026-07","title":"Chromium: CVE-2026-14404 Inappropriate implementation in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14404"},{"cve":"CVE-2026-14405","month":"2026-07","title":"Chromium: CVE-2026-14405 Uninitialized Use in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14405"},{"cve":"CVE-2026-14406","month":"2026-07","title":"Chromium: CVE-2026-14406 Out of bounds read in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14406"},{"cve":"CVE-2026-14407","month":"2026-07","title":"Chromium: CVE-2026-14407 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14407"},{"cve":"CVE-2026-14408","month":"2026-07","title":"Chromium: CVE-2026-14408 Uninitialized Use in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14408"},{"cve":"CVE-2026-14409","month":"2026-07","title":"Chromium: CVE-2026-14409 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14409"},{"cve":"CVE-2026-14410","month":"2026-07","title":"Chromium: CVE-2026-14410 Inappropriate implementation in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14410"},{"cve":"CVE-2026-14411","month":"2026-07","title":"Chromium: CVE-2026-14411 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14411"},{"cve":"CVE-2026-14412","month":"2026-07","title":"Chromium: CVE-2026-14412 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14412"},{"cve":"CVE-2026-14413","month":"2026-07","title":"Chromium: CVE-2026-14413 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14413"},{"cve":"CVE-2026-14414","month":"2026-07","title":"Chromium: CVE-2026-14414 Insufficient validation of untrusted input in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14414"},{"cve":"CVE-2026-14415","month":"2026-07","title":"Chromium: CVE-2026-14415 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14415"},{"cve":"CVE-2026-14416","month":"2026-07","title":"Chromium: CVE-2026-14416 Out of bounds read in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14416"},{"cve":"CVE-2026-14417","month":"2026-07","title":"Chromium: CVE-2026-14417 Use after free in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14417"},{"cve":"CVE-2026-14418","month":"2026-07","title":"Chromium: CVE-2026-14418 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14418"},{"cve":"CVE-2026-14419","month":"2026-07","title":"Chromium: CVE-2026-14419 Use after free in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14419"},{"cve":"CVE-2026-14420","month":"2026-07","title":"Chromium: CVE-2026-14420 Out of bounds read and write in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14420"},{"cve":"CVE-2026-14421","month":"2026-07","title":"Chromium: CVE-2026-14421 Uninitialized Use in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14421"},{"cve":"CVE-2026-14422","month":"2026-07","title":"Chromium: CVE-2026-14422 Out of bounds read and write in Tint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14422"},{"cve":"CVE-2026-14423","month":"2026-07","title":"Chromium: CVE-2026-14423 Type Confusion in Tint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14423"},{"cve":"CVE-2026-14424","month":"2026-07","title":"Chromium: CVE-2026-14424 Use after free in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14424"},{"cve":"CVE-2026-14425","month":"2026-07","title":"Chromium: CVE-2026-14425 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14425"},{"cve":"CVE-2026-14426","month":"2026-07","title":"Chromium: CVE-2026-14426 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14426"},{"cve":"CVE-2026-14427","month":"2026-07","title":"Chromium: CVE-2026-14427 Heap buffer overflow in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14427"},{"cve":"CVE-2026-14428","month":"2026-07","title":"Chromium: CVE-2026-14428 Insufficient validation of untrusted input in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14428"},{"cve":"CVE-2026-14429","month":"2026-07","title":"Chromium: CVE-2026-14429 Insufficient validation of untrusted input in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14429"},{"cve":"CVE-2026-14430","month":"2026-07","title":"Chromium: CVE-2026-14430 Integer overflow in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14430"},{"cve":"CVE-2026-14431","month":"2026-07","title":"Chromium: CVE-2026-14431 Type Confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14431"},{"cve":"CVE-2026-14432","month":"2026-07","title":"Chromium: CVE-2026-14432 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14432"},{"cve":"CVE-2026-15107","month":"2026-07","title":"Chromium: CVE-2026-15107 Use after free in IndexedDB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15107"},{"cve":"CVE-2026-15108","month":"2026-07","title":"Chromium: CVE-2026-15108 Integer overflow in Extensions API","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15108"},{"cve":"CVE-2026-15109","month":"2026-07","title":"Chromium: CVE-2026-15109 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15109"},{"cve":"CVE-2026-15110","month":"2026-07","title":"Chromium: CVE-2026-15110 Use after free in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15110"},{"cve":"CVE-2026-15111","month":"2026-07","title":"Chromium: CVE-2026-15111 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15111"},{"cve":"CVE-2026-15112","month":"2026-07","title":"Chromium: CVE-2026-15112 Use after free in Ozone","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15112"},{"cve":"CVE-2026-15113","month":"2026-07","title":"Chromium: CVE-2026-15113 Use after free in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15113"},{"cve":"CVE-2026-15114","month":"2026-07","title":"Chromium: CVE-2026-15114 Out of bounds read and write in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15114"},{"cve":"CVE-2026-15115","month":"2026-07","title":"Chromium: CVE-2026-15115 Insufficient validation of untrusted input in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15115"},{"cve":"CVE-2026-15116","month":"2026-07","title":"Chromium: CVE-2026-15116 Use after free in Actor","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15116"},{"cve":"CVE-2026-15117","month":"2026-07","title":"Chromium: CVE-2026-15117 Use after free in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15117"},{"cve":"CVE-2026-15118","month":"2026-07","title":"Chromium: CVE-2026-15118 Use after free in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15118"},{"cve":"CVE-2026-15119","month":"2026-07","title":"Chromium: CVE-2026-15119 Inappropriate implementation in GetUserMedia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15119"},{"cve":"CVE-2026-15120","month":"2026-07","title":"Chromium: CVE-2026-15120 Use after free in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15120"},{"cve":"CVE-2026-15121","month":"2026-07","title":"Chromium: CVE-2026-15121 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15121"},{"cve":"CVE-2026-15122","month":"2026-07","title":"Chromium: CVE-2026-15122 Insufficient validation of untrusted input in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15122"},{"cve":"CVE-2026-15123","month":"2026-07","title":"Chromium: CVE-2026-15123 Insufficient data validation in DOM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15123"},{"cve":"CVE-2026-15124","month":"2026-07","title":"Chromium: CVE-2026-15124 Insufficient policy enforcement in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15124"},{"cve":"CVE-2026-15125","month":"2026-07","title":"Chromium: CVE-2026-15125 Inappropriate implementation in Forms","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15125"},{"cve":"CVE-2026-15126","month":"2026-07","title":"Chromium: CVE-2026-15126 Use after free in Forms","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15126"},{"cve":"CVE-2026-15127","month":"2026-07","title":"Chromium: CVE-2026-15127 Inappropriate implementation in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15127"},{"cve":"CVE-2026-15128","month":"2026-07","title":"Chromium: CVE-2026-15128 Inappropriate implementation in Forms","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15128"},{"cve":"CVE-2026-15129","month":"2026-07","title":"Chromium: CVE-2026-15129 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15129"},{"cve":"CVE-2026-15130","month":"2026-07","title":"Chromium: CVE-2026-15130 Insufficient policy enforcement in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15130"},{"cve":"CVE-2026-15131","month":"2026-07","title":"Chromium: CVE-2026-15131 Insufficient data validation in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15131"},{"cve":"CVE-2026-15132","month":"2026-07","title":"Chromium: CVE-2026-15132 Uninitialized Use in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15132"},{"cve":"CVE-2026-15133","month":"2026-07","title":"Chromium: CVE-2026-15133 Use after free in InterestGroups","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15133"},{"cve":"CVE-2026-15764","month":"2026-07","title":"Chromium: CVE-2026-15764 Use after free in Ozone","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15764"},{"cve":"CVE-2026-15765","month":"2026-07","title":"Chromium: CVE-2026-15765 Use after free in Ozone","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15765"},{"cve":"CVE-2026-15766","month":"2026-07","title":"Chromium: CVE-2026-15766 Uninitialized Use in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15766"},{"cve":"CVE-2026-15767","month":"2026-07","title":"Chromium: CVE-2026-15767 Heap buffer overflow in libyuv","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15767"},{"cve":"CVE-2026-15768","month":"2026-07","title":"Chromium: CVE-2026-15768 Insufficient policy enforcement in HTML-in-Canvas","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15768"},{"cve":"CVE-2026-15769","month":"2026-07","title":"Chromium: CVE-2026-15769 Insufficient validation of untrusted input in Linux Toolkit Theming","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15769"},{"cve":"CVE-2026-15770","month":"2026-07","title":"Chromium: CVE-2026-15770 Uninitialized Use in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15770"},{"cve":"CVE-2026-15771","month":"2026-07","title":"Chromium: CVE-2026-15771 Insufficient validation of untrusted input in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15771"},{"cve":"CVE-2026-15772","month":"2026-07","title":"Chromium: CVE-2026-15772 Use after free in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15772"},{"cve":"CVE-2026-15773","month":"2026-07","title":"Chromium: CVE-2026-15773 Use after free in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15773"},{"cve":"CVE-2026-15774","month":"2026-07","title":"Chromium: CVE-2026-15774 Use after free in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15774"},{"cve":"CVE-2026-15775","month":"2026-07","title":"Chromium: CVE-2026-15775 Insufficient policy enforcement in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15775"},{"cve":"CVE-2026-15776","month":"2026-07","title":"Chromium: CVE-2026-15776 Type Confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15776"},{"cve":"CVE-2026-15777","month":"2026-07","title":"Chromium: CVE-2026-15777 Use after free in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15777"},{"cve":"CVE-2026-15778","month":"2026-07","title":"Chromium: CVE-2026-15778 Insufficient validation of untrusted input in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15778"},{"cve":"CVE-2026-15899","month":"2026-07","title":"Chromium: CVE-2026-15899 Use after free in CameraCapture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15899"},{"cve":"CVE-2026-15900","month":"2026-07","title":"Chromium: CVE-2026-15900 Use after free in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15900"},{"cve":"CVE-2026-15901","month":"2026-07","title":"Chromium: CVE-2026-15901 Use after free in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15901"},{"cve":"CVE-2026-15902","month":"2026-07","title":"Chromium: CVE-2026-15902 Use after free in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15902"},{"cve":"CVE-2026-15903","month":"2026-07","title":"Chromium: CVE-2026-15903 Out of bounds read and write in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15903"},{"cve":"CVE-2026-15904","month":"2026-07","title":"Chromium: CVE-2026-15904 Use after free in Ozone","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15904"},{"cve":"CVE-2026-15905","month":"2026-07","title":"Chromium: CVE-2026-15905 Use after free in Aura","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15905"},{"cve":"CVE-2026-16413","month":"2026-07","title":"Chromium: CVE-2026-16413 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16413"},{"cve":"CVE-2026-16414","month":"2026-07","title":"Chromium: CVE-2026-16414 Insufficient validation of untrusted input in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16414"},{"cve":"CVE-2026-16415","month":"2026-07","title":"Chromium: CVE-2026-16415 Insufficient validation of untrusted input in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16415"},{"cve":"CVE-2026-16416","month":"2026-07","title":"Chromium: CVE-2026-16416 Integer overflow in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16416"},{"cve":"CVE-2026-16417","month":"2026-07","title":"Chromium: CVE-2026-16417 Uninitialized Use in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16417"},{"cve":"CVE-2026-16418","month":"2026-07","title":"Chromium: CVE-2026-16418 Stack buffer overflow in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16418"},{"cve":"CVE-2026-16419","month":"2026-07","title":"Chromium: CVE-2026-16419 Out of bounds read and write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16419"},{"cve":"CVE-2026-16420","month":"2026-07","title":"Chromium: CVE-2026-16420 Type Confusion in WebAudio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16420"},{"cve":"CVE-2026-16421","month":"2026-07","title":"Chromium: CVE-2026-16421 Inappropriate implementation in WebAudio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16421"},{"cve":"CVE-2026-16422","month":"2026-07","title":"Chromium: CVE-2026-16422 Insufficient validation of untrusted input in Certificate","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16422"},{"cve":"CVE-2026-16423","month":"2026-07","title":"Chromium: CVE-2026-16423 Use after free in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16423"},{"cve":"CVE-2026-16424","month":"2026-07","title":"Chromium: CVE-2026-16424 Use after free in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16424"},{"cve":"CVE-2026-16804","month":"2026-07","title":"Chromium: CVE-2026-16804 Use after free in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16804"},{"cve":"CVE-2026-16805","month":"2026-07","title":"Chromium: CVE-2026-16805 Use after free in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16805"},{"cve":"CVE-2026-16806","month":"2026-07","title":"Chromium: CVE-2026-16806 Use after free in WebMCP","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16806"},{"cve":"CVE-2026-16807","month":"2026-07","title":"Chromium: CVE-2026-16807 Out of bounds write in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16807"},{"cve":"CVE-2026-17650","month":"2026-07","title":"Chromium: CVE-2026-17650 Use after free in Compositing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17650"},{"cve":"CVE-2026-17651","month":"2026-07","title":"Chromium: CVE-2026-17651 Insufficient validation of untrusted input in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17651"},{"cve":"CVE-2026-17652","month":"2026-07","title":"Chromium: CVE-2026-17652 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17652"},{"cve":"CVE-2026-17653","month":"2026-07","title":"Chromium: CVE-2026-17653 Use after free in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17653"},{"cve":"CVE-2026-17654","month":"2026-07","title":"Chromium: CVE-2026-17654 Race in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17654"},{"cve":"CVE-2026-17655","month":"2026-07","title":"Chromium: CVE-2026-17655 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17655"},{"cve":"CVE-2026-17656","month":"2026-07","title":"Chromium: CVE-2026-17656 Use after free in Ozone","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17656"},{"cve":"CVE-2026-17657","month":"2026-07","title":"Chromium: CVE-2026-17657 Use after free in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17657"},{"cve":"CVE-2026-17658","month":"2026-07","title":"Chromium: CVE-2026-17658 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17658"},{"cve":"CVE-2026-17659","month":"2026-07","title":"Chromium: CVE-2026-17659 Inappropriate implementation in SiteIsolation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17659"},{"cve":"CVE-2026-17660","month":"2026-07","title":"Chromium: CVE-2026-17660 Insufficient validation of untrusted input in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17660"},{"cve":"CVE-2026-17661","month":"2026-07","title":"Chromium: CVE-2026-17661 Use after free in Loader","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17661"},{"cve":"CVE-2026-17662","month":"2026-07","title":"Chromium: CVE-2026-17662 Insufficient policy enforcement in Prefetch","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17662"},{"cve":"CVE-2026-17663","month":"2026-07","title":"Chromium: CVE-2026-17663 Insufficient validation of untrusted input in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17663"},{"cve":"CVE-2026-17664","month":"2026-07","title":"Chromium: CVE-2026-17664 Insufficient validation of untrusted input in Loader","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17664"},{"cve":"CVE-2026-17665","month":"2026-07","title":"Chromium: CVE-2026-17665 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17665"},{"cve":"CVE-2026-17666","month":"2026-07","title":"Chromium: CVE-2026-17666 Cryptographic Flaw in Enterprise","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17666"},{"cve":"CVE-2026-17667","month":"2026-07","title":"Chromium: CVE-2026-17667 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17667"},{"cve":"CVE-2026-17668","month":"2026-07","title":"Chromium: CVE-2026-17668 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17668"},{"cve":"CVE-2026-17669","month":"2026-07","title":"Chromium: CVE-2026-17669 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17669"},{"cve":"CVE-2026-17670","month":"2026-07","title":"Chromium: CVE-2026-17670 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17670"},{"cve":"CVE-2026-17671","month":"2026-07","title":"Chromium: CVE-2026-17671 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17671"},{"cve":"CVE-2026-17672","month":"2026-07","title":"Chromium: CVE-2026-17672 Insufficient validation of untrusted input in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17672"},{"cve":"CVE-2026-17673","month":"2026-07","title":"Chromium: CVE-2026-17673 Integer overflow in QUIC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17673"},{"cve":"CVE-2026-17674","month":"2026-07","title":"Chromium: CVE-2026-17674 Inappropriate implementation in HTML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17674"},{"cve":"CVE-2026-17675","month":"2026-07","title":"Chromium: CVE-2026-17675 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17675"},{"cve":"CVE-2026-17676","month":"2026-07","title":"Chromium: CVE-2026-17676 Inappropriate implementation in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17676"},{"cve":"CVE-2026-17677","month":"2026-07","title":"Chromium: CVE-2026-17677 Inappropriate implementation in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17677"},{"cve":"CVE-2026-17678","month":"2026-07","title":"Chromium: CVE-2026-17678 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17678"},{"cve":"CVE-2026-17679","month":"2026-07","title":"Chromium: CVE-2026-17679 Insufficient validation of untrusted input in Print Preview","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17679"},{"cve":"CVE-2026-17680","month":"2026-07","title":"Chromium: CVE-2026-17680 Heap buffer overflow in Color","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17680"},{"cve":"CVE-2026-17681","month":"2026-07","title":"Chromium: CVE-2026-17681 Insufficient validation of untrusted input in Web Authentication","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17681"},{"cve":"CVE-2026-17682","month":"2026-07","title":"Chromium: CVE-2026-17682 Integer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17682"},{"cve":"CVE-2026-17683","month":"2026-07","title":"Chromium: CVE-2026-17683 Inappropriate implementation in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17683"},{"cve":"CVE-2026-17684","month":"2026-07","title":"Chromium: CVE-2026-17684 Insufficient validation of untrusted input in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17684"},{"cve":"CVE-2026-17685","month":"2026-07","title":"Chromium: CVE-2026-17685 Use after free in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17685"},{"cve":"CVE-2026-17686","month":"2026-07","title":"Chromium: CVE-2026-17686 Insufficient validation of untrusted input in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17686"},{"cve":"CVE-2026-17687","month":"2026-07","title":"Chromium: CVE-2026-17687 Type Confusion in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17687"},{"cve":"CVE-2026-17688","month":"2026-07","title":"Chromium: CVE-2026-17688 Use after free in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17688"},{"cve":"CVE-2026-17689","month":"2026-07","title":"Chromium: CVE-2026-17689 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17689"},{"cve":"CVE-2026-17690","month":"2026-07","title":"Chromium: CVE-2026-17690 Insufficient validation of untrusted input in PDF","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17690"},{"cve":"CVE-2026-17691","month":"2026-07","title":"Chromium: CVE-2026-17691 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17691"},{"cve":"CVE-2026-17692","month":"2026-07","title":"Chromium: CVE-2026-17692 Use after free in DataTransfer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17692"},{"cve":"CVE-2026-17693","month":"2026-07","title":"Chromium: CVE-2026-17693 Inappropriate implementation in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17693"},{"cve":"CVE-2026-17694","month":"2026-07","title":"Chromium: CVE-2026-17694 Use after free in DOM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17694"},{"cve":"CVE-2026-17695","month":"2026-07","title":"Chromium: CVE-2026-17695 Inappropriate implementation in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17695"},{"cve":"CVE-2026-17696","month":"2026-07","title":"Chromium: CVE-2026-17696 Side-channel information leakage in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17696"},{"cve":"CVE-2026-17697","month":"2026-07","title":"Chromium: CVE-2026-17697 Type Confusion in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17697"},{"cve":"CVE-2026-17698","month":"2026-07","title":"Chromium: CVE-2026-17698 Insufficient validation of untrusted input in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17698"},{"cve":"CVE-2026-17699","month":"2026-07","title":"Chromium: CVE-2026-17699 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17699"},{"cve":"CVE-2026-17700","month":"2026-07","title":"Chromium: CVE-2026-17700 Insufficient validation of untrusted input in Actor","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17700"},{"cve":"CVE-2026-17701","month":"2026-07","title":"Chromium: CVE-2026-17701 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17701"},{"cve":"CVE-2026-17702","month":"2026-07","title":"Chromium: CVE-2026-17702 Inappropriate implementation in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17702"},{"cve":"CVE-2026-17703","month":"2026-07","title":"Chromium: CVE-2026-17703 Policy bypass in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17703"},{"cve":"CVE-2026-17704","month":"2026-07","title":"Chromium: CVE-2026-17704 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17704"},{"cve":"CVE-2026-17705","month":"2026-07","title":"Chromium: CVE-2026-17705 Integer overflow in libxml","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17705"},{"cve":"CVE-2026-17706","month":"2026-07","title":"Chromium: CVE-2026-17706 Insufficient validation of untrusted input in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17706"},{"cve":"CVE-2026-17707","month":"2026-07","title":"Chromium: CVE-2026-17707 Uninitialized Use in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17707"},{"cve":"CVE-2026-17708","month":"2026-07","title":"Chromium: CVE-2026-17708 Use after free in Audio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17708"},{"cve":"CVE-2026-17709","month":"2026-07","title":"Chromium: CVE-2026-17709 Race in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17709"},{"cve":"CVE-2026-17710","month":"2026-07","title":"Chromium: CVE-2026-17710 Inappropriate implementation in MHTML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17710"},{"cve":"CVE-2026-17711","month":"2026-07","title":"Chromium: CVE-2026-17711 Race in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17711"},{"cve":"CVE-2026-17712","month":"2026-07","title":"Chromium: CVE-2026-17712 Race in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17712"},{"cve":"CVE-2026-17713","month":"2026-07","title":"Chromium: CVE-2026-17713 Insufficient validation of untrusted input in Accessibility","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17713"},{"cve":"CVE-2026-17714","month":"2026-07","title":"Chromium: CVE-2026-17714 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17714"},{"cve":"CVE-2026-17715","month":"2026-07","title":"Chromium: CVE-2026-17715 Inappropriate implementation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17715"},{"cve":"CVE-2026-17716","month":"2026-07","title":"Chromium: CVE-2026-17716 Use after free in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17716"},{"cve":"CVE-2026-17717","month":"2026-07","title":"Chromium: CVE-2026-17717 Integer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17717"},{"cve":"CVE-2026-17718","month":"2026-07","title":"Chromium: CVE-2026-17718 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17718"},{"cve":"CVE-2026-17719","month":"2026-07","title":"Chromium: CVE-2026-17719 Use after free in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17719"},{"cve":"CVE-2026-17720","month":"2026-07","title":"Chromium: CVE-2026-17720 Insufficient policy enforcement in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17720"},{"cve":"CVE-2026-17721","month":"2026-07","title":"Chromium: CVE-2026-17721 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17721"},{"cve":"CVE-2026-17722","month":"2026-07","title":"Chromium: CVE-2026-17722 Object lifecycle issue in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17722"},{"cve":"CVE-2026-17723","month":"2026-07","title":"Chromium: CVE-2026-17723 Use after free in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17723"},{"cve":"CVE-2026-17724","month":"2026-07","title":"Chromium: CVE-2026-17724 Race in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17724"},{"cve":"CVE-2026-17725","month":"2026-07","title":"Chromium: CVE-2026-17725 Type Confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17725"},{"cve":"CVE-2026-17726","month":"2026-07","title":"Chromium: CVE-2026-17726 Integer overflow in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17726"},{"cve":"CVE-2026-17727","month":"2026-07","title":"Chromium: CVE-2026-17727 Out of bounds write in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17727"},{"cve":"CVE-2026-17728","month":"2026-07","title":"Chromium: CVE-2026-17728 Inappropriate implementation in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17728"},{"cve":"CVE-2026-17729","month":"2026-07","title":"Chromium: CVE-2026-17729 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17729"},{"cve":"CVE-2026-17730","month":"2026-07","title":"Chromium: CVE-2026-17730 Side-channel information leakage in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17730"},{"cve":"CVE-2026-17731","month":"2026-07","title":"Chromium: CVE-2026-17731 Inappropriate implementation in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17731"},{"cve":"CVE-2026-17732","month":"2026-07","title":"Chromium: CVE-2026-17732 Inappropriate implementation in SVG","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17732"},{"cve":"CVE-2026-17733","month":"2026-07","title":"Chromium: CVE-2026-17733 Inappropriate implementation in QUIC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17733"},{"cve":"CVE-2026-17734","month":"2026-07","title":"Chromium: CVE-2026-17734 Inappropriate implementation in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17734"},{"cve":"CVE-2026-17735","month":"2026-07","title":"Chromium: CVE-2026-17735 Insufficient validation of untrusted input in BFCache","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17735"},{"cve":"CVE-2026-17736","month":"2026-07","title":"Chromium: CVE-2026-17736 Insufficient validation of untrusted input in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17736"},{"cve":"CVE-2026-17737","month":"2026-07","title":"Chromium: CVE-2026-17737 Use after free in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17737"},{"cve":"CVE-2026-17738","month":"2026-07","title":"Chromium: CVE-2026-17738 Insufficient validation of untrusted input in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17738"},{"cve":"CVE-2026-17739","month":"2026-07","title":"Chromium: CVE-2026-17739 Insufficient policy enforcement in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17739"},{"cve":"CVE-2026-17740","month":"2026-07","title":"Chromium: CVE-2026-17740 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17740"},{"cve":"CVE-2026-17741","month":"2026-07","title":"Chromium: CVE-2026-17741 Insufficient validation of untrusted input in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17741"},{"cve":"CVE-2026-17742","month":"2026-07","title":"Chromium: CVE-2026-17742 Insufficient policy enforcement in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17742"},{"cve":"CVE-2026-17743","month":"2026-07","title":"Chromium: CVE-2026-17743 Insufficient policy enforcement in ControlledFrame","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17743"},{"cve":"CVE-2026-17744","month":"2026-07","title":"Chromium: CVE-2026-17744 Inappropriate implementation in File Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17744"},{"cve":"CVE-2026-17745","month":"2026-07","title":"Chromium: CVE-2026-17745 Out of bounds read in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17745"},{"cve":"CVE-2026-17746","month":"2026-07","title":"Chromium: CVE-2026-17746 Use after free in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17746"},{"cve":"CVE-2026-17747","month":"2026-07","title":"Chromium: CVE-2026-17747 Insufficient validation of untrusted input in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17747"},{"cve":"CVE-2026-17748","month":"2026-07","title":"Chromium: CVE-2026-17748 Inappropriate implementation in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17748"},{"cve":"CVE-2026-17749","month":"2026-07","title":"Chromium: CVE-2026-17749 Insufficient validation of untrusted input in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17749"},{"cve":"CVE-2026-17750","month":"2026-07","title":"Chromium: CVE-2026-17750 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17750"},{"cve":"CVE-2026-17751","month":"2026-07","title":"Chromium: CVE-2026-17751 Inappropriate implementation in AdFilter","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17751"},{"cve":"CVE-2026-17752","month":"2026-07","title":"Chromium: CVE-2026-17752 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17752"},{"cve":"CVE-2026-17753","month":"2026-07","title":"Chromium: CVE-2026-17753 Inappropriate implementation in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17753"},{"cve":"CVE-2026-17754","month":"2026-07","title":"Chromium: CVE-2026-17754 Inappropriate implementation in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17754"},{"cve":"CVE-2026-17755","month":"2026-07","title":"Chromium: CVE-2026-17755 Incorrect security UI in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17755"},{"cve":"CVE-2026-17756","month":"2026-07","title":"Chromium: CVE-2026-17756 Insufficient policy enforcement in Presentation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17756"},{"cve":"CVE-2026-17757","month":"2026-07","title":"Chromium: CVE-2026-17757 Uninitialized Use in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17757"},{"cve":"CVE-2026-17758","month":"2026-07","title":"Chromium: CVE-2026-17758 Heap buffer overflow in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17758"},{"cve":"CVE-2026-17759","month":"2026-07","title":"Chromium: CVE-2026-17759 Uninitialized Use in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17759"},{"cve":"CVE-2026-17760","month":"2026-07","title":"Chromium: CVE-2026-17760 Side-channel information leakage in NoStatePrefetch","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17760"},{"cve":"CVE-2026-17761","month":"2026-07","title":"Chromium: CVE-2026-17761 Insufficient validation of untrusted input in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17761"},{"cve":"CVE-2026-17762","month":"2026-07","title":"Chromium: CVE-2026-17762 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17762"},{"cve":"CVE-2026-17763","month":"2026-07","title":"Chromium: CVE-2026-17763 Inappropriate implementation in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17763"},{"cve":"CVE-2026-17764","month":"2026-07","title":"Chromium: CVE-2026-17764 Inappropriate implementation in FedCM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17764"},{"cve":"CVE-2026-17765","month":"2026-07","title":"Chromium: CVE-2026-17765 Inappropriate implementation in WebProtect","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17765"},{"cve":"CVE-2026-17766","month":"2026-07","title":"Chromium: CVE-2026-17766 Insufficient validation of untrusted input in Clipboard","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17766"},{"cve":"CVE-2026-17767","month":"2026-07","title":"Chromium: CVE-2026-17767 Insufficient validation of untrusted input in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17767"},{"cve":"CVE-2026-17768","month":"2026-07","title":"Chromium: CVE-2026-17768 Insufficient validation of untrusted input in WebSockets","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17768"},{"cve":"CVE-2026-17769","month":"2026-07","title":"Chromium: CVE-2026-17769 Insufficient validation of untrusted input in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17769"},{"cve":"CVE-2026-17770","month":"2026-07","title":"Chromium: CVE-2026-17770 Out of bounds read in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17770"},{"cve":"CVE-2026-17771","month":"2026-07","title":"Chromium: CVE-2026-17771 Uninitialized Use in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17771"},{"cve":"CVE-2026-17772","month":"2026-07","title":"Chromium: CVE-2026-17772 Out of bounds read in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17772"},{"cve":"CVE-2026-17773","month":"2026-07","title":"Chromium: CVE-2026-17773 Insufficient validation of untrusted input in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17773"},{"cve":"CVE-2026-17774","month":"2026-07","title":"Chromium: CVE-2026-17774 Insufficient validation of untrusted input in Variations","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17774"},{"cve":"CVE-2026-17775","month":"2026-07","title":"Chromium: CVE-2026-17775 Inappropriate implementation in PresentationAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17775"},{"cve":"CVE-2026-17776","month":"2026-07","title":"Chromium: CVE-2026-17776 Policy bypass in Receiver","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17776"},{"cve":"CVE-2026-17777","month":"2026-07","title":"Chromium: CVE-2026-17777 Inappropriate implementation in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17777"},{"cve":"CVE-2026-17778","month":"2026-07","title":"Chromium: CVE-2026-17778 Use after free in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17778"},{"cve":"CVE-2026-17779","month":"2026-07","title":"Chromium: CVE-2026-17779 Inappropriate implementation in Site Isolation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17779"},{"cve":"CVE-2026-17780","month":"2026-07","title":"Chromium: CVE-2026-17780 Inappropriate implementation in Isolated Web Apps","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17780"},{"cve":"CVE-2026-17781","month":"2026-07","title":"Chromium: CVE-2026-17781 Inappropriate implementation in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17781"},{"cve":"CVE-2026-17782","month":"2026-07","title":"Chromium: CVE-2026-17782 Incorrect security UI in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17782"},{"cve":"CVE-2026-17783","month":"2026-07","title":"Chromium: CVE-2026-17783 Inappropriate implementation in Loader","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17783"},{"cve":"CVE-2026-17784","month":"2026-07","title":"Chromium: CVE-2026-17784 Use after free in Audio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17784"},{"cve":"CVE-2026-17785","month":"2026-07","title":"Chromium: CVE-2026-17785 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17785"},{"cve":"CVE-2026-17786","month":"2026-07","title":"Chromium: CVE-2026-17786 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17786"},{"cve":"CVE-2026-17787","month":"2026-07","title":"Chromium: CVE-2026-17787 Inappropriate implementation in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17787"},{"cve":"CVE-2026-17788","month":"2026-07","title":"Chromium: CVE-2026-17788 Inappropriate implementation in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17788"},{"cve":"CVE-2026-17789","month":"2026-07","title":"Chromium: CVE-2026-17789 Insufficient validation of untrusted input in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17789"},{"cve":"CVE-2026-17790","month":"2026-07","title":"Chromium: CVE-2026-17790 Uninitialized Use in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17790"},{"cve":"CVE-2026-17791","month":"2026-07","title":"Chromium: CVE-2026-17791 Insufficient validation of untrusted input in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17791"},{"cve":"CVE-2026-17792","month":"2026-07","title":"Chromium: CVE-2026-17792 Inappropriate implementation in Credential Management","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17792"},{"cve":"CVE-2026-17793","month":"2026-07","title":"Chromium: CVE-2026-17793 Inappropriate implementation in Messages","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17793"},{"cve":"CVE-2026-17794","month":"2026-07","title":"Chromium: CVE-2026-17794 Insufficient validation of untrusted input in Mobile","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17794"},{"cve":"CVE-2026-17795","month":"2026-07","title":"Chromium: CVE-2026-17795 Insufficient validation of untrusted input in GetUserMedia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17795"},{"cve":"CVE-2026-17796","month":"2026-07","title":"Chromium: CVE-2026-17796 Side-channel information leakage in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17796"},{"cve":"CVE-2026-17797","month":"2026-07","title":"Chromium: CVE-2026-17797 Inappropriate implementation in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17797"},{"cve":"CVE-2026-17798","month":"2026-07","title":"Chromium: CVE-2026-17798 Inappropriate implementation in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17798"},{"cve":"CVE-2026-17799","month":"2026-07","title":"Chromium: CVE-2026-17799 Insufficient validation of untrusted input in Safe Browsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17799"},{"cve":"CVE-2026-17800","month":"2026-07","title":"Chromium: CVE-2026-17800 Side-channel information leakage in MediaRecording","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17800"},{"cve":"CVE-2026-17801","month":"2026-07","title":"Chromium: CVE-2026-17801 Out of bounds memory access in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17801"},{"cve":"CVE-2026-17802","month":"2026-07","title":"Chromium: CVE-2026-17802 Side-channel information leakage in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17802"},{"cve":"CVE-2026-17803","month":"2026-07","title":"Chromium: CVE-2026-17803 Insufficient validation of untrusted input in Save to Drive","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17803"},{"cve":"CVE-2026-17804","month":"2026-07","title":"Chromium: CVE-2026-17804 Use after free in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17804"},{"cve":"CVE-2026-17805","month":"2026-07","title":"Chromium: CVE-2026-17805 Insufficient policy enforcement in Glic","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17805"},{"cve":"CVE-2026-17806","month":"2026-07","title":"Chromium: CVE-2026-17806 Insufficient validation of untrusted input in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17806"},{"cve":"CVE-2026-17807","month":"2026-07","title":"Chromium: CVE-2026-17807 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17807"},{"cve":"CVE-2026-17808","month":"2026-07","title":"Chromium: CVE-2026-17808 Uninitialized Use in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17808"},{"cve":"CVE-2026-17809","month":"2026-07","title":"Chromium: CVE-2026-17809 Insufficient validation of untrusted input in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17809"},{"cve":"CVE-2026-17810","month":"2026-07","title":"Chromium: CVE-2026-17810 Uninitialized Use in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17810"},{"cve":"CVE-2026-17811","month":"2026-07","title":"Chromium: CVE-2026-17811 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17811"},{"cve":"CVE-2026-17812","month":"2026-07","title":"Chromium: CVE-2026-17812 Inappropriate implementation in DigitalCredentials","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17812"},{"cve":"CVE-2026-17813","month":"2026-07","title":"Chromium: CVE-2026-17813 Insufficient policy enforcement in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17813"},{"cve":"CVE-2026-17814","month":"2026-07","title":"Chromium: CVE-2026-17814 Insufficient validation of untrusted input in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17814"},{"cve":"CVE-2026-17815","month":"2026-07","title":"Chromium: CVE-2026-17815 Insufficient policy enforcement in GuestView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17815"},{"cve":"CVE-2026-17816","month":"2026-07","title":"Chromium: CVE-2026-17816 Inappropriate implementation in Speech","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17816"},{"cve":"CVE-2026-17817","month":"2026-07","title":"Chromium: CVE-2026-17817 Inappropriate implementation in ReportingAndNEL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17817"},{"cve":"CVE-2026-17818","month":"2026-07","title":"Chromium: CVE-2026-17818 Inappropriate implementation in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17818"},{"cve":"CVE-2026-17819","month":"2026-07","title":"Chromium: CVE-2026-17819 Inappropriate implementation in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17819"},{"cve":"CVE-2026-17820","month":"2026-07","title":"Chromium: CVE-2026-17820 Insufficient policy enforcement in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17820"},{"cve":"CVE-2026-17821","month":"2026-07","title":"Chromium: CVE-2026-17821 Insufficient policy enforcement in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17821"},{"cve":"CVE-2026-17822","month":"2026-07","title":"Chromium: CVE-2026-17822 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17822"},{"cve":"CVE-2026-17823","month":"2026-07","title":"Chromium: CVE-2026-17823 Insufficient policy enforcement in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17823"},{"cve":"CVE-2026-17824","month":"2026-07","title":"Chromium: CVE-2026-17824 Insufficient policy enforcement in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17824"},{"cve":"CVE-2026-17825","month":"2026-07","title":"Chromium: CVE-2026-17825 Insufficient policy enforcement in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17825"},{"cve":"CVE-2026-17826","month":"2026-07","title":"Chromium: CVE-2026-17826 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17826"},{"cve":"CVE-2026-17827","month":"2026-07","title":"Chromium: CVE-2026-17827 Inappropriate implementation in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17827"},{"cve":"CVE-2026-17828","month":"2026-07","title":"Chromium: CVE-2026-17828 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17828"},{"cve":"CVE-2026-17829","month":"2026-07","title":"Chromium: CVE-2026-17829 Insufficient policy enforcement in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17829"},{"cve":"CVE-2026-17830","month":"2026-07","title":"Chromium: CVE-2026-17830 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17830"},{"cve":"CVE-2026-17831","month":"2026-07","title":"Chromium: CVE-2026-17831 Insufficient validation of untrusted input in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17831"},{"cve":"CVE-2026-17832","month":"2026-07","title":"Chromium: CVE-2026-17832 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17832"},{"cve":"CVE-2026-17833","month":"2026-07","title":"Chromium: CVE-2026-17833 Inappropriate implementation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17833"},{"cve":"CVE-2026-17834","month":"2026-07","title":"Chromium: CVE-2026-17834 Inappropriate implementation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17834"},{"cve":"CVE-2026-17835","month":"2026-07","title":"Chromium: CVE-2026-17835 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17835"},{"cve":"CVE-2026-17836","month":"2026-07","title":"Chromium: CVE-2026-17836 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17836"},{"cve":"CVE-2026-17837","month":"2026-07","title":"Chromium: CVE-2026-17837 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17837"},{"cve":"CVE-2026-17838","month":"2026-07","title":"Chromium: CVE-2026-17838 Incorrect security UI in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17838"},{"cve":"CVE-2026-17839","month":"2026-07","title":"Chromium: CVE-2026-17839 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17839"},{"cve":"CVE-2026-17840","month":"2026-07","title":"Chromium: CVE-2026-17840 Incorrect security UI in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17840"},{"cve":"CVE-2026-17841","month":"2026-07","title":"Chromium: CVE-2026-17841 Race in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17841"},{"cve":"CVE-2026-17842","month":"2026-07","title":"Chromium: CVE-2026-17842 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17842"},{"cve":"CVE-2026-17843","month":"2026-07","title":"Chromium: CVE-2026-17843 Inappropriate implementation in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17843"},{"cve":"CVE-2026-17844","month":"2026-07","title":"Chromium: CVE-2026-17844 Insufficient validation of untrusted input in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17844"},{"cve":"CVE-2026-17845","month":"2026-07","title":"Chromium: CVE-2026-17845 Inappropriate implementation in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17845"},{"cve":"CVE-2026-17846","month":"2026-07","title":"Chromium: CVE-2026-17846 Inappropriate implementation in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17846"},{"cve":"CVE-2026-17847","month":"2026-07","title":"Chromium: CVE-2026-17847 Insufficient validation of untrusted input in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17847"},{"cve":"CVE-2026-17848","month":"2026-07","title":"Chromium: CVE-2026-17848 Insufficient validation of untrusted input in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17848"},{"cve":"CVE-2026-17849","month":"2026-07","title":"Chromium: CVE-2026-17849 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17849"},{"cve":"CVE-2026-17850","month":"2026-07","title":"Chromium: CVE-2026-17850 Inappropriate implementation in Permissions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17850"},{"cve":"CVE-2026-17851","month":"2026-07","title":"Chromium: CVE-2026-17851 Side-channel information leakage in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17851"},{"cve":"CVE-2026-17852","month":"2026-07","title":"Chromium: CVE-2026-17852 Inappropriate implementation in Media Router","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17852"},{"cve":"CVE-2026-17853","month":"2026-07","title":"Chromium: CVE-2026-17853 Inappropriate implementation in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17853"},{"cve":"CVE-2026-17854","month":"2026-07","title":"Chromium: CVE-2026-17854 Insufficient policy enforcement in WebMCP","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17854"},{"cve":"CVE-2026-17855","month":"2026-07","title":"Chromium: CVE-2026-17855 Race in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17855"},{"cve":"CVE-2026-17856","month":"2026-07","title":"Chromium: CVE-2026-17856 Inappropriate implementation in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17856"},{"cve":"CVE-2026-17857","month":"2026-07","title":"Chromium: CVE-2026-17857 Inappropriate implementation in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17857"},{"cve":"CVE-2026-17858","month":"2026-07","title":"Chromium: CVE-2026-17858 Uninitialized Use in WebNN","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17858"},{"cve":"CVE-2026-17859","month":"2026-07","title":"Chromium: CVE-2026-17859 Side-channel information leakage in Favicons","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17859"},{"cve":"CVE-2026-17860","month":"2026-07","title":"Chromium: CVE-2026-17860 Insufficient validation of untrusted input in Mobile","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17860"},{"cve":"CVE-2026-17861","month":"2026-07","title":"Chromium: CVE-2026-17861 Insufficient validation of untrusted input in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17861"},{"cve":"CVE-2026-17862","month":"2026-07","title":"Chromium: CVE-2026-17862 Use after free in Tracing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17862"},{"cve":"CVE-2026-17863","month":"2026-07","title":"Chromium: CVE-2026-17863 Inappropriate implementation in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17863"},{"cve":"CVE-2026-17864","month":"2026-07","title":"Chromium: CVE-2026-17864 Inappropriate implementation in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17864"},{"cve":"CVE-2026-17865","month":"2026-07","title":"Chromium: CVE-2026-17865 Inappropriate implementation in Crypto","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17865"},{"cve":"CVE-2026-17866","month":"2026-07","title":"Chromium: CVE-2026-17866 Type Confusion in Tab","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17866"},{"cve":"CVE-2026-17867","month":"2026-07","title":"Chromium: CVE-2026-17867 Insufficient validation of untrusted input in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17867"},{"cve":"CVE-2026-17868","month":"2026-07","title":"Chromium: CVE-2026-17868 Insufficient policy enforcement in USB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17868"},{"cve":"CVE-2026-17869","month":"2026-07","title":"Chromium: CVE-2026-17869 Out of bounds read in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17869"},{"cve":"CVE-2026-17870","month":"2026-07","title":"Chromium: CVE-2026-17870 Insufficient validation of untrusted input in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17870"},{"cve":"CVE-2026-17871","month":"2026-07","title":"Chromium: CVE-2026-17871 Inappropriate implementation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17871"},{"cve":"CVE-2026-17872","month":"2026-07","title":"Chromium: CVE-2026-17872 Cryptographic Flaw in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17872"},{"cve":"CVE-2026-17873","month":"2026-07","title":"Chromium: CVE-2026-17873 Insufficient policy enforcement in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17873"},{"cve":"CVE-2026-17874","month":"2026-07","title":"Chromium: CVE-2026-17874 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17874"},{"cve":"CVE-2026-17875","month":"2026-07","title":"Chromium: CVE-2026-17875 Use after free in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17875"},{"cve":"CVE-2026-17876","month":"2026-07","title":"Chromium: CVE-2026-17876 Inappropriate implementation in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17876"},{"cve":"CVE-2026-17877","month":"2026-07","title":"Chromium: CVE-2026-17877 Inappropriate implementation in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17877"},{"cve":"CVE-2026-17878","month":"2026-07","title":"Chromium: CVE-2026-17878 Inappropriate implementation in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17878"},{"cve":"CVE-2026-17879","month":"2026-07","title":"Chromium: CVE-2026-17879 Inappropriate implementation in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17879"},{"cve":"CVE-2026-17880","month":"2026-07","title":"Chromium: CVE-2026-17880 Inappropriate implementation in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17880"},{"cve":"CVE-2026-17881","month":"2026-07","title":"Chromium: CVE-2026-17881 Use after free in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17881"},{"cve":"CVE-2026-17882","month":"2026-07","title":"Chromium: CVE-2026-17882 Policy bypass in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17882"},{"cve":"CVE-2026-17883","month":"2026-07","title":"Chromium: CVE-2026-17883 Inappropriate implementation in Headless","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17883"},{"cve":"CVE-2026-17884","month":"2026-07","title":"Chromium: CVE-2026-17884 Object lifecycle issue in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17884"},{"cve":"CVE-2026-17885","month":"2026-07","title":"Chromium: CVE-2026-17885 Inappropriate implementation in Paint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17885"},{"cve":"CVE-2026-17886","month":"2026-07","title":"Chromium: CVE-2026-17886 Use after free in Enterprise","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17886"},{"cve":"CVE-2026-17887","month":"2026-07","title":"Chromium: CVE-2026-17887 Use after free in TabStrip","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17887"},{"cve":"CVE-2026-17888","month":"2026-07","title":"Chromium: CVE-2026-17888 Insufficient validation of untrusted input in WebUI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17888"},{"cve":"CVE-2026-17889","month":"2026-07","title":"Chromium: CVE-2026-17889 Uninitialized Use in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17889"},{"cve":"CVE-2026-17890","month":"2026-07","title":"Chromium: CVE-2026-17890 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17890"},{"cve":"CVE-2026-17891","month":"2026-07","title":"Chromium: CVE-2026-17891 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17891"},{"cve":"CVE-2026-17892","month":"2026-07","title":"Chromium: CVE-2026-17892 Inappropriate implementation in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17892"},{"cve":"CVE-2026-17893","month":"2026-07","title":"Chromium: CVE-2026-17893 Insufficient validation of untrusted input in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17893"},{"cve":"CVE-2026-17894","month":"2026-07","title":"Chromium: CVE-2026-17894 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17894"},{"cve":"CVE-2026-17895","month":"2026-07","title":"Chromium: CVE-2026-17895 Inappropriate implementation in DataTransfer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17895"},{"cve":"CVE-2026-17896","month":"2026-07","title":"Chromium: CVE-2026-17896 Use after free in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17896"},{"cve":"CVE-2026-17897","month":"2026-07","title":"Chromium: CVE-2026-17897 Inappropriate implementation in ORB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17897"},{"cve":"CVE-2026-17898","month":"2026-07","title":"Chromium: CVE-2026-17898 Use after free in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17898"},{"cve":"CVE-2026-17899","month":"2026-07","title":"Chromium: CVE-2026-17899 Insufficient policy enforcement in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17899"},{"cve":"CVE-2026-17900","month":"2026-07","title":"Chromium: CVE-2026-17900 Inappropriate implementation in Enterprise","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17900"},{"cve":"CVE-2026-17901","month":"2026-07","title":"Chromium: CVE-2026-17901 Inappropriate implementation in Sharing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17901"},{"cve":"CVE-2026-17902","month":"2026-07","title":"Chromium: CVE-2026-17902 Inappropriate implementation in Editing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17902"},{"cve":"CVE-2026-17903","month":"2026-07","title":"Chromium: CVE-2026-17903 Insufficient policy enforcement in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17903"},{"cve":"CVE-2026-17904","month":"2026-07","title":"Chromium: CVE-2026-17904 Insufficient policy enforcement in NFC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17904"},{"cve":"CVE-2026-17905","month":"2026-07","title":"Chromium: CVE-2026-17905 Inappropriate implementation in SurfaceCapture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17905"},{"cve":"CVE-2026-17906","month":"2026-07","title":"Chromium: CVE-2026-17906 Insufficient validation of untrusted input in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17906"},{"cve":"CVE-2026-17907","month":"2026-07","title":"Chromium: CVE-2026-17907 Side-channel information leakage in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17907"},{"cve":"CVE-2026-17908","month":"2026-07","title":"Chromium: CVE-2026-17908 Insufficient validation of untrusted input in Printing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17908"},{"cve":"CVE-2026-17909","month":"2026-07","title":"Chromium: CVE-2026-17909 Insufficient validation of untrusted input in Isolated Web Apps","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17909"},{"cve":"CVE-2026-17910","month":"2026-07","title":"Chromium: CVE-2026-17910 Insufficient policy enforcement in NFC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17910"},{"cve":"CVE-2026-17911","month":"2026-07","title":"Chromium: CVE-2026-17911 Insufficient policy enforcement in SVG","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17911"},{"cve":"CVE-2026-17912","month":"2026-07","title":"Chromium: CVE-2026-17912 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17912"},{"cve":"CVE-2026-17913","month":"2026-07","title":"Chromium: CVE-2026-17913 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17913"},{"cve":"CVE-2026-17914","month":"2026-07","title":"Chromium: CVE-2026-17914 Side-channel information leakage in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17914"},{"cve":"CVE-2026-17915","month":"2026-07","title":"Chromium: CVE-2026-17915 Inappropriate implementation in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17915"},{"cve":"CVE-2026-17916","month":"2026-07","title":"Chromium: CVE-2026-17916 Insufficient policy enforcement in Settings","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17916"},{"cve":"CVE-2026-17917","month":"2026-07","title":"Chromium: CVE-2026-17917 Policy bypass in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17917"},{"cve":"CVE-2026-17918","month":"2026-07","title":"Chromium: CVE-2026-17918 Use after free in Sync","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17918"},{"cve":"CVE-2026-17919","month":"2026-07","title":"Chromium: CVE-2026-17919 Insufficient policy enforcement in Enterprise","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17919"},{"cve":"CVE-2026-17920","month":"2026-07","title":"Chromium: CVE-2026-17920 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17920"},{"cve":"CVE-2026-17921","month":"2026-07","title":"Chromium: CVE-2026-17921 Insufficient validation of untrusted input in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17921"},{"cve":"CVE-2026-17922","month":"2026-07","title":"Chromium: CVE-2026-17922 Inappropriate implementation in Enterprise","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17922"},{"cve":"CVE-2026-17923","month":"2026-07","title":"Chromium: CVE-2026-17923 Policy bypass in Enterprise","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17923"},{"cve":"CVE-2026-17924","month":"2026-07","title":"Chromium: CVE-2026-17924 Use after free in DNS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17924"},{"cve":"CVE-2026-17925","month":"2026-07","title":"Chromium: CVE-2026-17925 Inappropriate implementation in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17925"},{"cve":"CVE-2026-17926","month":"2026-07","title":"Chromium: CVE-2026-17926 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17926"},{"cve":"CVE-2026-17927","month":"2026-07","title":"Chromium: CVE-2026-17927 Insufficient policy enforcement in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17927"},{"cve":"CVE-2026-17928","month":"2026-07","title":"Chromium: CVE-2026-17928 Inappropriate implementation in DataTransfer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17928"},{"cve":"CVE-2026-17929","month":"2026-07","title":"Chromium: CVE-2026-17929 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17929"},{"cve":"CVE-2026-17930","month":"2026-07","title":"Chromium: CVE-2026-17930 Insufficient validation of untrusted input in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17930"},{"cve":"CVE-2026-17931","month":"2026-07","title":"Chromium: CVE-2026-17931 Inappropriate implementation in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17931"},{"cve":"CVE-2026-17932","month":"2026-07","title":"Chromium: CVE-2026-17932 Use after free in DataTransfer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17932"},{"cve":"CVE-2026-17933","month":"2026-07","title":"Chromium: CVE-2026-17933 Inappropriate implementation in DOMStorage","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17933"},{"cve":"CVE-2026-17934","month":"2026-07","title":"Chromium: CVE-2026-17934 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17934"},{"cve":"CVE-2026-17935","month":"2026-07","title":"Chromium: CVE-2026-17935 Heap buffer overflow in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17935"},{"cve":"CVE-2026-17936","month":"2026-07","title":"Chromium: CVE-2026-17936 Inappropriate implementation in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17936"},{"cve":"CVE-2026-17937","month":"2026-07","title":"Chromium: CVE-2026-17937 Inappropriate implementation in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17937"},{"cve":"CVE-2026-17938","month":"2026-07","title":"Chromium: CVE-2026-17938 Inappropriate implementation in FullScreen","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17938"},{"cve":"CVE-2026-17939","month":"2026-07","title":"Chromium: CVE-2026-17939 Inappropriate implementation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17939"},{"cve":"CVE-2026-17940","month":"2026-07","title":"Chromium: CVE-2026-17940 Insufficient validation of untrusted input in Picture-in-Picture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17940"},{"cve":"CVE-2026-17941","month":"2026-07","title":"Chromium: CVE-2026-17941 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17941"},{"cve":"CVE-2026-17942","month":"2026-07","title":"Chromium: CVE-2026-17942 Side-channel information leakage in SVG","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17942"},{"cve":"CVE-2026-17943","month":"2026-07","title":"Chromium: CVE-2026-17943 Inappropriate implementation in Parser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17943"},{"cve":"CVE-2026-17944","month":"2026-07","title":"Chromium: CVE-2026-17944 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17944"},{"cve":"CVE-2026-17945","month":"2026-07","title":"Chromium: CVE-2026-17945 Inappropriate implementation in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17945"},{"cve":"CVE-2026-17946","month":"2026-07","title":"Chromium: CVE-2026-17946 Uninitialized Use in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17946"},{"cve":"CVE-2026-17947","month":"2026-07","title":"Chromium: CVE-2026-17947 Use after free in WebSockets","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17947"},{"cve":"CVE-2026-17948","month":"2026-07","title":"Chromium: CVE-2026-17948 Type Confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17948"},{"cve":"CVE-2026-17949","month":"2026-07","title":"Chromium: CVE-2026-17949 Uninitialized Use in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17949"},{"cve":"CVE-2026-17950","month":"2026-07","title":"Chromium: CVE-2026-17950 Policy bypass in Safebrowsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17950"},{"cve":"CVE-2026-17951","month":"2026-07","title":"Chromium: CVE-2026-17951 Heap buffer overflow in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17951"},{"cve":"CVE-2026-17952","month":"2026-07","title":"Chromium: CVE-2026-17952 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17952"},{"cve":"CVE-2026-17953","month":"2026-07","title":"Chromium: CVE-2026-17953 Insufficient policy enforcement in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17953"},{"cve":"CVE-2026-17954","month":"2026-07","title":"Chromium: CVE-2026-17954 Policy bypass in MHTML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17954"},{"cve":"CVE-2026-17955","month":"2026-07","title":"Chromium: CVE-2026-17955 Insufficient validation of untrusted input in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17955"},{"cve":"CVE-2026-17956","month":"2026-07","title":"Chromium: CVE-2026-17956 Inappropriate implementation in Scheduling","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17956"},{"cve":"CVE-2026-17957","month":"2026-07","title":"Chromium: CVE-2026-17957 Inappropriate implementation in CORS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17957"},{"cve":"CVE-2026-17958","month":"2026-07","title":"Chromium: CVE-2026-17958 Inappropriate implementation in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17958"},{"cve":"CVE-2026-17959","month":"2026-07","title":"Chromium: CVE-2026-17959 Inappropriate implementation in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17959"},{"cve":"CVE-2026-17960","month":"2026-07","title":"Chromium: CVE-2026-17960 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17960"},{"cve":"CVE-2026-17961","month":"2026-07","title":"Chromium: CVE-2026-17961 Inappropriate implementation in Session","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17961"},{"cve":"CVE-2026-17962","month":"2026-07","title":"Chromium: CVE-2026-17962 Inappropriate implementation in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17962"},{"cve":"CVE-2026-17963","month":"2026-07","title":"Chromium: CVE-2026-17963 Inappropriate implementation in SVG","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17963"},{"cve":"CVE-2026-17964","month":"2026-07","title":"Chromium: CVE-2026-17964 Incorrect security UI in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17964"},{"cve":"CVE-2026-17965","month":"2026-07","title":"Chromium: CVE-2026-17965 Incorrect security UI in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17965"},{"cve":"CVE-2026-17966","month":"2026-07","title":"Chromium: CVE-2026-17966 Inappropriate implementation in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17966"},{"cve":"CVE-2026-17967","month":"2026-07","title":"Chromium: CVE-2026-17967 Use after free in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17967"},{"cve":"CVE-2026-17968","month":"2026-07","title":"Chromium: CVE-2026-17968 Uninitialized Use in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17968"},{"cve":"CVE-2026-17969","month":"2026-07","title":"Chromium: CVE-2026-17969 Inappropriate implementation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17969"},{"cve":"CVE-2026-17970","month":"2026-07","title":"Chromium: CVE-2026-17970 Insufficient validation of untrusted input in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17970"},{"cve":"CVE-2026-17971","month":"2026-07","title":"Chromium: CVE-2026-17971 Inappropriate implementation in Frame","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17971"},{"cve":"CVE-2026-17972","month":"2026-07","title":"Chromium: CVE-2026-17972 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17972"},{"cve":"CVE-2026-17973","month":"2026-07","title":"Chromium: CVE-2026-17973 Inappropriate implementation in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17973"},{"cve":"CVE-2026-17974","month":"2026-07","title":"Chromium: CVE-2026-17974 Insufficient policy enforcement in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17974"},{"cve":"CVE-2026-17975","month":"2026-07","title":"Chromium: CVE-2026-17975 Inappropriate implementation in IME","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17975"},{"cve":"CVE-2026-17976","month":"2026-07","title":"Chromium: CVE-2026-17976 Policy bypass in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17976"},{"cve":"CVE-2026-17977","month":"2026-07","title":"Chromium: CVE-2026-17977 Policy bypass in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17977"},{"cve":"CVE-2026-17978","month":"2026-07","title":"Chromium: CVE-2026-17978 Side-channel information leakage in WebCodecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17978"},{"cve":"CVE-2026-17979","month":"2026-07","title":"Chromium: CVE-2026-17979 Race in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17979"},{"cve":"CVE-2026-17980","month":"2026-07","title":"Chromium: CVE-2026-17980 Inappropriate implementation in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17980"},{"cve":"CVE-2026-17981","month":"2026-07","title":"Chromium: CVE-2026-17981 Inappropriate implementation in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17981"},{"cve":"CVE-2026-17982","month":"2026-07","title":"Chromium: CVE-2026-17982 Insufficient validation of untrusted input in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17982"},{"cve":"CVE-2026-17983","month":"2026-07","title":"Chromium: CVE-2026-17983 Incorrect security UI in Global Media Controls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17983"},{"cve":"CVE-2026-17984","month":"2026-07","title":"Chromium: CVE-2026-17984 Inappropriate implementation in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17984"},{"cve":"CVE-2026-17985","month":"2026-07","title":"Chromium: CVE-2026-17985 Insufficient policy enforcement in Speech","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17985"},{"cve":"CVE-2026-17986","month":"2026-07","title":"Chromium: CVE-2026-17986 Insufficient policy enforcement in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17986"},{"cve":"CVE-2026-17987","month":"2026-07","title":"Chromium: CVE-2026-17987 Insufficient validation of untrusted input in Notifications","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17987"},{"cve":"CVE-2026-17988","month":"2026-07","title":"Chromium: CVE-2026-17988 Insufficient validation of untrusted input in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17988"},{"cve":"CVE-2026-17989","month":"2026-07","title":"Chromium: CVE-2026-17989 Type Confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17989"},{"cve":"CVE-2026-17990","month":"2026-07","title":"Chromium: CVE-2026-17990 Insufficient validation of untrusted input in WebAuthn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17990"},{"cve":"CVE-2026-17991","month":"2026-07","title":"Chromium: CVE-2026-17991 Insufficient validation of untrusted input in AI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17991"},{"cve":"CVE-2026-17992","month":"2026-07","title":"Chromium: CVE-2026-17992 Uninitialized Use in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17992"},{"cve":"CVE-2026-17993","month":"2026-07","title":"Chromium: CVE-2026-17993 Race in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17993"},{"cve":"CVE-2026-17994","month":"2026-07","title":"Chromium: CVE-2026-17994 Inappropriate implementation in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17994"},{"cve":"CVE-2026-17995","month":"2026-07","title":"Chromium: CVE-2026-17995 Out of bounds read in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17995"},{"cve":"CVE-2026-17996","month":"2026-07","title":"Chromium: CVE-2026-17996 Inappropriate implementation in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17996"},{"cve":"CVE-2026-17997","month":"2026-07","title":"Chromium: CVE-2026-17997 Inappropriate implementation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17997"},{"cve":"CVE-2026-17998","month":"2026-07","title":"Chromium: CVE-2026-17998 Incorrect security UI in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17998"},{"cve":"CVE-2026-17999","month":"2026-07","title":"Chromium: CVE-2026-17999 Incorrect security UI in PictureInPicture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17999"},{"cve":"CVE-2026-18000","month":"2026-07","title":"Chromium: CVE-2026-18000 Insufficient policy enforcement in USB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18000"},{"cve":"CVE-2026-18001","month":"2026-07","title":"Chromium: CVE-2026-18001 Inappropriate implementation in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18001"},{"cve":"CVE-2026-18002","month":"2026-07","title":"Chromium: CVE-2026-18002 Insufficient validation of untrusted input in Google Lens","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18002"},{"cve":"CVE-2026-18003","month":"2026-07","title":"Chromium: CVE-2026-18003 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18003"},{"cve":"CVE-2026-18004","month":"2026-07","title":"Chromium: CVE-2026-18004 Insufficient policy enforcement in Speech","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18004"},{"cve":"CVE-2026-18005","month":"2026-07","title":"Chromium: CVE-2026-18005 Inappropriate implementation in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18005"},{"cve":"CVE-2026-18006","month":"2026-07","title":"Chromium: CVE-2026-18006 Inappropriate implementation in Google Lens","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18006"},{"cve":"CVE-2026-18007","month":"2026-07","title":"Chromium: CVE-2026-18007 Inappropriate implementation in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18007"},{"cve":"CVE-2026-18008","month":"2026-07","title":"Chromium: CVE-2026-18008 Inappropriate implementation in Settings","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18008"},{"cve":"CVE-2026-18009","month":"2026-07","title":"Chromium: CVE-2026-18009 Insufficient validation of untrusted input in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18009"},{"cve":"CVE-2026-18010","month":"2026-07","title":"Chromium: CVE-2026-18010 Inappropriate implementation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18010"},{"cve":"CVE-2026-18011","month":"2026-07","title":"Chromium: CVE-2026-18011 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18011"},{"cve":"CVE-2026-18012","month":"2026-07","title":"Chromium: CVE-2026-18012 Use after free in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18012"},{"cve":"CVE-2026-18013","month":"2026-07","title":"Chromium: CVE-2026-18013 Inappropriate implementation in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18013"},{"cve":"CVE-2026-18014","month":"2026-07","title":"Chromium: CVE-2026-18014 Insufficient validation of untrusted input in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18014"},{"cve":"CVE-2026-18015","month":"2026-07","title":"Chromium: CVE-2026-18015 Inappropriate implementation in Tint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18015"},{"cve":"CVE-2026-18016","month":"2026-07","title":"Chromium: CVE-2026-18016 Insufficient policy enforcement in Chrome for iOS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18016"},{"cve":"CVE-2026-18017","month":"2026-07","title":"Chromium: CVE-2026-18017 Use after free in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18017"},{"cve":"CVE-2026-18018","month":"2026-07","title":"Chromium: CVE-2026-18018 Inappropriate implementation in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18018"},{"cve":"CVE-2026-18019","month":"2026-07","title":"Chromium: CVE-2026-18019 Side-channel information leakage in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18019"},{"cve":"CVE-2026-26145","month":"2026-07","title":"Microsoft Azure Synapse Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Synapse","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26145"},{"cve":"CVE-2026-33842","month":"2026-07","title":"Windows File Explorer Information Disclosure Vulnerability","family":"Windows","component":"Windows File Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33842"},{"cve":"CVE-2026-34328","month":"2026-07","title":"Windows Audio Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Audio Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34328"},{"cve":"CVE-2026-34346","month":"2026-07","title":"Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-319"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34346"},{"cve":"CVE-2026-34348","month":"2026-07","title":"Windows Event Logging Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Event Logging Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34348"},{"cve":"CVE-2026-34349","month":"2026-07","title":"Windows Media Information Disclosure Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34349"},{"cve":"CVE-2026-35425","month":"2026-07","title":"Azure API Management (APIM) Remote Code Execution Vulnerability","family":"Azure","component":"Azure API Management (APIM)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35425"},{"cve":"CVE-2026-40378","month":"2026-07","title":"Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability","family":"Windows","component":"Windows Local Security Authority Subsystem Service (LSASS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40378"},{"cve":"CVE-2026-40400","month":"2026-07","title":"Windows PowerShell Remote Code Execution Vulnerability","family":"Windows","component":"Windows PowerShell","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40400"},{"cve":"CVE-2026-40422","month":"2026-07","title":"Windows File Explorer Information Disclosure Vulnerability","family":"Windows","component":"Windows File Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40422"},{"cve":"CVE-2026-41087","month":"2026-07","title":"Windows File Explorer Information Disclosure Vulnerability","family":"Windows","component":"Windows File Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41087"},{"cve":"CVE-2026-41106","month":"2026-07","title":"Microsoft 365 Copilot Elevation of Privilege Vulnerability","family":"Apps","component":"M365 Copilot","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-601"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41106"},{"cve":"CVE-2026-42900","month":"2026-07","title":"Microsoft Windows App Store Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows App Store","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42900"},{"cve":"CVE-2026-42975","month":"2026-07","title":"Windows Bluetooth Port Driver Remote Code Execution","family":"Windows","component":"Windows Bluetooth Port Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42975"},{"cve":"CVE-2026-42982","month":"2026-07","title":"Windows Secure Kernel Mode Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Secure Kernel Mode","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1288"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42982"},{"cve":"CVE-2026-42990","month":"2026-07","title":"SQL Server ODBC driver Elevation of Privilege Vulnerability","family":"Windows","component":"SQL Server ODBC driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42990"},{"cve":"CVE-2026-44800","month":"2026-07","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44800"},{"cve":"CVE-2026-44806","month":"2026-07","title":"Windows Secure Channel Denial of Service Vulnerability","family":"Windows","component":"Windows Cryptographic Services","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44806"},{"cve":"CVE-2026-45488","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45488"},{"cve":"CVE-2026-45489","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-749"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45489"},{"cve":"CVE-2026-45496","month":"2026-07","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45496"},{"cve":"CVE-2026-45499","month":"2026-07","title":"Azure OpenAI Elevation of Privilege Vulnerability","family":"Azure","component":"Azure OpenAI","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45499"},{"cve":"CVE-2026-45646","month":"2026-07","title":"OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45646"},{"cve":"CVE-2026-47282","month":"2026-07","title":"GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability","family":"Developer Tools","component":"GitHub Copilot and Visual Studio Code","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-522","CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47282"},{"cve":"CVE-2026-47290","month":"2026-07","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47290"},{"cve":"CVE-2026-47295","month":"2026-07","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47295"},{"cve":"CVE-2026-47296","month":"2026-07","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47296"},{"cve":"CVE-2026-47300","month":"2026-07","title":"ASP.NET Core Elevation of Privilege Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-303"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300"},{"cve":"CVE-2026-47301","month":"2026-07","title":"Configuration Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Configuration Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47301"},{"cve":"CVE-2026-47302","month":"2026-07","title":".NET Denial of Service Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302"},{"cve":"CVE-2026-47303","month":"2026-07","title":"ASP.NET Core Elevation of Privilege Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-302","CWE-863","CWE-90"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303"},{"cve":"CVE-2026-47304","month":"2026-07","title":".NET Security Feature Bypass Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-347","CWE-345"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304"},{"cve":"CVE-2026-47305","month":"2026-07","title":"Visual Studio Remote Code Execution Vulnerability","family":"Developer Tools","component":"Visual Studio","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47305"},{"cve":"CVE-2026-47632","month":"2026-07","title":"Azure Connected Machine Agent Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Connected Machine Agent","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47632"},{"cve":"CVE-2026-47642","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47642"},{"cve":"CVE-2026-48561","month":"2026-07","title":"Microsoft Edge Copilot Remote Code Execution Vulnerability","family":"Browser","component":"Copilot Chat (Microsoft Edge)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48561"},{"cve":"CVE-2026-48564","month":"2026-07","title":"DHCP Server Service Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48564"},{"cve":"CVE-2026-48571","month":"2026-07","title":"Windows App Package Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows App Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48571"},{"cve":"CVE-2026-48572","month":"2026-07","title":"Windows App Package Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows App Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48572"},{"cve":"CVE-2026-48580","month":"2026-07","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48580"},{"cve":"CVE-2026-48581","month":"2026-07","title":"Surface Broker SDMA Elevation of Privilege Vulnerability","family":"Device","component":"Microsoft Surface","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1220"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48581"},{"cve":"CVE-2026-49159","month":"2026-07","title":"Microsoft Graph Information Disclosure Vulnerability","family":"Azure","component":"Microsoft Graph","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49159"},{"cve":"CVE-2026-49162","month":"2026-07","title":"Microsoft Brokering File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Brokering File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49162"},{"cve":"CVE-2026-49164","month":"2026-07","title":"Windows Active Directory Domain Services Remote Code Execution Vulnerability","family":"Windows","component":"Active Directory Domain Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49164"},{"cve":"CVE-2026-49165","month":"2026-07","title":"Microsoft Windows App Store Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Windows App Store","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49165"},{"cve":"CVE-2026-49166","month":"2026-07","title":"Windows Print Configuration Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Printer Drivers","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49166"},{"cve":"CVE-2026-49167","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49167"},{"cve":"CVE-2026-49168","month":"2026-07","title":"Storage Spaces Direct Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage Spaces Direct","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49168"},{"cve":"CVE-2026-49169","month":"2026-07","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49169"},{"cve":"CVE-2026-49170","month":"2026-07","title":"Windows StateRepository API Server file Elevation of Privilege Vulnerability","family":"Windows","component":"Windows StateRepository API","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1220","CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49170"},{"cve":"CVE-2026-49171","month":"2026-07","title":"Windows Speech Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Speech","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49171"},{"cve":"CVE-2026-49172","month":"2026-07","title":"Windows FTP Service Remote Code Execution Vulnerability","family":"Windows","component":"Windows FTP Service","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49172"},{"cve":"CVE-2026-49173","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49173"},{"cve":"CVE-2026-49174","month":"2026-07","title":"DNS Client Tampering Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49174"},{"cve":"CVE-2026-49175","month":"2026-07","title":"Windows DNS Client Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49175"},{"cve":"CVE-2026-49176","month":"2026-07","title":"Windows WalletService Elevation of Privilege Vulnerability","family":"Windows","component":"Windows WalletService","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-269","CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49176"},{"cve":"CVE-2026-49177","month":"2026-07","title":"Windows TCP/IP Information Disclosure Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49177"},{"cve":"CVE-2026-49178","month":"2026-07","title":"Windows Active Directory Domain Services Remote Code Execution Vulnerability","family":"Windows","component":"Active Directory Domain Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49178"},{"cve":"CVE-2026-49180","month":"2026-07","title":"Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability","family":"Windows","component":"Universal Plug and Play (upnp.dll)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49180"},{"cve":"CVE-2026-49181","month":"2026-07","title":"Windows DHCP Client Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DHCP Client","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49181"},{"cve":"CVE-2026-49183","month":"2026-07","title":"Windows Clipboard Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Clipboard Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49183"},{"cve":"CVE-2026-49184","month":"2026-07","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49184"},{"cve":"CVE-2026-49783","month":"2026-07","title":"Secure Boot Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Secure Boot","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-358"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49783"},{"cve":"CVE-2026-49784","month":"2026-07","title":"Microsoft Windows App Store Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows App Store","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49784"},{"cve":"CVE-2026-49787","month":"2026-07","title":"HTTP.sys Denial of Service Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49787"},{"cve":"CVE-2026-49788","month":"2026-07","title":"HTTP/2 Denial of Service Vulnerability","family":"Windows","component":"HTTP/2","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49788"},{"cve":"CVE-2026-49789","month":"2026-07","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49789"},{"cve":"CVE-2026-49790","month":"2026-07","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49790"},{"cve":"CVE-2026-49791","month":"2026-07","title":"Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49791"},{"cve":"CVE-2026-49792","month":"2026-07","title":"Windows Resilient File System (ReFS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49792"},{"cve":"CVE-2026-49793","month":"2026-07","title":"Windows Resilient File System (ReFS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49793"},{"cve":"CVE-2026-49794","month":"2026-07","title":"Windows USB Audio Class Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows USB Audio Class driver (usbaudio.sys)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49794"},{"cve":"CVE-2026-49795","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49795"},{"cve":"CVE-2026-49796","month":"2026-07","title":"Windows GDI+ Remote Code Execution Vulnerability","family":"Windows","component":"Windows GDI+","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49796"},{"cve":"CVE-2026-49797","month":"2026-07","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49797"},{"cve":"CVE-2026-49798","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49798"},{"cve":"CVE-2026-49799","month":"2026-07","title":"Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability","family":"Windows","component":"Windows Local Security Authority Subsystem Service (LSASS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49799"},{"cve":"CVE-2026-49800","month":"2026-07","title":"Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Web Proxy Auto-Discovery Protocol (WPAD)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49800"},{"cve":"CVE-2026-49801","month":"2026-07","title":"Windows SMB Information Disclosure Vulnerability","family":"Windows","component":"Windows SMB","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49801"},{"cve":"CVE-2026-49802","month":"2026-07","title":"Windows USB Print Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Print Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49802"},{"cve":"CVE-2026-49803","month":"2026-07","title":"Windows AppX Deployment Extensions Elevation of Privilege Vulnerability","family":"Windows","component":"Windows AppX Deployment Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49803"},{"cve":"CVE-2026-49804","month":"2026-07","title":"Windows USB Video Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Video Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49804"},{"cve":"CVE-2026-49805","month":"2026-07","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49805"},{"cve":"CVE-2026-49806","month":"2026-07","title":"Windows USB Print Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Print Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49806"},{"cve":"CVE-2026-49807","month":"2026-07","title":"Windows DirectX Information Disclosure Vulnerability","family":"Windows","component":"Windows DirectX","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49807"},{"cve":"CVE-2026-49808","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49808"},{"cve":"CVE-2026-50293","month":"2026-07","title":"Windows Internal Task Bar Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Internal Task Bar","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50293"},{"cve":"CVE-2026-50294","month":"2026-07","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50294"},{"cve":"CVE-2026-50295","month":"2026-07","title":"Windows Zero Trust DNS Security Feature Bypass Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-269"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50295"},{"cve":"CVE-2026-50296","month":"2026-07","title":"DirectX Graphics Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Graphics Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50296"},{"cve":"CVE-2026-50297","month":"2026-07","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50297"},{"cve":"CVE-2026-50298","month":"2026-07","title":"Windows Spaceport.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50298"},{"cve":"CVE-2026-50299","month":"2026-07","title":"Windows Storage Spaces Direct Remote Code Execution Vulnerability","family":"Windows","component":"Windows Storage Spaces Direct","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50299"},{"cve":"CVE-2026-50300","month":"2026-07","title":"Windows DWM Core Library Information Disclosure  Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50300"},{"cve":"CVE-2026-50301","month":"2026-07","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50301"},{"cve":"CVE-2026-50302","month":"2026-07","title":"Windows Cryptographic Services Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Cryptographic Services","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50302"},{"cve":"CVE-2026-50303","month":"2026-07","title":"Windows Key Guard Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Key Guard","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-1240"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50303"},{"cve":"CVE-2026-50304","month":"2026-07","title":"Windows Active Directory Federation Services Denial of Service Vulnerability","family":"Developer Tools","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50304"},{"cve":"CVE-2026-50305","month":"2026-07","title":"Microsoft Brokering File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Brokering File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50305"},{"cve":"CVE-2026-50306","month":"2026-07","title":"Windows TCP/IP Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50306"},{"cve":"CVE-2026-50307","month":"2026-07","title":"Windows TCP/IP Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50307"},{"cve":"CVE-2026-50308","month":"2026-07","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50308"},{"cve":"CVE-2026-50309","month":"2026-07","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50309"},{"cve":"CVE-2026-50310","month":"2026-07","title":"Windows Human Interface Device Information Disclosure Vulnerability","family":"Windows","component":"Windows Devices Human Interface","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50310"},{"cve":"CVE-2026-50311","month":"2026-07","title":"Windows Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50311"},{"cve":"CVE-2026-50312","month":"2026-07","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50312"},{"cve":"CVE-2026-50313","month":"2026-07","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50313"},{"cve":"CVE-2026-50314","month":"2026-07","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50314"},{"cve":"CVE-2026-50315","month":"2026-07","title":"Windows Image Acquisition Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Image Acquisition","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50315"},{"cve":"CVE-2026-50316","month":"2026-07","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-532"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50316"},{"cve":"CVE-2026-50317","month":"2026-07","title":"Windows Operating Systems Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Operating Systems","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50317"},{"cve":"CVE-2026-50318","month":"2026-07","title":"Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50318"},{"cve":"CVE-2026-50321","month":"2026-07","title":"Windows USB Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50321"},{"cve":"CVE-2026-50322","month":"2026-07","title":"Windows Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50322"},{"cve":"CVE-2026-50323","month":"2026-07","title":"Windows Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50323"},{"cve":"CVE-2026-50324","month":"2026-07","title":"Windows Active Directory Federation Services Denial of Service Vulnerability","family":"Developer Tools","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50324"},{"cve":"CVE-2026-50325","month":"2026-07","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50325"},{"cve":"CVE-2026-50326","month":"2026-07","title":"Windows Unified Consent System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Unified Consent System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50326"},{"cve":"CVE-2026-50327","month":"2026-07","title":"Windows Media Remote Code Execution Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50327"},{"cve":"CVE-2026-50328","month":"2026-07","title":"Windows Server Update Service (WSUS) Tampering Vulnerability","family":"Windows","component":"Windows Server Update Service","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-248","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50328"},{"cve":"CVE-2026-50329","month":"2026-07","title":"Microsoft DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50329"},{"cve":"CVE-2026-50330","month":"2026-07","title":"Windows Remote Desktop Client Elevation of Privilege Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50330"},{"cve":"CVE-2026-50331","month":"2026-07","title":"Windows Application Model Core API Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Application Model","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50331"},{"cve":"CVE-2026-50332","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50332"},{"cve":"CVE-2026-50333","month":"2026-07","title":"Windows Spaceport.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50333"},{"cve":"CVE-2026-50334","month":"2026-07","title":"Windows Push Notification Information Disclosure Vulnerability","family":"Windows","component":"Windows Notification","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50334"},{"cve":"CVE-2026-50335","month":"2026-07","title":"Windows Operating Systems Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Operating Systems","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50335"},{"cve":"CVE-2026-50336","month":"2026-07","title":"Windows Media Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50336"},{"cve":"CVE-2026-50337","month":"2026-07","title":"Windows Notification Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Notification","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-704"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50337"},{"cve":"CVE-2026-50338","month":"2026-07","title":"Azure Spring Apps Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Spring Apps","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50338"},{"cve":"CVE-2026-50339","month":"2026-07","title":"Windows Push Notification Information Disclosure Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50339"},{"cve":"CVE-2026-50340","month":"2026-07","title":"Windows Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50340"},{"cve":"CVE-2026-50341","month":"2026-07","title":"Windows NTFS Information Disclosure Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50341"},{"cve":"CVE-2026-50342","month":"2026-07","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","family":"Windows","component":"Windows MIDI Service Module","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50342"},{"cve":"CVE-2026-50343","month":"2026-07","title":"Microsoft Install Service Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Install Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-269"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50343"},{"cve":"CVE-2026-50344","month":"2026-07","title":"Windows OLE Elevation of Privilege Vulnerability","family":"Windows","component":"Windows OLE","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50344"},{"cve":"CVE-2026-50345","month":"2026-07","title":"Windows Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50345"},{"cve":"CVE-2026-50346","month":"2026-07","title":"Netlogon RPC Elevation of Privilege Vulnerability","family":"Windows","component":"RPC Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50346"},{"cve":"CVE-2026-50347","month":"2026-07","title":"Windows Data.dll Remote Code Execution Vulnerability","family":"Windows","component":"Windows Data.dll","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50347"},{"cve":"CVE-2026-50348","month":"2026-07","title":"Windows Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50348"},{"cve":"CVE-2026-50350","month":"2026-07","title":"Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows Trusted Runtime Interface Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50350"},{"cve":"CVE-2026-50351","month":"2026-07","title":"Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Audio Compression Manager (ACM)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50351"},{"cve":"CVE-2026-50352","month":"2026-07","title":"Windows Cryptographic Services Information Disclosure Vulnerability","family":"Windows","component":"Windows Cryptographic Services","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50352"},{"cve":"CVE-2026-50353","month":"2026-07","title":"DirectX Graphics Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DirectX","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50353"},{"cve":"CVE-2026-50354","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50354"},{"cve":"CVE-2026-50355","month":"2026-07","title":"Windows Active Directory Federation Services Denial of Service Vulnerability","family":"Developer Tools","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50355"},{"cve":"CVE-2026-50356","month":"2026-07","title":"Microsoft Windows App Store Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows App Store","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50356"},{"cve":"CVE-2026-50357","month":"2026-07","title":"Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50357"},{"cve":"CVE-2026-50358","month":"2026-07","title":"Windows Media Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50358"},{"cve":"CVE-2026-50359","month":"2026-07","title":"Microsoft XML Core Services Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft XML Core Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50359"},{"cve":"CVE-2026-50360","month":"2026-07","title":"Windows SMB Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SMB Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-303"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50360"},{"cve":"CVE-2026-50361","month":"2026-07","title":"Microsoft Brokering File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Brokering File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50361"},{"cve":"CVE-2026-50362","month":"2026-07","title":"Windows Resilient File System (ReFS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50362"},{"cve":"CVE-2026-50363","month":"2026-07","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50363"},{"cve":"CVE-2026-50364","month":"2026-07","title":"Windows Backup Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Server Backup","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50364"},{"cve":"CVE-2026-50365","month":"2026-07","title":"Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows RPC API","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50365"},{"cve":"CVE-2026-50366","month":"2026-07","title":"Windows Active Directory Domain Services Denial of Service Vulnerability","family":"Windows","component":"Active Directory Domain Services","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50366"},{"cve":"CVE-2026-50367","month":"2026-07","title":"Windows Sensor Data Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Sensor Data Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-118","CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50367"},{"cve":"CVE-2026-50368","month":"2026-07","title":"Windows Active Directory Federation Services Denial of Service Vulnerability","family":"Developer Tools","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50368"},{"cve":"CVE-2026-50369","month":"2026-07","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Desktop Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50369"},{"cve":"CVE-2026-50370","month":"2026-07","title":"DHCP Server Service Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50370"},{"cve":"CVE-2026-50371","month":"2026-07","title":"Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows LUAFV","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50371"},{"cve":"CVE-2026-50372","month":"2026-07","title":"Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Redirected Drive Buffering","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-126","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50372"},{"cve":"CVE-2026-50373","month":"2026-07","title":"Windows Search Service Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50373"},{"cve":"CVE-2026-50374","month":"2026-07","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.3,"vector":"CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50374"},{"cve":"CVE-2026-50375","month":"2026-07","title":"DirectX Graphics Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DirectX","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50375"},{"cve":"CVE-2026-50376","month":"2026-07","title":"Windows Remote Desktop Client Information Disclosure Vulnerability","family":"Windows","component":"Windows RDP","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50376"},{"cve":"CVE-2026-50377","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50377"},{"cve":"CVE-2026-50378","month":"2026-07","title":"Windows Key Guard Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Key Guard","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50378"},{"cve":"CVE-2026-50379","month":"2026-07","title":"Windows Media Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50379"},{"cve":"CVE-2026-50380","month":"2026-07","title":"Windows GDI+ Remote Code Execution Vulnerability","family":"Windows","component":"Windows GDI+","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50380"},{"cve":"CVE-2026-50381","month":"2026-07","title":"Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability","family":"Windows","component":"Composite Image File System Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50381"},{"cve":"CVE-2026-50382","month":"2026-07","title":"DirectX Graphics Kernel Remote Code Execution Vulnerability","family":"Windows","component":"Windows DirectX","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50382"},{"cve":"CVE-2026-50383","month":"2026-07","title":"Windows Print Spooler Information Disclosure Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50383"},{"cve":"CVE-2026-50384","month":"2026-07","title":"Windows Clip Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Clip Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50384"},{"cve":"CVE-2026-50385","month":"2026-07","title":"Windows Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50385"},{"cve":"CVE-2026-50386","month":"2026-07","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50386"},{"cve":"CVE-2026-50387","month":"2026-07","title":"Windows GDI Elevation of Privilege Vulnerability","family":"Windows","component":"Windows GDI","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50387"},{"cve":"CVE-2026-50388","month":"2026-07","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50388"},{"cve":"CVE-2026-50389","month":"2026-07","title":"Windows File Explorer Information Disclosure Vulnerability","family":"Windows","component":"Windows File Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50389"},{"cve":"CVE-2026-50390","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50390"},{"cve":"CVE-2026-50391","month":"2026-07","title":"Windows Group Policy Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Group Policy","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-269"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50391"},{"cve":"CVE-2026-50392","month":"2026-07","title":"Windows Secure Kernel Mode Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Secure Kernel Mode","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50392"},{"cve":"CVE-2026-50393","month":"2026-07","title":"Windows Kernel-Mode Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel-Mode Drivers","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50393"},{"cve":"CVE-2026-50394","month":"2026-07","title":"Windows Media Information Disclosure Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50394"},{"cve":"CVE-2026-50396","month":"2026-07","title":"Windows Kernel-Mode Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel-Mode Drivers","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50396"},{"cve":"CVE-2026-50397","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50397"},{"cve":"CVE-2026-50398","month":"2026-07","title":"Windows Media Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50398"},{"cve":"CVE-2026-50399","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50399"},{"cve":"CVE-2026-50400","month":"2026-07","title":"Windows App Package Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows App Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50400"},{"cve":"CVE-2026-50401","month":"2026-07","title":"Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50401"},{"cve":"CVE-2026-50402","month":"2026-07","title":"NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-681","CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50402"},{"cve":"CVE-2026-50403","month":"2026-07","title":"Windows Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50403"},{"cve":"CVE-2026-50404","month":"2026-07","title":"Windows Media Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50404"},{"cve":"CVE-2026-50405","month":"2026-07","title":"Windows Filtering Platform Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Filtering Platform (WFP)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1220"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50405"},{"cve":"CVE-2026-50406","month":"2026-07","title":"Windows Backup Engine Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Backup Engine","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50406"},{"cve":"CVE-2026-50407","month":"2026-07","title":"Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50407"},{"cve":"CVE-2026-50408","month":"2026-07","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50408"},{"cve":"CVE-2026-50409","month":"2026-07","title":"Windows Overlay Filter Information Disclosure Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50409"},{"cve":"CVE-2026-50410","month":"2026-07","title":"Windows Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50410"},{"cve":"CVE-2026-50411","month":"2026-07","title":"Windows Active Directory Federation Services Denial of Service Vulnerability","family":"Developer Tools","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50411"},{"cve":"CVE-2026-50412","month":"2026-07","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50412"},{"cve":"CVE-2026-50413","month":"2026-07","title":"Windows Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50413"},{"cve":"CVE-2026-50414","month":"2026-07","title":"Windows Media Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50414"},{"cve":"CVE-2026-50415","month":"2026-07","title":"Windows Media Information Disclosure Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50415"},{"cve":"CVE-2026-50416","month":"2026-07","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50416"},{"cve":"CVE-2026-50417","month":"2026-07","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50417"},{"cve":"CVE-2026-50418","month":"2026-07","title":"Windows System Secure Feature Bypass Vulnerability","family":"Windows","component":"Windows System","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50418"},{"cve":"CVE-2026-50419","month":"2026-07","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50419"},{"cve":"CVE-2026-50420","month":"2026-07","title":"HTTP.sys Information Disclosure Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50420"},{"cve":"CVE-2026-50421","month":"2026-07","title":"Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Connected User Experiences and Telemetry","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50421"},{"cve":"CVE-2026-50422","month":"2026-07","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50422"},{"cve":"CVE-2026-50423","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50423"},{"cve":"CVE-2026-50424","month":"2026-07","title":"Windows Domain Controller Denial of Service Vulnerability","family":"Windows","component":"Windows Domain Controller","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50424"},{"cve":"CVE-2026-50425","month":"2026-07","title":"Windows Internal System User Profile Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Internal System User Profile","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50425"},{"cve":"CVE-2026-50426","month":"2026-07","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50426"},{"cve":"CVE-2026-50427","month":"2026-07","title":"Content Delivery Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Content Delivery Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50427"},{"cve":"CVE-2026-50428","month":"2026-07","title":"Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability","family":"Windows","component":"Windows Container Isolation FS Filter Driver (unionfs.sys)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50428"},{"cve":"CVE-2026-50429","month":"2026-07","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50429"},{"cve":"CVE-2026-50430","month":"2026-07","title":"Windows Push Notification Information Disclosure Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50430"},{"cve":"CVE-2026-50431","month":"2026-07","title":"Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability","family":"Windows","component":"Windows Quality of Service (QoS) Packet Scheduler","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50431"},{"cve":"CVE-2026-50432","month":"2026-07","title":"Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability","family":"Windows","component":"Windows Virtual Filtering Platform (VFP)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50432"},{"cve":"CVE-2026-50433","month":"2026-07","title":"Windows Media Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50433"},{"cve":"CVE-2026-50434","month":"2026-07","title":"Windows Push Notification Information Disclosure Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50434"},{"cve":"CVE-2026-50435","month":"2026-07","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-126","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50435"},{"cve":"CVE-2026-50436","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50436"},{"cve":"CVE-2026-50437","month":"2026-07","title":"Windows DWM Core Library Information Disclosure  Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50437"},{"cve":"CVE-2026-50438","month":"2026-07","title":"Microsoft PC Manager Elevation of Privilege Vulnerability","family":"Apps","component":"Window PC Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50438"},{"cve":"CVE-2026-50439","month":"2026-07","title":"Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability","family":"Windows","component":"Windows Message Queuing Queue Manager","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50439"},{"cve":"CVE-2026-50440","month":"2026-07","title":"Windows Audio Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Audio Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50440"},{"cve":"CVE-2026-50441","month":"2026-07","title":"Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50441"},{"cve":"CVE-2026-50442","month":"2026-07","title":"Windows File Explorer Information Disclosure Vulnerability","family":"Windows","component":"Windows File Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50442"},{"cve":"CVE-2026-50444","month":"2026-07","title":"Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Server Update Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50444"},{"cve":"CVE-2026-50445","month":"2026-07","title":"Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability","family":"Windows","component":"Windows RDP","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50445"},{"cve":"CVE-2026-50447","month":"2026-07","title":"Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Message Queuing","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50447"},{"cve":"CVE-2026-50448","month":"2026-07","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50448"},{"cve":"CVE-2026-50449","month":"2026-07","title":"Windows Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50449"},{"cve":"CVE-2026-50450","month":"2026-07","title":"Windows Network Connections Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Wireless Wide Area Network Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50450"},{"cve":"CVE-2026-50451","month":"2026-07","title":"Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50451"},{"cve":"CVE-2026-50452","month":"2026-07","title":"Windows Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50452"},{"cve":"CVE-2026-50453","month":"2026-07","title":"Windows USB Audio Class Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows USB Audio Class driver (usbaudio.sys)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50453"},{"cve":"CVE-2026-50454","month":"2026-07","title":"Windows User Interface Core Elevation of Privilege Vulnerability","family":"Windows","component":"Windows User Interface Core","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50454"},{"cve":"CVE-2026-50455","month":"2026-07","title":"Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability","family":"Windows","component":"Universal Plug and Play (upnp.dll)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50455"},{"cve":"CVE-2026-50456","month":"2026-07","title":"Windows File Explorer Information Disclosure Vulnerability","family":"Windows","component":"Windows File Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50456"},{"cve":"CVE-2026-50457","month":"2026-07","title":"Windows Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50457"},{"cve":"CVE-2026-50458","month":"2026-07","title":"Microsoft Brokering File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Brokering File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50458"},{"cve":"CVE-2026-50459","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50459"},{"cve":"CVE-2026-50460","month":"2026-07","title":"Windows Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50460"},{"cve":"CVE-2026-50461","month":"2026-07","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50461"},{"cve":"CVE-2026-50462","month":"2026-07","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50462"},{"cve":"CVE-2026-50463","month":"2026-07","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50463"},{"cve":"CVE-2026-50465","month":"2026-07","title":"Windows DNS Client Tampering Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50465"},{"cve":"CVE-2026-50466","month":"2026-07","title":"Microsoft Brokering File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Brokering File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50466"},{"cve":"CVE-2026-50467","month":"2026-07","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50467"},{"cve":"CVE-2026-50468","month":"2026-07","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50468"},{"cve":"CVE-2026-50469","month":"2026-07","title":"Windows Projected File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Projected File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50469"},{"cve":"CVE-2026-50470","month":"2026-07","title":"Windows Network Policy Server SNMP Information Disclosure Vulnerability","family":"Windows","component":"Windows Network Policy Server SNMP","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50470"},{"cve":"CVE-2026-50471","month":"2026-07","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50471"},{"cve":"CVE-2026-50473","month":"2026-07","title":"Windows File Explorer Information Disclosure Vulnerability","family":"Windows","component":"Windows File Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50473"},{"cve":"CVE-2026-50474","month":"2026-07","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50474"},{"cve":"CVE-2026-50475","month":"2026-07","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50475"},{"cve":"CVE-2026-50476","month":"2026-07","title":"Windows Network Connections Service Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50476"},{"cve":"CVE-2026-50477","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50477"},{"cve":"CVE-2026-50478","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50478"},{"cve":"CVE-2026-50479","month":"2026-07","title":"Windows USB Hub Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Hub Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50479"},{"cve":"CVE-2026-50480","month":"2026-07","title":"Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Web Proxy Auto-Discovery Protocol (WPAD)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50480"},{"cve":"CVE-2026-50482","month":"2026-07","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50482"},{"cve":"CVE-2026-50483","month":"2026-07","title":"Windows Graphics Component Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50483"},{"cve":"CVE-2026-50484","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50484"},{"cve":"CVE-2026-50485","month":"2026-07","title":"Windows Hyper-V Denial of Service Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":4.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50485"},{"cve":"CVE-2026-50486","month":"2026-07","title":"Windows Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50486"},{"cve":"CVE-2026-50487","month":"2026-07","title":"Windows DNS Client Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50487"},{"cve":"CVE-2026-50488","month":"2026-07","title":"Clipboard User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Clipboard User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50488"},{"cve":"CVE-2026-50489","month":"2026-07","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50489"},{"cve":"CVE-2026-50490","month":"2026-07","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50490"},{"cve":"CVE-2026-50491","month":"2026-07","title":"Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability","family":"Windows","component":"Code Integrity DLL (ci.dll)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50491"},{"cve":"CVE-2026-50492","month":"2026-07","title":"Windows Resilient File System (ReFS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50492"},{"cve":"CVE-2026-50493","month":"2026-07","title":"DirectX Graphics Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Graphics Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50493"},{"cve":"CVE-2026-50494","month":"2026-07","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50494"},{"cve":"CVE-2026-50495","month":"2026-07","title":"DNS Client Tampering Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50495"},{"cve":"CVE-2026-50496","month":"2026-07","title":"Windows Network Policy Server SNMP Information Disclosure Vulnerability","family":"Windows","component":"Windows Network Policy Server SNMP","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50496"},{"cve":"CVE-2026-50497","month":"2026-07","title":"Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability","family":"Windows","component":"Windows Remote Desktop Protocol","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-193","CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50497"},{"cve":"CVE-2026-50498","month":"2026-07","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50498"},{"cve":"CVE-2026-50499","month":"2026-07","title":"Windows Print Spooler Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50499"},{"cve":"CVE-2026-50500","month":"2026-07","title":"Windows Netlogon Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Netlogon","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50500"},{"cve":"CVE-2026-50501","month":"2026-07","title":"Windows Resilient File System (ReFS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50501"},{"cve":"CVE-2026-50502","month":"2026-07","title":"Windows Event Logging Service Remote Code Execution Vulnerability","family":"Windows","component":"Windows Event Logging Service","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1220"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50502"},{"cve":"CVE-2026-50503","month":"2026-07","title":"Windows Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50503"},{"cve":"CVE-2026-50504","month":"2026-07","title":"Windows Remote Desktop Client Information Disclosure Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50504"},{"cve":"CVE-2026-50505","month":"2026-07","title":"Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Message Queuing","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50505"},{"cve":"CVE-2026-50506","month":"2026-07","title":"OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50506"},{"cve":"CVE-2026-50509","month":"2026-07","title":"Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Wireless Wide Area Network Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50509"},{"cve":"CVE-2026-50510","month":"2026-07","title":"GitHub Copilot Remote Code Execution Vulnerability","family":"Other","component":"Github Copilot","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-641"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50510"},{"cve":"CVE-2026-50517","month":"2026-07","title":"Microsoft M365 Copilot Remote Code Execution Vulnerability","family":"Apps","component":"M365 Copilot","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50517"},{"cve":"CVE-2026-50518","month":"2026-07","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50518"},{"cve":"CVE-2026-50520","month":"2026-07","title":"Visual Studio Code Remote Code Execution Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50520"},{"cve":"CVE-2026-50522","month":"2026-07","title":"Microsoft SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":true,"kev_added":"2026-07-22","class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50522"},{"cve":"CVE-2026-50524","month":"2026-07","title":".NET Framework Denial of Service Vulnerability","family":"Developer Tools","component":".NET Framework","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-1287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524"},{"cve":"CVE-2026-50525","month":"2026-07","title":".NET Denial of Service Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525"},{"cve":"CVE-2026-50526","month":"2026-07","title":".NET Tampering Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59","CWE-345"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526"},{"cve":"CVE-2026-50527","month":"2026-07","title":".NET Framework Denial of Service Vulnerability","family":"Developer Tools","component":".NET Framework","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527"},{"cve":"CVE-2026-50528","month":"2026-07","title":".NET Security Feature Bypass Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-863","CWE-302","CWE-636"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528"},{"cve":"CVE-2026-50646","month":"2026-07","title":".NET Framework Remote Code Execution Vulnerability","family":"Developer Tools","component":".NET Framework","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-693","CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646"},{"cve":"CVE-2026-50647","month":"2026-07","title":"Active Directory Federation Server Denial of Service Vulnerability","family":"Developer Tools","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50647"},{"cve":"CVE-2026-50648","month":"2026-07","title":".NET Framework Denial of Service Vulnerability","family":"Developer Tools","component":".NET Framework","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648"},{"cve":"CVE-2026-50649","month":"2026-07","title":".NET Remote Code Execution Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649"},{"cve":"CVE-2026-50650","month":"2026-07","title":".NET Framework Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET Framework","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650"},{"cve":"CVE-2026-50651","month":"2026-07","title":".NET Denial of Service Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50651"},{"cve":"CVE-2026-50652","month":"2026-07","title":"Azure Active Directory Denial of Service Vulnerability","family":"Developer Tools","component":"Azure Active Directory","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50652"},{"cve":"CVE-2026-50653","month":"2026-07","title":"Azure Active Directory Denial of Service Vulnerability","family":"Developer Tools","component":"Azure Active Directory","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-835","CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50653"},{"cve":"CVE-2026-50655","month":"2026-07","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50655"},{"cve":"CVE-2026-50657","month":"2026-07","title":"Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability","family":"System Center","component":"Microsoft Defender","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-359"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50657"},{"cve":"CVE-2026-50658","month":"2026-07","title":"Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability","family":"System Center","component":"Microsoft Defender","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50658"},{"cve":"CVE-2026-50659","month":"2026-07","title":".NET Spoofing Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-116"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659"},{"cve":"CVE-2026-50661","month":"2026-07","title":"Windows BitLocker Security Feature Bypass Vulnerability","family":"Windows","component":"Windows BitLocker","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-693"],"exploited":false,"disclosed":true,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50661"},{"cve":"CVE-2026-50663","month":"2026-07","title":"Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability","family":"Other","component":"Age of Empires II: Definitive Edition Game","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50663"},{"cve":"CVE-2026-50665","month":"2026-07","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50665"},{"cve":"CVE-2026-50666","month":"2026-07","title":"Windows Remote Access Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Access Connection Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50666"},{"cve":"CVE-2026-50667","month":"2026-07","title":"Windows Common Log File System Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50667"},{"cve":"CVE-2026-50668","month":"2026-07","title":"Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50668"},{"cve":"CVE-2026-50669","month":"2026-07","title":"Windows Telephony Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50669"},{"cve":"CVE-2026-50670","month":"2026-07","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50670"},{"cve":"CVE-2026-50672","month":"2026-07","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50672"},{"cve":"CVE-2026-50673","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-476","CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50673"},{"cve":"CVE-2026-50674","month":"2026-07","title":"Windows USB Print Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Print Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50674"},{"cve":"CVE-2026-50675","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50675"},{"cve":"CVE-2026-50676","month":"2026-07","title":"Windows Media Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50676"},{"cve":"CVE-2026-50677","month":"2026-07","title":"Windows Media Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50677"},{"cve":"CVE-2026-50678","month":"2026-07","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure","Remote Code Execution"],"severity":"Important","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50678"},{"cve":"CVE-2026-50679","month":"2026-07","title":"Windows Search Service Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50679"},{"cve":"CVE-2026-50680","month":"2026-07","title":"Windows Hyper-V Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50680"},{"cve":"CVE-2026-50681","month":"2026-07","title":"Windows Secure Channel Information Disclosure Vulnerability","family":"Windows","component":"Windows Cryptographic Services","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50681"},{"cve":"CVE-2026-50682","month":"2026-07","title":"Active Directory Denial of Service Vulnerability","family":"Windows","component":"Windows Active Directory","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50682"},{"cve":"CVE-2026-50683","month":"2026-07","title":"Windows DHCP Client Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50683"},{"cve":"CVE-2026-50684","month":"2026-07","title":"Active Directory Federation Server Spoofing Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50684"},{"cve":"CVE-2026-50685","month":"2026-07","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50685"},{"cve":"CVE-2026-50686","month":"2026-07","title":"Windows OLE Remote Code Execution Vulnerability","family":"Windows","component":"Windows OLE","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50686"},{"cve":"CVE-2026-50687","month":"2026-07","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50687"},{"cve":"CVE-2026-50688","month":"2026-07","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50688"},{"cve":"CVE-2026-50689","month":"2026-07","title":"Windows Clipboard Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Clipboard Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50689"},{"cve":"CVE-2026-50690","month":"2026-07","title":"Windows SMB Information Disclosure Vulnerability","family":"Windows","component":"Windows SMB","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50690"},{"cve":"CVE-2026-50692","month":"2026-07","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50692"},{"cve":"CVE-2026-50694","month":"2026-07","title":"Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Secure Socket Tunneling Protocol (SSTP)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50694"},{"cve":"CVE-2026-50695","month":"2026-07","title":"Windows Active Directory Federation Services Denial of Service Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50695"},{"cve":"CVE-2026-50696","month":"2026-07","title":"Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability","family":"Windows","component":"Windows Internet Key Exchange (IKE) Protocol","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50696"},{"cve":"CVE-2026-50697","month":"2026-07","title":"Windows Common Log File System Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Common Log File System Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50697"},{"cve":"CVE-2026-54107","month":"2026-07","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54107"},{"cve":"CVE-2026-54108","month":"2026-07","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54108"},{"cve":"CVE-2026-54109","month":"2026-07","title":"Windows Resilient File System (ReFS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54109"},{"cve":"CVE-2026-54111","month":"2026-07","title":"Universal Print Management Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Print Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54111"},{"cve":"CVE-2026-54112","month":"2026-07","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54112"},{"cve":"CVE-2026-54114","month":"2026-07","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54114"},{"cve":"CVE-2026-54115","month":"2026-07","title":"Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Active Directory","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54115"},{"cve":"CVE-2026-54116","month":"2026-07","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54116"},{"cve":"CVE-2026-54117","month":"2026-07","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54117"},{"cve":"CVE-2026-54118","month":"2026-07","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54118"},{"cve":"CVE-2026-54119","month":"2026-07","title":"Windows Active Directory Denial of Service Vulnerability","family":"Windows","component":"Windows Active Directory","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54119"},{"cve":"CVE-2026-54120","month":"2026-07","title":"Microsoft Surface Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Surface","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54120"},{"cve":"CVE-2026-54121","month":"2026-07","title":"Active Directory Certificate Services Elevation of Privilege Vulnerability","family":"Windows","component":"Active Directory Certificate Services (AD CS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121"},{"cve":"CVE-2026-54122","month":"2026-07","title":"Windows GDI+ Remote Code Execution Vulnerability","family":"Windows","component":"Windows GDI+","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54122"},{"cve":"CVE-2026-54124","month":"2026-07","title":"Windows Terminal Remote Code Execution Vulnerability","family":"Windows","component":"Windows Terminal","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54124"},{"cve":"CVE-2026-54125","month":"2026-07","title":"Windows Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54125"},{"cve":"CVE-2026-54126","month":"2026-07","title":"Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability","family":"Windows","component":"Windows RDP","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54126"},{"cve":"CVE-2026-54127","month":"2026-07","title":"Windows Hyper-V Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54127"},{"cve":"CVE-2026-54128","month":"2026-07","title":"Windows DHCP Client Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54128"},{"cve":"CVE-2026-54129","month":"2026-07","title":"Windows Hyper-V Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54129"},{"cve":"CVE-2026-54131","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54131"},{"cve":"CVE-2026-54132","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54132"},{"cve":"CVE-2026-54982","month":"2026-07","title":"Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability","family":"Windows","component":"Reliable Multicast Transport Driver (RMCAST)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54982"},{"cve":"CVE-2026-54983","month":"2026-07","title":"Windows Active Directory Federation Services Denial of Service Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54983"},{"cve":"CVE-2026-54986","month":"2026-07","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54986"},{"cve":"CVE-2026-54987","month":"2026-07","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54987"},{"cve":"CVE-2026-54988","month":"2026-07","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54988"},{"cve":"CVE-2026-54989","month":"2026-07","title":"Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability","family":"Windows","component":"Quality Windows Audio/Video Experience (QWAVE) service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54989"},{"cve":"CVE-2026-54990","month":"2026-07","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54990"},{"cve":"CVE-2026-54991","month":"2026-07","title":"Windows USB Print Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Print Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54991"},{"cve":"CVE-2026-54992","month":"2026-07","title":"Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability","family":"Windows","component":"Windows Message Queuing Queue Manager","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54992"},{"cve":"CVE-2026-54993","month":"2026-07","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54993"},{"cve":"CVE-2026-54995","month":"2026-07","title":"Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability","family":"Windows","component":"Reliable Multicast Transport Driver (RMCAST)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54995"},{"cve":"CVE-2026-54996","month":"2026-07","title":"Windows USB Print Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Print Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54996"},{"cve":"CVE-2026-54997","month":"2026-07","title":"Windows SMB Information Disclosure Vulnerability","family":"Windows","component":"Windows SMB","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54997"},{"cve":"CVE-2026-54998","month":"2026-07","title":"Microsoft Exchange Online Elevation of Privilege Vulnerability","family":"Server Software","component":"Microsoft Exchange Online","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54998"},{"cve":"CVE-2026-54999","month":"2026-07","title":"Windows TCP/IP Remote Code Execution Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54999"},{"cve":"CVE-2026-55000","month":"2026-07","title":"Windows USB Print Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Print Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55000"},{"cve":"CVE-2026-55001","month":"2026-07","title":"Active Directory Domain Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Active Directory","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55001"},{"cve":"CVE-2026-55002","month":"2026-07","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55002"},{"cve":"CVE-2026-55003","month":"2026-07","title":"Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability","family":"Windows","component":"Windows RDP","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55003"},{"cve":"CVE-2026-55004","month":"2026-07","title":"Windows Print Configuration Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Printer Drivers","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55004"},{"cve":"CVE-2026-55005","month":"2026-07","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55005"},{"cve":"CVE-2026-55006","month":"2026-07","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1220"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55006"},{"cve":"CVE-2026-55008","month":"2026-07","title":"Microsoft Exchange Server Spoofing Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55008"},{"cve":"CVE-2026-55009","month":"2026-07","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55009"},{"cve":"CVE-2026-55010","month":"2026-07","title":"Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability","family":"Other","component":"Minecraft Bedrock Dedicated Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55010"},{"cve":"CVE-2026-55011","month":"2026-07","title":"Microsoft Defender Remote Code Execution Vulnerability","family":"System Center","component":"Microsoft Defender","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55011"},{"cve":"CVE-2026-55012","month":"2026-07","title":"Microsoft Defender Remote Code Execution Vulnerability","family":"System Center","component":"Microsoft Defender","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55012"},{"cve":"CVE-2026-55014","month":"2026-07","title":"Windows Remote Help Defense Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Help Defense","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55014"},{"cve":"CVE-2026-55016","month":"2026-07","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55016"},{"cve":"CVE-2026-55017","month":"2026-07","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55017"},{"cve":"CVE-2026-55018","month":"2026-07","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55018"},{"cve":"CVE-2026-55019","month":"2026-07","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55019"},{"cve":"CVE-2026-55020","month":"2026-07","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55020"},{"cve":"CVE-2026-55021","month":"2026-07","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55021"},{"cve":"CVE-2026-55022","month":"2026-07","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55022"},{"cve":"CVE-2026-55023","month":"2026-07","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55023"},{"cve":"CVE-2026-55024","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55024"},{"cve":"CVE-2026-55025","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55025"},{"cve":"CVE-2026-55026","month":"2026-07","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55026"},{"cve":"CVE-2026-55027","month":"2026-07","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55027"},{"cve":"CVE-2026-55028","month":"2026-07","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55028"},{"cve":"CVE-2026-55029","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55029"},{"cve":"CVE-2026-55030","month":"2026-07","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55030"},{"cve":"CVE-2026-55031","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55031"},{"cve":"CVE-2026-55032","month":"2026-07","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55032"},{"cve":"CVE-2026-55033","month":"2026-07","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55033"},{"cve":"CVE-2026-55034","month":"2026-07","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55034"},{"cve":"CVE-2026-55035","month":"2026-07","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55035"},{"cve":"CVE-2026-55036","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55036"},{"cve":"CVE-2026-55037","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55037"},{"cve":"CVE-2026-55038","month":"2026-07","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55038"},{"cve":"CVE-2026-55039","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55039"},{"cve":"CVE-2026-55040","month":"2026-07","title":"Microsoft SharePoint Server Security Feature Bypass Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":true,"kev_added":"2026-08-18","class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040"},{"cve":"CVE-2026-55041","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55041"},{"cve":"CVE-2026-55042","month":"2026-07","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55042"},{"cve":"CVE-2026-55043","month":"2026-07","title":"Microsoft PowerPoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55043"},{"cve":"CVE-2026-55044","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55044"},{"cve":"CVE-2026-55045","month":"2026-07","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55045"},{"cve":"CVE-2026-55046","month":"2026-07","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55046"},{"cve":"CVE-2026-55047","month":"2026-07","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55047"},{"cve":"CVE-2026-55048","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55048"},{"cve":"CVE-2026-55049","month":"2026-07","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55049"},{"cve":"CVE-2026-55050","month":"2026-07","title":"Microsoft Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55050"},{"cve":"CVE-2026-55051","month":"2026-07","title":"Microsoft SharePoint Server Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55051"},{"cve":"CVE-2026-55052","month":"2026-07","title":"Microsoft SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55052"},{"cve":"CVE-2026-55053","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55053"},{"cve":"CVE-2026-55054","month":"2026-07","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55054"},{"cve":"CVE-2026-55055","month":"2026-07","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55055"},{"cve":"CVE-2026-55056","month":"2026-07","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55056"},{"cve":"CVE-2026-55057","month":"2026-07","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55057"},{"cve":"CVE-2026-55058","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55058"},{"cve":"CVE-2026-55120","month":"2026-07","title":"Microsoft PowerPoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55120"},{"cve":"CVE-2026-55121","month":"2026-07","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55121"},{"cve":"CVE-2026-55122","month":"2026-07","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55122"},{"cve":"CVE-2026-55123","month":"2026-07","title":"Microsoft PowerPoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-681"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55123"},{"cve":"CVE-2026-55124","month":"2026-07","title":"Microsoft Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-1287","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55124"},{"cve":"CVE-2026-55125","month":"2026-07","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55125"},{"cve":"CVE-2026-55126","month":"2026-07","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55126"},{"cve":"CVE-2026-55127","month":"2026-07","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55127"},{"cve":"CVE-2026-55128","month":"2026-07","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55128"},{"cve":"CVE-2026-55129","month":"2026-07","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55129"},{"cve":"CVE-2026-55130","month":"2026-07","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55130"},{"cve":"CVE-2026-55131","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55131"},{"cve":"CVE-2026-55132","month":"2026-07","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55132"},{"cve":"CVE-2026-55133","month":"2026-07","title":"Microsoft OneNote Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office OneNote","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55133"},{"cve":"CVE-2026-55134","month":"2026-07","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55134"},{"cve":"CVE-2026-55135","month":"2026-07","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55135"},{"cve":"CVE-2026-55136","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55136"},{"cve":"CVE-2026-55137","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55137"},{"cve":"CVE-2026-55138","month":"2026-07","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55138"},{"cve":"CVE-2026-55139","month":"2026-07","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55139"},{"cve":"CVE-2026-55140","month":"2026-07","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55140"},{"cve":"CVE-2026-55141","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55141"},{"cve":"CVE-2026-55142","month":"2026-07","title":"Microsoft Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55142"},{"cve":"CVE-2026-55144","month":"2026-07","title":"Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability","family":"Windows","component":"Windows CryptoAPI","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-325"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55144"},{"cve":"CVE-2026-55145","month":"2026-07","title":"Outlook Copilot Tampering Vulnerability","family":"Other","component":"Outlook Copilot","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N/E:P/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55145"},{"cve":"CVE-2026-55898","month":"2026-07","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55898"},{"cve":"CVE-2026-55899","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55899"},{"cve":"CVE-2026-55944","month":"2026-07","title":"Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability","family":"Microsoft Dynamics","component":"Microsoft Dynamics NAV","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55944"},{"cve":"CVE-2026-55945","month":"2026-07","title":"Microsoft Edge (Chromium-based) Information Disclosure Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55945"},{"cve":"CVE-2026-55947","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55947"},{"cve":"CVE-2026-55948","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55948"},{"cve":"CVE-2026-55949","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55949"},{"cve":"CVE-2026-56155","month":"2026-07","title":"Active Directory Federation Services Elevation of Privilege Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C","cwe":["CWE-1220"],"exploited":true,"disclosed":false,"kev":true,"kev_added":"2026-07-14","class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56155"},{"cve":"CVE-2026-56156","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Information Disclosure","Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56156"},{"cve":"CVE-2026-56157","month":"2026-07","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56157"},{"cve":"CVE-2026-56159","month":"2026-07","title":"DHCP Server Service Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56159"},{"cve":"CVE-2026-56160","month":"2026-07","title":"Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Red Hat OpenShift (ARO)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56160"},{"cve":"CVE-2026-56163","month":"2026-07","title":"Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft Azure Kubernetes Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56163"},{"cve":"CVE-2026-56164","month":"2026-07","title":"Microsoft SharePoint Server Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:F/RL:O/RC:C","cwe":["CWE-306"],"exploited":true,"disclosed":false,"kev":true,"kev_added":"2026-07-14","class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56164"},{"cve":"CVE-2026-56165","month":"2026-07","title":"Microsoft Account Remote Code Execution Vulnerability","family":"Azure","component":"Microsoft Account","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56165"},{"cve":"CVE-2026-56167","month":"2026-07","title":"Azure AI Search Elevation of Privilege Vulnerability","family":"Azure","component":"Azure AI Search","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56167"},{"cve":"CVE-2026-56168","month":"2026-07","title":"Windows SMB Server Denial of Service Vulnerability","family":"Windows","component":"Windows SMB Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56168"},{"cve":"CVE-2026-56169","month":"2026-07","title":"Windows Admin Center Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Admin Center","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56169"},{"cve":"CVE-2026-56170","month":"2026-07","title":"ASP.NET Core Denial of Service Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170"},{"cve":"CVE-2026-56171","month":"2026-07","title":"Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability","family":"Windows","component":"Windows RDP","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-359"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56171"},{"cve":"CVE-2026-56173","month":"2026-07","title":"Windows WebView Elevation of Privilege Vulnerability","family":"Windows","component":"Windows WebView","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56173"},{"cve":"CVE-2026-56175","month":"2026-07","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56175"},{"cve":"CVE-2026-56176","month":"2026-07","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - GRFX","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56176"},{"cve":"CVE-2026-56178","month":"2026-07","title":"Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability","family":"System Center","component":"Microsoft Defender for Endpoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56178"},{"cve":"CVE-2026-56181","month":"2026-07","title":"Windows Network Address Translation (NAT) Spoofing Vulnerability","family":"Windows","component":"Windows Network Address Translation (NAT)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Moderate","cvss":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56181"},{"cve":"CVE-2026-56182","month":"2026-07","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56182"},{"cve":"CVE-2026-56183","month":"2026-07","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","family":"Windows","component":"Windows MIDI Service Module","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56183"},{"cve":"CVE-2026-56184","month":"2026-07","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56184"},{"cve":"CVE-2026-56185","month":"2026-07","title":"Windows Admin Center Information Disclosure Vulnerability","family":"Windows","component":"Windows Admin Center","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-287","CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56185"},{"cve":"CVE-2026-56186","month":"2026-07","title":"Windows Secure Channel Information Disclosure Vulnerability","family":"Windows","component":"Windows Schannel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56186"},{"cve":"CVE-2026-56187","month":"2026-07","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","family":"Windows","component":"Windows MIDI Service Module","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56187"},{"cve":"CVE-2026-56188","month":"2026-07","title":"Windows Server Network driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows Server Network driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56188"},{"cve":"CVE-2026-56189","month":"2026-07","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56189"},{"cve":"CVE-2026-56190","month":"2026-07","title":"Remote Desktop Protocol Remote Code Execution Vulnerability","family":"Windows","component":"Windows RDP","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56190"},{"cve":"CVE-2026-56191","month":"2026-07","title":"Microsoft Exchange Online Tampering Vulnerability","family":"Server Software","component":"Microsoft Exchange Online","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56191"},{"cve":"CVE-2026-56192","month":"2026-07","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56192"},{"cve":"CVE-2026-56193","month":"2026-07","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56193"},{"cve":"CVE-2026-56194","month":"2026-07","title":"Windows NFS Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Network File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56194"},{"cve":"CVE-2026-56195","month":"2026-07","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56195"},{"cve":"CVE-2026-56196","month":"2026-07","title":"Windows Admin Center (WAC) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Admin Center","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56196"},{"cve":"CVE-2026-56197","month":"2026-07","title":"Windows Admin Center (WAC) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Admin Center","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56197"},{"cve":"CVE-2026-56642","month":"2026-07","title":"Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability","family":"SQL Server","component":"Microsoft Fabric Data Warehouse","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56642"},{"cve":"CVE-2026-56643","month":"2026-07","title":"DirectX Graphics Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56643"},{"cve":"CVE-2026-56644","month":"2026-07","title":"DirectX Graphics Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56644"},{"cve":"CVE-2026-56645","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56645"},{"cve":"CVE-2026-56646","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56646"},{"cve":"CVE-2026-56647","month":"2026-07","title":"Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Access Service Infrastructure","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56647"},{"cve":"CVE-2026-56648","month":"2026-07","title":"Windows NFS Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Network File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56648"},{"cve":"CVE-2026-56649","month":"2026-07","title":"Windows Network File System Remote Code Execution Vulnerability","family":"Windows","component":"Windows Network File System","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56649"},{"cve":"CVE-2026-56650","month":"2026-07","title":"Windows Network File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Network File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56650"},{"cve":"CVE-2026-57083","month":"2026-07","title":"Windows Media Photo Codec Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Windows Codecs Library","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57083"},{"cve":"CVE-2026-57084","month":"2026-07","title":"Windows File Explorer Information Disclosure Vulnerability","family":"Windows","component":"Windows File Explorer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57084"},{"cve":"CVE-2026-57085","month":"2026-07","title":"Windows Print Spooler Information Disclosure Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57085"},{"cve":"CVE-2026-57087","month":"2026-07","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57087"},{"cve":"CVE-2026-57088","month":"2026-07","title":"Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability","family":"Windows","component":"Extensible Storage Engine (ESENT)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57088"},{"cve":"CVE-2026-57089","month":"2026-07","title":"Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability","family":"Windows","component":"Windows SMB Server Network Transport Driver (srvnet.sys)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57089"},{"cve":"CVE-2026-57090","month":"2026-07","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57090"},{"cve":"CVE-2026-57091","month":"2026-07","title":"Windows File History Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows File History Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57091"},{"cve":"CVE-2026-57092","month":"2026-07","title":"Microsoft Windows VMSwitch Elevation of Privilege Vulnerability","family":"Windows","component":"Windows VMSwitch","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57092"},{"cve":"CVE-2026-57093","month":"2026-07","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57093"},{"cve":"CVE-2026-57094","month":"2026-07","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57094"},{"cve":"CVE-2026-57095","month":"2026-07","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57095"},{"cve":"CVE-2026-57096","month":"2026-07","title":"Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57096"},{"cve":"CVE-2026-57097","month":"2026-07","title":"Microsoft XML Security Feature Bypass Vulnerability","family":"Windows","component":"Microsoft XML","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57097"},{"cve":"CVE-2026-57100","month":"2026-07","title":"Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft Entra Provisioning Service (SyncFabric)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57100"},{"cve":"CVE-2026-57101","month":"2026-07","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57101"},{"cve":"CVE-2026-57102","month":"2026-07","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-829","CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57102"},{"cve":"CVE-2026-57106","month":"2026-07","title":"Data Quality Elevation of Privilege Vulnerability","family":"Azure","component":"Data Quality","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57106"},{"cve":"CVE-2026-57107","month":"2026-07","title":"Windows Admin Center Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Admin Center","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57107"},{"cve":"CVE-2026-57108","month":"2026-07","title":".NET Denial of Service Vulnerability","family":"Developer Tools","component":".NET Core","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108"},{"cve":"CVE-2026-57968","month":"2026-07","title":"Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability","family":"Open Source Software","component":"Windows Subsystem for Linux","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57968"},{"cve":"CVE-2026-57969","month":"2026-07","title":"Azure CycleCloud Elevation of Privilege Vulnerability","family":"Azure","component":"Azure CycleCloud","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57969"},{"cve":"CVE-2026-57973","month":"2026-07","title":"Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability","family":"Open Source Software","component":"Windows Subsystem for Linux","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57973"},{"cve":"CVE-2026-57974","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57974"},{"cve":"CVE-2026-57975","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57975"},{"cve":"CVE-2026-57976","month":"2026-07","title":"Windows Active Directory Domain Services Denial of Service Vulnerability","family":"Windows","component":"Active Directory Domain Services","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57976"},{"cve":"CVE-2026-57977","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57977"},{"cve":"CVE-2026-57978","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57978"},{"cve":"CVE-2026-57979","month":"2026-07","title":"Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability","family":"Windows","component":"Windows RDP","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57979"},{"cve":"CVE-2026-57980","month":"2026-07","title":"Microsoft Edge (Chromium-based) Tampering Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-288"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57980"},{"cve":"CVE-2026-57981","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57981"},{"cve":"CVE-2026-57982","month":"2026-07","title":"Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability","family":"Windows","component":"Windows RDP","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57982"},{"cve":"CVE-2026-57983","month":"2026-07","title":"Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57983"},{"cve":"CVE-2026-57984","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57984"},{"cve":"CVE-2026-57985","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57985"},{"cve":"CVE-2026-57986","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57986"},{"cve":"CVE-2026-57987","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57987"},{"cve":"CVE-2026-57988","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57988"},{"cve":"CVE-2026-57989","month":"2026-07","title":"Microsoft Edge (Chromium-based) Information Disclosure Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57989"},{"cve":"CVE-2026-57990","month":"2026-07","title":"Microsoft Edge (Chromium-based) Information Disclosure Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-552"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57990"},{"cve":"CVE-2026-57991","month":"2026-07","title":"Microsoft Edge (Chromium-based) Information Disclosure Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57991"},{"cve":"CVE-2026-57992","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57992"},{"cve":"CVE-2026-57993","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57993"},{"cve":"CVE-2026-58275","month":"2026-07","title":"Azure DNS Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Azure DNS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58275"},{"cve":"CVE-2026-58276","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58276"},{"cve":"CVE-2026-58277","month":"2026-07","title":"Microsoft SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58277"},{"cve":"CVE-2026-58278","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58278"},{"cve":"CVE-2026-58279","month":"2026-07","title":"Azure CycleCloud Elevation of Privilege Vulnerability","family":"Azure","component":"Azure CycleCloud","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58279"},{"cve":"CVE-2026-58281","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58281"},{"cve":"CVE-2026-58282","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58282"},{"cve":"CVE-2026-58283","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58283"},{"cve":"CVE-2026-58284","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58284"},{"cve":"CVE-2026-58285","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58285"},{"cve":"CVE-2026-58286","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58286"},{"cve":"CVE-2026-58287","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58287"},{"cve":"CVE-2026-58288","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58288"},{"cve":"CVE-2026-58289","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58289"},{"cve":"CVE-2026-58290","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58290"},{"cve":"CVE-2026-58291","month":"2026-07","title":"Microsoft Edge (Chromium-based) Information Disclosure Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-672"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58291"},{"cve":"CVE-2026-58292","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58292"},{"cve":"CVE-2026-58293","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58293"},{"cve":"CVE-2026-58294","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58294"},{"cve":"CVE-2026-58295","month":"2026-07","title":"Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58295"},{"cve":"CVE-2026-58296","month":"2026-07","title":"Microsoft Edge for Android Information Disclosure Vulnerability","family":"Browser","component":"Microsoft Edge for Android","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-359"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58296"},{"cve":"CVE-2026-58297","month":"2026-07","title":"Microsoft Edge for Android Information Disclosure Vulnerability","family":"Browser","component":"Microsoft Edge for Android","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-359"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58297"},{"cve":"CVE-2026-58298","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58298"},{"cve":"CVE-2026-58299","month":"2026-07","title":"Microsoft Edge for Android Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge for Android","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58299"},{"cve":"CVE-2026-58300","month":"2026-07","title":"Microsoft Edge for Android Information Disclosure Vulnerability","family":"Browser","component":"Microsoft Edge for Android","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-36"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58300"},{"cve":"CVE-2026-58522","month":"2026-07","title":"Microsoft Edge for Android Information Disclosure Vulnerability","family":"Browser","component":"Microsoft Edge for Android","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58522"},{"cve":"CVE-2026-58523","month":"2026-07","title":"Microsoft Edge for Android Security Feature Bypass Vulnerability","family":"Browser","component":"Microsoft Edge for Android","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58523"},{"cve":"CVE-2026-58524","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58524"},{"cve":"CVE-2026-58525","month":"2026-07","title":"Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58525"},{"cve":"CVE-2026-58526","month":"2026-07","title":"Windows Storage Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58526"},{"cve":"CVE-2026-58527","month":"2026-07","title":"Windows Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58527"},{"cve":"CVE-2026-58528","month":"2026-07","title":"Windows USB Audio Class Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows USB Audio Class driver (usbaudio.sys)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58528"},{"cve":"CVE-2026-58529","month":"2026-07","title":"Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58529"},{"cve":"CVE-2026-58530","month":"2026-07","title":"Windows Resilient File System (ReFS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58530"},{"cve":"CVE-2026-58531","month":"2026-07","title":"Windows SMB Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SMB","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58531"},{"cve":"CVE-2026-58532","month":"2026-07","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58532"},{"cve":"CVE-2026-58533","month":"2026-07","title":"Windows Remote Desktop Client Information Disclosure Vulnerability","family":"Windows","component":"Windows RDP","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58533"},{"cve":"CVE-2026-58534","month":"2026-07","title":"Windows Input Method Editor (IME) Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Input Method Editor (IME)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58534"},{"cve":"CVE-2026-58535","month":"2026-07","title":"Windows Remote Desktop Client Information Disclosure Vulnerability","family":"Windows","component":"Windows RDP","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58535"},{"cve":"CVE-2026-58536","month":"2026-07","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58536"},{"cve":"CVE-2026-58537","month":"2026-07","title":"Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft NAT Helper Components (ipnathlp.dll)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58537"},{"cve":"CVE-2026-58538","month":"2026-07","title":"Windows Bluetooth Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bluetooth Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58538"},{"cve":"CVE-2026-58539","month":"2026-07","title":"Windows Remote Desktop Client Information Disclosure Vulnerability","family":"Windows","component":"Windows RDP","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58539"},{"cve":"CVE-2026-58540","month":"2026-07","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58540"},{"cve":"CVE-2026-58541","month":"2026-07","title":"Microsoft DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58541"},{"cve":"CVE-2026-58542","month":"2026-07","title":"Windows Media Remote Code Execution Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58542"},{"cve":"CVE-2026-58543","month":"2026-07","title":"Universal Print Management Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Print Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.3,"vector":"CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58543"},{"cve":"CVE-2026-58544","month":"2026-07","title":"Windows Management Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58544"},{"cve":"CVE-2026-58545","month":"2026-07","title":"Windows Kernel Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58545"},{"cve":"CVE-2026-58546","month":"2026-07","title":"Windows Remote Desktop Client Information Disclosure Vulnerability","family":"Windows","component":"Windows RDP","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58546"},{"cve":"CVE-2026-58547","month":"2026-07","title":"Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability","family":"Windows","component":"Universal Plug and Play (upnp.dll)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58547"},{"cve":"CVE-2026-58594","month":"2026-07","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Windows RDP","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58594"},{"cve":"CVE-2026-58595","month":"2026-07","title":"Microsoft Bing App for IOS Spoofing Vulnerability","family":"Apps","component":"Microsoft Bing App for IOS","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1021"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58595"},{"cve":"CVE-2026-58596","month":"2026-07","title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58596"},{"cve":"CVE-2026-58597","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Low","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-357"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58597"},{"cve":"CVE-2026-58598","month":"2026-07","title":"Windows Backup Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Backup Engine","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58598"},{"cve":"CVE-2026-58601","month":"2026-07","title":"Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability","family":"Windows","component":"Virtual Hard Disk (VHD) Miniport Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58601"},{"cve":"CVE-2026-58602","month":"2026-07","title":"Windows Kernel-Mode Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel Mode Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58602"},{"cve":"CVE-2026-58608","month":"2026-07","title":"Windows Print Spooler Remote Code Execution Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58608"},{"cve":"CVE-2026-58609","month":"2026-07","title":"Windows Graphics Component Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58609"},{"cve":"CVE-2026-58610","month":"2026-07","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58610"},{"cve":"CVE-2026-58613","month":"2026-07","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58613"},{"cve":"CVE-2026-58614","month":"2026-07","title":"Windows Kernel Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58614"},{"cve":"CVE-2026-58617","month":"2026-07","title":"M365 Copilot for iOS Elevation of Privilege Vulnerability","family":"Apps","component":"Microsoft 365 Copilot for iOS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58617"},{"cve":"CVE-2026-58618","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58618"},{"cve":"CVE-2026-58619","month":"2026-07","title":"Windows Sensor Data Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Sensor Data Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58619"},{"cve":"CVE-2026-58626","month":"2026-07","title":"Windows Remote Desktop Services Remote Code Execution Vulnerability","family":"Windows","component":"Windows Remote Desktop Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58626"},{"cve":"CVE-2026-58627","month":"2026-07","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58627"},{"cve":"CVE-2026-58628","month":"2026-07","title":"Windows Wireless Network Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Wireless Networking","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58628"},{"cve":"CVE-2026-58629","month":"2026-07","title":"DirectX Graphics Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DirectX","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58629"},{"cve":"CVE-2026-58630","month":"2026-07","title":"Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability","family":"Azure","component":"Azure App Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58630"},{"cve":"CVE-2026-58631","month":"2026-07","title":"Windows Admin Center (WAC) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Admin Center","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58631"},{"cve":"CVE-2026-58632","month":"2026-07","title":"Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58632"},{"cve":"CVE-2026-58633","month":"2026-07","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58633"},{"cve":"CVE-2026-58634","month":"2026-07","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58634"},{"cve":"CVE-2026-58635","month":"2026-07","title":"Windows Narrator Braille Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Narrator Braille","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58635"},{"cve":"CVE-2026-58636","month":"2026-07","title":"Microsoft PC Manager Elevation of Privilege Vulnerability","family":"Apps","component":"Window PC Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58636"},{"cve":"CVE-2026-58637","month":"2026-07","title":"Windows Client-Side Caching Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Client-Side Caching (CSC) Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58637"},{"cve":"CVE-2026-58638","month":"2026-07","title":"Windows Boot Loader Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Boot Loader","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-325"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58638"},{"cve":"CVE-2026-58640","month":"2026-07","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58640"},{"cve":"CVE-2026-58643","month":"2026-07","title":"Windows Admin Center Spoofing Vulnerability","family":"Windows","component":"Windows Admin Center","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58643"},{"cve":"CVE-2026-58644","month":"2026-07","title":"Microsoft SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C","cwe":["CWE-502"],"exploited":true,"disclosed":false,"kev":true,"kev_added":"2026-07-16","class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644"},{"cve":"CVE-2026-58647","month":"2026-07","title":"Microsoft PowerBI Report Server Spoofing Vulnerability","family":"SQL Server","component":"Power BI","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58647"},{"cve":"CVE-2026-59117","month":"2026-07","title":"Windows Terminal Remote Code Execution Vulnerability","family":"Apps","component":"Windows Terminal","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59117"},{"cve":"CVE-2026-62825","month":"2026-07","title":"Azure Key Vault Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Azure Key Vault","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62825"},{"cve":"CVE-2026-62826","month":"2026-07","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62826"},{"cve":"CVE-2026-62828","month":"2026-07","title":"Microsoft Edge for Android (Chromium-based) Tampering Vulnerability","family":"Browser","component":"Microsoft Edge for Android","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62828"},{"cve":"CVE-2026-62835","month":"2026-07","title":"Azure Portal Information Disclosure Vulnerability","family":"Azure","component":"Azure Portal","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62835"},{"cve":"CVE-2026-62870","month":"2026-07","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62870"},{"cve":"CVE-2026-65802","month":"2026-07","title":"Microsoft Edge for Android Information Disclosure Vulnerability","family":"Browser","component":"Microsoft Edge for Android","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65802"},{"cve":"CVE-2026-65804","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65804"},{"cve":"CVE-2026-66310","month":"2026-07","title":"Microsoft Edge for Android Information Disclosure Vulnerability","family":"Browser","component":"Microsoft Edge for Android","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66310"},{"cve":"CVE-2026-66311","month":"2026-07","title":"Microsoft Edge (Chromium-based) Tampering Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66311"},{"cve":"CVE-2026-66312","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66312"},{"cve":"CVE-2026-66313","month":"2026-07","title":"Microsoft Edge (Chromium-based) Tampering Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66313"},{"cve":"CVE-2026-66314","month":"2026-07","title":"Microsoft Edge (Chromium-based) Information Disclosure Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66314"},{"cve":"CVE-2026-66315","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66315"},{"cve":"CVE-2026-66316","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66316"},{"cve":"CVE-2026-66317","month":"2026-07","title":"Microsoft Edge (Chromium-based) Tampering Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66317"},{"cve":"CVE-2026-66318","month":"2026-07","title":"Microsoft Edge (Chromium-based) Information Disclosure Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66318"},{"cve":"CVE-2026-66321","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66321"},{"cve":"CVE-2026-66322","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66322"},{"cve":"CVE-2026-66325","month":"2026-07","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66325"},{"cve":"CVE-2026-66326","month":"2026-07","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66326"},{"cve":"CVE-2026-66803","month":"2026-07","title":"Azure Cosmos DB Remote Code Execution Vulnerability","family":"Azure","component":"Azure Cosmos DB","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66803"},{"cve":"CVE-2024-14040","month":"2026-07","title":"net: nexthop: Increase weight to u16","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-14040"},{"cve":"CVE-2025-63913","month":"2026-07","title":"An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI function #2 or the 'Find and configure a matching counter' function of SBI PMU extension.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-63913"},{"cve":"CVE-2026-10536","month":"2026-07","title":"HTTP/2 stream-dependency tree UAF","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10536"},{"cve":"CVE-2026-10723","month":"2026-07","title":"Incorrect acceptance of NSEC3 records","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Moderate","cvss":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N/E:U","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10723"},{"cve":"CVE-2026-10822","month":"2026-07","title":"Key Record using PRIVATEDNS algorithm may lead to unexpected exit","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-10822"},{"cve":"CVE-2026-11331","month":"2026-07","title":"Potential wildcard CNAME RPZ policy bypass","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":["CWE-790"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11331"},{"cve":"CVE-2026-11352","month":"2026-07","title":"QUIC zero-length UDP datagrams busy-loop","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11352"},{"cve":"CVE-2026-11564","month":"2026-07","title":"Native CA trust persist","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11564"},{"cve":"CVE-2026-11586","month":"2026-07","title":"WS Auto-PONG memory exhaustion","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11586"},{"cve":"CVE-2026-11605","month":"2026-07","title":"Unnecessary validation of DNSSEC signed records","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-408"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11605"},{"cve":"CVE-2026-11622","month":"2026-07","title":"Potential memory usage beyond configured limits","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11622"},{"cve":"CVE-2026-11721","month":"2026-07","title":"Cache poisoning possible with label count discrepancy, RRSIG, and wildcards","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U","cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11721"},{"cve":"CVE-2026-11856","month":"2026-07","title":"cross-origin Digest auth state leak","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11856"},{"cve":"CVE-2026-12064","month":"2026-07","title":"proto-default skips SSH verification","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12064"},{"cve":"CVE-2026-12080","month":"2026-07","title":"Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keys","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-61"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12080"},{"cve":"CVE-2026-12413","month":"2026-07","title":"IKEv2 Denial of Service via malformed fragmentation","family":"Other","component":"Mariner","cna":"libreswan","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-193"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12413"},{"cve":"CVE-2026-12480","month":"2026-07","title":"Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras","family":"Other","component":"Mariner","cna":"@huntr_ai","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12480"},{"cve":"CVE-2026-12547","month":"2026-07","title":"Libsoup: information disclosure in libsoup via soupauthmanager proxy credential leak on proxy switch","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":3.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N","cwe":["CWE-201"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12547"},{"cve":"CVE-2026-12617","month":"2026-07","title":"Record ordering based unexpected exit with CNAME or DNAME","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12617"},{"cve":"CVE-2026-13204","month":"2026-07","title":"Unexpected exit in certain situations with NSEC and NSEC3 both present","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13204"},{"cve":"CVE-2026-13221","month":"2026-07","title":"Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13221"},{"cve":"CVE-2026-13321","month":"2026-07","title":"DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N/E:U","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13321"},{"cve":"CVE-2026-13346","month":"2026-07","title":"pip absolute path traversal during download from malicious package indexes","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-36"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13346"},{"cve":"CVE-2026-14191","month":"2026-07","title":"WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader","family":"Other","component":"Mariner","cna":"securin","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14191"},{"cve":"CVE-2026-14258","month":"2026-07","title":"Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14258"},{"cve":"CVE-2026-14355","month":"2026-07","title":"ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Moderate","cvss":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14355"},{"cve":"CVE-2026-14380","month":"2026-07","title":"DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-95"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14380"},{"cve":"CVE-2026-14461","month":"2026-07","title":"Out-of-bound read in mtr","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14461"},{"cve":"CVE-2026-14586","month":"2026-07","title":"Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14586"},{"cve":"CVE-2026-14647","month":"2026-07","title":"onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Low","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14647"},{"cve":"CVE-2026-14739","month":"2026-07","title":"DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14739"},{"cve":"CVE-2026-14740","month":"2026-07","title":"DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14740"},{"cve":"CVE-2026-15003","month":"2026-07","title":"Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15003"},{"cve":"CVE-2026-15028","month":"2026-07","title":"Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":3.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15028"},{"cve":"CVE-2026-15037","month":"2026-07","title":"XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization","family":"Other","component":"Mariner","cna":"TQtC","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-91"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15037"},{"cve":"CVE-2026-15043","month":"2026-07","title":"DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-480"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15043"},{"cve":"CVE-2026-15157","month":"2026-07","title":"undici vulnerable to CRLF Injection via blob-like body 'type' property","family":"Other","component":"Mariner","cna":"openjs","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cwe":["CWE-93"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15157"},{"cve":"CVE-2026-15308","month":"2026-07","title":"Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15308"},{"cve":"CVE-2026-15392","month":"2026-07","title":"DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15392"},{"cve":"CVE-2026-15588","month":"2026-07","title":"Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15588"},{"cve":"CVE-2026-15709","month":"2026-07","title":"Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-409"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15709"},{"cve":"CVE-2026-15711","month":"2026-07","title":"Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15711"},{"cve":"CVE-2026-15712","month":"2026-07","title":"Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumption","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15712"},{"cve":"CVE-2026-15713","month":"2026-07","title":"Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-772"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15713"},{"cve":"CVE-2026-15714","month":"2026-07","title":"Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15714"},{"cve":"CVE-2026-15788","month":"2026-07","title":"WCOW cache mount source selector resolves NTFS junctions outside of cache root","family":"Other","component":"Mariner","cna":"Docker","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15788"},{"cve":"CVE-2026-16277","month":"2026-07","title":"Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16277"},{"cve":"CVE-2026-16313","month":"2026-07","title":"Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L/E:U","cwe":["CWE-93"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16313"},{"cve":"CVE-2026-16461","month":"2026-07","title":"Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16461"},{"cve":"CVE-2026-16493","month":"2026-07","title":"Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-88"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16493"},{"cve":"CVE-2026-16517","month":"2026-07","title":"Libarchive: libarchive: signed integer overflow in archive_write_zip_header","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16517"},{"cve":"CVE-2026-16554","month":"2026-07","title":"Integer Overflow Leading to Heap Buffer Overflow in cJSON","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16554"},{"cve":"CVE-2026-16615","month":"2026-07","title":"Librest: weak random number generation in pkce implementation","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U","cwe":["CWE-338"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16615"},{"cve":"CVE-2026-16729","month":"2026-07","title":"undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields","family":"Other","component":"Mariner","cna":"openjs","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-74"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16729"},{"cve":"CVE-2026-16768","month":"2026-07","title":"Gdk-pixbuf: out-of-bounds read in ico parser","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16768"},{"cve":"CVE-2026-17527","month":"2026-07","title":"Virt-cdi-operator: containerized-data-importer: cdi.kubevirt.io:view aggregated clusterrole grants create on datavolumes/source, allowing unauthorized pvc clone","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cwe":["CWE-639"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17527"},{"cve":"CVE-2026-17543","month":"2026-07","title":"SQL injection in ext-pgsql via E'...' backslash breakout","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17543"},{"cve":"CVE-2026-20213","month":"2026-07","title":"ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability","family":"Other","component":"Mariner","cna":"cisco","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-120"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20213"},{"cve":"CVE-2026-20214","month":"2026-07","title":"ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability","family":"Other","component":"Mariner","cna":"cisco","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-120"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20214"},{"cve":"CVE-2026-20215","month":"2026-07","title":"ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability","family":"Other","component":"Mariner","cna":"cisco","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-120"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20215"},{"cve":"CVE-2026-20216","month":"2026-07","title":"ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability","family":"Other","component":"Mariner","cna":"cisco","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20216"},{"cve":"CVE-2026-20217","month":"2026-07","title":"ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability","family":"Other","component":"Mariner","cna":"cisco","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-120"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20217"},{"cve":"CVE-2026-20243","month":"2026-07","title":"ClamAV ALZ Archive Processing Denial of Service Vulnerability","family":"Other","component":"Mariner","cna":"cisco","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-120"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20243"},{"cve":"CVE-2026-26080","month":"2026-07","title":"HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-252"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26080"},{"cve":"CVE-2026-26081","month":"2026-07","title":"HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-130"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26081"},{"cve":"CVE-2026-26197","month":"2026-07","title":"Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26197"},{"cve":"CVE-2026-26199","month":"2026-07","title":"Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-124"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26199"},{"cve":"CVE-2026-32665","month":"2026-07","title":"Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32665"},{"cve":"CVE-2026-3842","month":"2026-07","title":"Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write","family":"Other","component":"Mariner","cna":"fedora","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-3842"},{"cve":"CVE-2026-38752","month":"2026-07","title":"A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-38752"},{"cve":"CVE-2026-38753","month":"2026-07","title":"A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-38753"},{"cve":"CVE-2026-38754","month":"2026-07","title":"A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-38754"},{"cve":"CVE-2026-38755","month":"2026-07","title":"A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-38755"},{"cve":"CVE-2026-38968","month":"2026-07","title":"ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-341"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-38968"},{"cve":"CVE-2026-38969","month":"2026-07","title":"ruby webrick through v1.9.2 WEBrick reparses trailer Content-Length into canonical request state, enabling request smuggling.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U","cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-38969"},{"cve":"CVE-2026-39822","month":"2026-07","title":"Root escape via symlink plus trailing slash in os","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-61"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-39822"},{"cve":"CVE-2026-40467","month":"2026-07","title":"Use after free in gawk","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40467"},{"cve":"CVE-2026-40468","month":"2026-07","title":"Heap buffer overflow in gawk","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40468"},{"cve":"CVE-2026-40553","month":"2026-07","title":"Stack-based buffer overflow in gawk","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40553"},{"cve":"CVE-2026-40691","month":"2026-07","title":"Packet of death for DNSCrypt over TCP","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40691"},{"cve":"CVE-2026-41579","month":"2026-07","title":"runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cwe":["CWE-61"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41579"},{"cve":"CVE-2026-41608","month":"2026-07","title":"Apache Thrift: Unbounded Zlib Decompression in Python THeaderTransport","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-409"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41608"},{"cve":"CVE-2026-41637","month":"2026-07","title":"Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-772"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41637"},{"cve":"CVE-2026-42505","month":"2026-07","title":"Invoking Encrypted Client Hello privacy leak in crypto/tls","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-201"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42505"},{"cve":"CVE-2026-42533","month":"2026-07","title":"NGINX Map directive and Regex matching vulnerability","family":"Other","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42533"},{"cve":"CVE-2026-42792","month":"2026-07","title":"epmd permanent DoS via EMFILE on accept(2) in erts","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-755"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42792"},{"cve":"CVE-2026-42955","month":"2026-07","title":"Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U","cwe":["CWE-672"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42955"},{"cve":"CVE-2026-43871","month":"2026-07","title":"Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limit","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43871"},{"cve":"CVE-2026-44210","month":"2026-07","title":"Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-88"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44210"},{"cve":"CVE-2026-44621","month":"2026-07","title":"Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-754"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44621"},{"cve":"CVE-2026-44687","month":"2026-07","title":"Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-193"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44687"},{"cve":"CVE-2026-44690","month":"2026-07","title":"Cross-zone wildcard cache poisoning via RRSIG.labels manipulation","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U","cwe":["CWE-345"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44690"},{"cve":"CVE-2026-44943","month":"2026-07","title":"remote limited file-write as root via discovery in open-iscsi","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44943"},{"cve":"CVE-2026-44944","month":"2026-07","title":"iscsiuio control-socket authentication bypass in open-iscsi","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44944"},{"cve":"CVE-2026-46582","month":"2026-07","title":"A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U","cwe":["CWE-358"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46582"},{"cve":"CVE-2026-46600","month":"2026-07","title":"Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46600"},{"cve":"CVE-2026-47143","month":"2026-07","title":"Capstone has a NULL Pointer Dereference with 3DNow! opcodes","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47143"},{"cve":"CVE-2026-47729","month":"2026-07","title":"Squid: Memory disclosure in FTP gateway","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47729"},{"cve":"CVE-2026-48144","month":"2026-07","title":"Apache Thrift: c_glib TLS Client Missing Hostname Verification","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-297"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48144"},{"cve":"CVE-2026-48145","month":"2026-07","title":"Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-297"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48145"},{"cve":"CVE-2026-48586","month":"2026-07","title":"Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size Limit","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-409"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48586"},{"cve":"CVE-2026-48863","month":"2026-07","title":"Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48863"},{"cve":"CVE-2026-50012","month":"2026-07","title":"Squid: Memory corruption in cache_digest reply handling","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50012"},{"cve":"CVE-2026-50045","month":"2026-07","title":"'max-global-quota' reset by DNSSEC validation restarts","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-406"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50045"},{"cve":"CVE-2026-50046","month":"2026-07","title":"Possible heap use-after-free in an error path when a DoT forwarded query is jostled out","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50046"},{"cve":"CVE-2026-50243","month":"2026-07","title":"'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-348"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50243"},{"cve":"CVE-2026-50248","month":"2026-07","title":"BOGUS configured primary hostname accepted for XFR in auth/rpz zones","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L/E:U","cwe":["CWE-345"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50248"},{"cve":"CVE-2026-50251","month":"2026-07","title":"Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-184"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50251"},{"cve":"CVE-2026-50252","month":"2026-07","title":"Possible cache poisoning attack by mapping source port population per thread","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-349"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50252"},{"cve":"CVE-2026-50721","month":"2026-07","title":"IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload","family":"Other","component":"Mariner","cna":"libreswan","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50721"},{"cve":"CVE-2026-50722","month":"2026-07","title":"IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload","family":"Other","component":"Mariner","cna":"libreswan","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50722"},{"cve":"CVE-2026-52863","month":"2026-07","title":"Memory corruption could lead to crash and denial of service","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52863"},{"cve":"CVE-2026-53329","month":"2026-07","title":"drm/amd/display: Use krealloc_array() in dal_vector_reserve()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53329"},{"cve":"CVE-2026-53337","month":"2026-07","title":"net: bonding: fix NULL pointer dereference in bond_do_ioctl()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53337"},{"cve":"CVE-2026-53343","month":"2026-07","title":"ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53343"},{"cve":"CVE-2026-53345","month":"2026-07","title":"KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53345"},{"cve":"CVE-2026-53347","month":"2026-07","title":"drm/virtio: Fix driver removal with disabled KMS","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53347"},{"cve":"CVE-2026-53349","month":"2026-07","title":"netfilter: nf_conntrack: destroy stale expectfn expectations on unregister","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53349"},{"cve":"CVE-2026-53352","month":"2026-07","title":"signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53352"},{"cve":"CVE-2026-53353","month":"2026-07","title":"hsr: Remove WARN_ONCE() in hsr_addr_is_self().","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53353"},{"cve":"CVE-2026-53354","month":"2026-07","title":"arm64: errata: Mitigate TLBI errata on various Arm CPUs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53354"},{"cve":"CVE-2026-53355","month":"2026-07","title":"net: rds: clear i_sends on setup unwind","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53355"},{"cve":"CVE-2026-53356","month":"2026-07","title":"drm/i915/gem: Fix phys BO pread/pwrite with offset","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53356"},{"cve":"CVE-2026-53357","month":"2026-07","title":"Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53357"},{"cve":"CVE-2026-53361","month":"2026-07","title":"af_unix: Set gc_in_progress to true in unix_gc().","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53361"},{"cve":"CVE-2026-53362","month":"2026-07","title":"ipv6: account for fraggap on the paged allocation path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":true,"kev_added":"2026-08-27","class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53362"},{"cve":"CVE-2026-53366","month":"2026-07","title":"ipv4: account for fraggap on the paged allocation path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53366"},{"cve":"CVE-2026-53368","month":"2026-07","title":"f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53368"},{"cve":"CVE-2026-53374","month":"2026-07","title":"drm/amdgpu: zero-initialize GART table on allocation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53374"},{"cve":"CVE-2026-53375","month":"2026-07","title":"drm/amdgpu/vce: Prevent partial address patches","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53375"},{"cve":"CVE-2026-53376","month":"2026-07","title":"drm/amdkfd: Add upper bound check for num_of_nodes","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53376"},{"cve":"CVE-2026-53377","month":"2026-07","title":"drm/msm: always recover the gpu","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53377"},{"cve":"CVE-2026-53381","month":"2026-07","title":"virtiofs: fix UAF on submount umount","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53381"},{"cve":"CVE-2026-53382","month":"2026-07","title":"media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53382"},{"cve":"CVE-2026-53384","month":"2026-07","title":"serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53384"},{"cve":"CVE-2026-53385","month":"2026-07","title":"vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53385"},{"cve":"CVE-2026-53388","month":"2026-07","title":"fuse: re-lock request before replacing page cache folio","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53388"},{"cve":"CVE-2026-53391","month":"2026-07","title":"NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53391"},{"cve":"CVE-2026-53392","month":"2026-07","title":"NFSv4/flexfiles: reject zero filehandle version count","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53392"},{"cve":"CVE-2026-53393","month":"2026-07","title":"nfsd: reset write verifier on deferred writeback errors","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53393"},{"cve":"CVE-2026-53397","month":"2026-07","title":"nfsd: fix posix_acl leak on SETACL decode failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53397"},{"cve":"CVE-2026-53398","month":"2026-07","title":"NFSD: Fix SECINFO_NO_NAME decode error cleanup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53398"},{"cve":"CVE-2026-53399","month":"2026-07","title":"nfsd: release layout stid on setlease failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53399"},{"cve":"CVE-2026-53400","month":"2026-07","title":"i2c: core: fix adapter registration race","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53400"},{"cve":"CVE-2026-53401","month":"2026-07","title":"fbdev: omap2: fix use-after-free in omapfb_mmap","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53401"},{"cve":"CVE-2026-53402","month":"2026-07","title":"fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53402"},{"cve":"CVE-2026-53403","month":"2026-07","title":"fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53403"},{"cve":"CVE-2026-54171","month":"2026-07","title":"Excon: redact additional sensitive/risky headers when following redirects","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-201"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54171"},{"cve":"CVE-2026-54332","month":"2026-07","title":"GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54332"},{"cve":"CVE-2026-54478","month":"2026-07","title":"DNS Cookie bypass when combined with proxy-protocol use","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U","cwe":["CWE-290"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54478"},{"cve":"CVE-2026-54522","month":"2026-07","title":"MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"(none)","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54522"},{"cve":"CVE-2026-54787","month":"2026-07","title":"sigstore-go fails to check signature timestamps against a signing key's validity period","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"(none)","cvss":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-324"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54787"},{"cve":"CVE-2026-54886","month":"2026-07","title":"SSH SFTP server denial of service via extended channel data infinite loop","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54886"},{"cve":"CVE-2026-54887","month":"2026-07","title":"DTLS server cookie bypass during startup window due to empty initial cookie secret","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-1394"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54887"},{"cve":"CVE-2026-54908","month":"2026-07","title":"Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54908"},{"cve":"CVE-2026-55708","month":"2026-07","title":"Privacy/configuration issue when adding local data in views through 'unbound-control'","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Low","cvss":3.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N","cwe":["CWE-1188"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55708"},{"cve":"CVE-2026-55717","month":"2026-07","title":"'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55717"},{"cve":"CVE-2026-55737","month":"2026-07","title":"Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-195"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55737"},{"cve":"CVE-2026-55950","month":"2026-07","title":"DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55950"},{"cve":"CVE-2026-55953","month":"2026-07","title":"TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U","cwe":["CWE-757"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55953"},{"cve":"CVE-2026-55969","month":"2026-07","title":"Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55969"},{"cve":"CVE-2026-55970","month":"2026-07","title":"Apache Thrift: C++ heap out-of-bounds read in THeaderTransport::readHeaderFormat()","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55970"},{"cve":"CVE-2026-55971","month":"2026-07","title":"Apache Thrift: C++ ZLIB heap buffer overflow (write) in THeaderTransport::untransform()","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55971"},{"cve":"CVE-2026-55973","month":"2026-07","title":"'dns-error-reporting: yes' leads to stack buffer overflow","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55973"},{"cve":"CVE-2026-55990","month":"2026-07","title":"Packet of death for a DNSCrypt misconfigured Unbound","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-457"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55990"},{"cve":"CVE-2026-55991","month":"2026-07","title":"Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-195"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55991"},{"cve":"CVE-2026-55995","month":"2026-07","title":"Double-free in the iSNS attribute decoder in open-iscsi","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55995"},{"cve":"CVE-2026-56000","month":"2026-07","title":"xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56000"},{"cve":"CVE-2026-56001","month":"2026-07","title":"libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Important","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56001"},{"cve":"CVE-2026-56002","month":"2026-07","title":"libXfont2 PCF Font Parsing Heap Buffer Overflow","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Important","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56002"},{"cve":"CVE-2026-56003","month":"2026-07","title":"libXfont2 computeProps Property Buffer Heap Buffer Overflow","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Important","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56003"},{"cve":"CVE-2026-56288","month":"2026-07","title":"NULL Pointer Dereference in GNU patch","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56288"},{"cve":"CVE-2026-56289","month":"2026-07","title":"Loop with Unreachable Exit Condition in GNU patch","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56289"},{"cve":"CVE-2026-56389","month":"2026-07","title":"Arbitrary Command Execution in GNU Bison","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56389"},{"cve":"CVE-2026-56390","month":"2026-07","title":"Arbitrary Output Location Change in GNU Bison","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56390"},{"cve":"CVE-2026-56392","month":"2026-07","title":"Heap-based Buffer Overflow in GNU coreutils","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56392"},{"cve":"CVE-2026-56416","month":"2026-07","title":"Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L/E:U","cwe":["CWE-354"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56416"},{"cve":"CVE-2026-56434","month":"2026-07","title":"NGINX ngx_http_ssi_module vulnerability","family":"Other","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56434"},{"cve":"CVE-2026-56444","month":"2026-07","title":"Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-772"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56444"},{"cve":"CVE-2026-56847","month":"2026-07","title":"A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`.\n\nThis can lead to confidentiality impact or bypass of the intended security boundary under affected configurations.\n\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.","family":"Other","component":"Mariner","cna":"hackerone","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-1119"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56847"},{"cve":"CVE-2026-56850","month":"2026-07","title":"A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates.\n\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.","family":"Other","component":"Mariner","cna":"hackerone","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56850"},{"cve":"CVE-2026-56852","month":"2026-07","title":"Infinite loop on invalid input in golang.org/x/text","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56852"},{"cve":"CVE-2026-57211","month":"2026-07","title":"RabbitMQ: UNC SSRF affecting the management UI on Windows","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","cwe":["CWE-36"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57211"},{"cve":"CVE-2026-57213","month":"2026-07","title":"RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57213"},{"cve":"CVE-2026-57215","month":"2026-07","title":"RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57215"},{"cve":"CVE-2026-57216","month":"2026-07","title":"RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57216"},{"cve":"CVE-2026-57217","month":"2026-07","title":"RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57217"},{"cve":"CVE-2026-57219","month":"2026-07","title":"RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57219"},{"cve":"CVE-2026-57220","month":"2026-07","title":"RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57220"},{"cve":"CVE-2026-57432","month":"2026-07","title":"Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57432"},{"cve":"CVE-2026-57433","month":"2026-07","title":"Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57433"},{"cve":"CVE-2026-58023","month":"2026-07","title":"Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58023"},{"cve":"CVE-2026-58039","month":"2026-07","title":"A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside --allow-fs-write paths.\n\nThis can lead to confidentiality impact or bypass of the intended security boundary under affected configurations.\n\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.","family":"Other","component":"Mariner","cna":"hackerone","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58039"},{"cve":"CVE-2026-58040","month":"2026-07","title":"An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934).\n\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.","family":"Other","component":"Mariner","cna":"hackerone","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","cwe":["CWE-297"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58040"},{"cve":"CVE-2026-58043","month":"2026-07","title":"A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries.\n\nUnder `--permission`, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist.\n\nThis vulnerability affects Node.js **main**, **22.x**, **24.x**, and **26.x**.","family":"Other","component":"Mariner","cna":"hackerone","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58043"},{"cve":"CVE-2026-58207","month":"2026-07","title":"NATS Server: Remote crash via integer overflow in Connz pagination","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58207"},{"cve":"CVE-2026-58208","month":"2026-07","title":"NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U","cwe":["CWE-248"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58208"},{"cve":"CVE-2026-58209","month":"2026-07","title":"NATS Server: MQTT retained and QoS replay bypass subscribe deny filters","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58209"},{"cve":"CVE-2026-58227","month":"2026-07","title":"TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58227"},{"cve":"CVE-2026-58250","month":"2026-07","title":"NATS Server: Pre-auth server crash via double INFO in leafnode handshake","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58250"},{"cve":"CVE-2026-58251","month":"2026-07","title":"NATS Server: Queue Subscribe Authz Bypass","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58251"},{"cve":"CVE-2026-58252","month":"2026-07","title":"NATS Server: Subscribe Authz Bypass via Wildcard-Overlap","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58252"},{"cve":"CVE-2026-58253","month":"2026-07","title":"NATS Server: Route API Auth Bypass","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L/E:U","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58253"},{"cve":"CVE-2026-58662","month":"2026-07","title":"Apache Thrift: C++ THeaderTransport::readString() info-header length bounds bypass","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58662"},{"cve":"CVE-2026-59248","month":"2026-07","title":"Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59248"},{"cve":"CVE-2026-59250","month":"2026-07","title":"Megaco flex scanner buffer overflow via oversized property parm name","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-120"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59250"},{"cve":"CVE-2026-59251","month":"2026-07","title":"Denial of service via exponential certificate policy tree growth in path validation","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59251"},{"cve":"CVE-2026-59818","month":"2026-07","title":"etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59818"},{"cve":"CVE-2026-59831","month":"2026-07","title":"GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-829"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59831"},{"cve":"CVE-2026-59843","month":"2026-07","title":"Libssh: libssh: denial of service via zero advertised channel packet size","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59843"},{"cve":"CVE-2026-59844","month":"2026-07","title":"Libssh: libssh: denial of service via oversized sftp read length","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59844"},{"cve":"CVE-2026-59845","month":"2026-07","title":"Libssh: libssh: denial of service via unchecked proxycommand fork() failure","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H/E:U","cwe":["CWE-390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59845"},{"cve":"CVE-2026-59847","month":"2026-07","title":"Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U","cwe":["CWE-1310"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59847"},{"cve":"CVE-2026-59848","month":"2026-07","title":"Libssh: libssh: denial of service via sftp responses with unknown request ids","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59848"},{"cve":"CVE-2026-59850","month":"2026-07","title":"Libssh: libssh: use-after-free via data callbacks on closed channels","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59850"},{"cve":"CVE-2026-59856","month":"2026-07","title":"Vim: Arbitrary Code Execution via PHP Omni-Completion","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59856"},{"cve":"CVE-2026-59884","month":"2026-07","title":"pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59884"},{"cve":"CVE-2026-59885","month":"2026-07","title":"pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59885"},{"cve":"CVE-2026-59886","month":"2026-07","title":"pyasn1: Uncontrolled resource consumption when converting decoded REAL values","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59886"},{"cve":"CVE-2026-59890","month":"2026-07","title":"setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U","cwe":["CWE-176"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59890"},{"cve":"CVE-2026-59922","month":"2026-07","title":"Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59922"},{"cve":"CVE-2026-59925","month":"2026-07","title":"inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59925"},{"cve":"CVE-2026-59926","month":"2026-07","title":"Mistune: XSS via unescaped class option in Admonition directive","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59926"},{"cve":"CVE-2026-59928","month":"2026-07","title":"Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59928"},{"cve":"CVE-2026-59930","month":"2026-07","title":"Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id=\"toc_N\"` content","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cwe":["CWE-345"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59930"},{"cve":"CVE-2026-59995","month":"2026-07","title":"sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when \"sftp server:/path .\" is used with an attacker-controlled server.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59995"},{"cve":"CVE-2026-59996","month":"2026-07","title":"scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59996"},{"cve":"CVE-2026-59997","month":"2026-07","title":"internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59997"},{"cve":"CVE-2026-59998","month":"2026-07","title":"sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-573"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59998"},{"cve":"CVE-2026-59999","month":"2026-07","title":"In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-348"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59999"},{"cve":"CVE-2026-60000","month":"2026-07","title":"sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-60000"},{"cve":"CVE-2026-60001","month":"2026-07","title":"sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-60001"},{"cve":"CVE-2026-60002","month":"2026-07","title":"ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-60002"},{"cve":"CVE-2026-60005","month":"2026-07","title":"NGINX ngx_http_slice_module vulnerability","family":"Other","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-60005"},{"cve":"CVE-2026-60081","month":"2026-07","title":"DBI::ProfileData versions before 1.651 for Perl do not limit the path index","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-60081"},{"cve":"CVE-2026-60082","month":"2026-07","title":"DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-60082"},{"cve":"CVE-2026-62299","month":"2026-07","title":"CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62299"},{"cve":"CVE-2026-62309","month":"2026-07","title":"CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport \u2014 single 28-byte packet remote DoS","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62309"},{"cve":"CVE-2026-62994","month":"2026-07","title":"CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-248"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62994"},{"cve":"CVE-2026-63308","month":"2026-07","title":"Helm Files.Lines Denial of Service via Empty Chart Files","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cwe":["CWE-129"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63308"},{"cve":"CVE-2026-63793","month":"2026-07","title":"ntfs: serialize volume label accesses","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63793"},{"cve":"CVE-2026-63794","month":"2026-07","title":"KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63794"},{"cve":"CVE-2026-63795","month":"2026-07","title":"9p: avoid putting oldfid in p9_client_walk() error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63795"},{"cve":"CVE-2026-63796","month":"2026-07","title":"ocfs2: reject oversized group bitmap descriptors","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63796"},{"cve":"CVE-2026-63800","month":"2026-07","title":"pNFS: Fix use-after-free in pnfs_update_layout()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63800"},{"cve":"CVE-2026-63801","month":"2026-07","title":"tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63801"},{"cve":"CVE-2026-63802","month":"2026-07","title":"blk-cgroup: fix UAF in __blkcg_rstat_flush()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63802"},{"cve":"CVE-2026-63803","month":"2026-07","title":"hdlc_ppp: sync per-proto timers before freeing hdlc state","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63803"},{"cve":"CVE-2026-63805","month":"2026-07","title":"crypto: nx - fix nx_crypto_ctx_exit argument","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63805"},{"cve":"CVE-2026-63806","month":"2026-07","title":"KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63806"},{"cve":"CVE-2026-63807","month":"2026-07","title":"KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63807"},{"cve":"CVE-2026-63809","month":"2026-07","title":"bpf: use kvfree() for replaced sysctl write buffer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63809"},{"cve":"CVE-2026-63810","month":"2026-07","title":"block: Avoid mounting the bdev pseudo-filesystem in userspace","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63810"},{"cve":"CVE-2026-63811","month":"2026-07","title":"f2fs: read COW data with the original inode during atomic write","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63811"},{"cve":"CVE-2026-63819","month":"2026-07","title":"f2fs: fix to do sanity check on f2fs_get_node_folio_ra()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63819"},{"cve":"CVE-2026-63821","month":"2026-07","title":"wifi: rtw88: usb: fix memory leaks on USB write failures","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63821"},{"cve":"CVE-2026-63823","month":"2026-07","title":"keys: Pin request_key_auth payload in instantiate paths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63823"},{"cve":"CVE-2026-63824","month":"2026-07","title":"KEYS: fix overflow in keyctl_pkey_params_get_2()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63824"},{"cve":"CVE-2026-63825","month":"2026-07","title":"gcov: use atomic counter updates to fix concurrent access crashes","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63825"},{"cve":"CVE-2026-63826","month":"2026-07","title":"fbdev: fix use-after-free in store_modes()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63826"},{"cve":"CVE-2026-63827","month":"2026-07","title":"apparmor: fix use-after-free in rawdata dedup loop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63827"},{"cve":"CVE-2026-63828","month":"2026-07","title":"apparmor: mediate the implicit connect of TCP fast open sendmsg","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63828"},{"cve":"CVE-2026-63829","month":"2026-07","title":"net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63829"},{"cve":"CVE-2026-63830","month":"2026-07","title":"net: skmsg: preserve sg.copy across SG transforms","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63830"},{"cve":"CVE-2026-63831","month":"2026-07","title":"mac802154: llsec: add skb_cow_data() before in-place crypto","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63831"},{"cve":"CVE-2026-63832","month":"2026-07","title":"wifi: mt76: add wcid publish check in mt76_sta_add","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63832"},{"cve":"CVE-2026-63833","month":"2026-07","title":"ntfs3: reject direct userspace writes to reserved $LX* xattrs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63833"},{"cve":"CVE-2026-63834","month":"2026-07","title":"batman-adv: tp_meter: restrict number of unacked list entries","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63834"},{"cve":"CVE-2026-63835","month":"2026-07","title":"batman-adv: v: prevent OGM aggregation on disabled hardif","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63835"},{"cve":"CVE-2026-63836","month":"2026-07","title":"batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63836"},{"cve":"CVE-2026-63853","month":"2026-07","title":"drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63853"},{"cve":"CVE-2026-63858","month":"2026-07","title":"netfilter: nf_tables: add hook transactions for device deletions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63858"},{"cve":"CVE-2026-63871","month":"2026-07","title":"Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63871"},{"cve":"CVE-2026-63872","month":"2026-07","title":"esp: fix page frag reference leak on skb_to_sgvec failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63872"},{"cve":"CVE-2026-63879","month":"2026-07","title":"drm/amdgpu: fix amdgpu_hmm_range_get_pages","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63879"},{"cve":"CVE-2026-63881","month":"2026-07","title":"drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63881"},{"cve":"CVE-2026-63882","month":"2026-07","title":"drm/amdkfd: fix NULL pointer bug in svm_range_set_attr","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63882"},{"cve":"CVE-2026-6390","month":"2026-07","title":"Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H","cwe":["CWE-134"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6390"},{"cve":"CVE-2026-63940","month":"2026-07","title":"KVM: SEV: Ignore Port I/O requests of length '0'","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63940"},{"cve":"CVE-2026-63954","month":"2026-07","title":"hpfs: fix a crash if hpfs_map_dnode_bitmap fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63954"},{"cve":"CVE-2026-63959","month":"2026-07","title":"usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63959"},{"cve":"CVE-2026-63960","month":"2026-07","title":"usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63960"},{"cve":"CVE-2026-63961","month":"2026-07","title":"usb: typec: altmodes/displayport: validate count before reading Status Update VDO","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63961"},{"cve":"CVE-2026-63962","month":"2026-07","title":"usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63962"},{"cve":"CVE-2026-63963","month":"2026-07","title":"usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63963"},{"cve":"CVE-2026-63964","month":"2026-07","title":"usb: typec: ucsi: ccg: reject firmware images without a ':' record header","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63964"},{"cve":"CVE-2026-63974","month":"2026-07","title":"Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63974"},{"cve":"CVE-2026-63978","month":"2026-07","title":"net/handshake: Drain pending requests at net namespace exit","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63978"},{"cve":"CVE-2026-63979","month":"2026-07","title":"net/handshake: hand off the pinned file reference to accept_doit","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63979"},{"cve":"CVE-2026-63983","month":"2026-07","title":"net/sched: fix packet loop on netem when duplicate is on","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63983"},{"cve":"CVE-2026-63999","month":"2026-07","title":"ethtool: rss: fix indir_table and hkey leak on get_rxfh failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63999"},{"cve":"CVE-2026-64001","month":"2026-07","title":"ALSA: pcm: oss: Fix setup list UAF on proc write error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64001"},{"cve":"CVE-2026-64017","month":"2026-07","title":"blk-mq: pop cached request if it is usable","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64017"},{"cve":"CVE-2026-64036","month":"2026-07","title":"cgroup/rstat: validate cpu before css_rstat_cpu() access","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64036"},{"cve":"CVE-2026-64038","month":"2026-07","title":"hwmon: (lm90) Stop work before releasing hwmon device","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64038"},{"cve":"CVE-2026-64060","month":"2026-07","title":"netfs: Fix leak of request in netfs_write_begin() error handling","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64060"},{"cve":"CVE-2026-64070","month":"2026-07","title":"powerpc/hv-gpci: fix preempt count leak in sysfs show paths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64070"},{"cve":"CVE-2026-64076","month":"2026-07","title":"netfilter: bridge: eb_tables: close module init race","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64076"},{"cve":"CVE-2026-64077","month":"2026-07","title":"netfilter: ebtables: move to two-stage removal scheme","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64077"},{"cve":"CVE-2026-64078","month":"2026-07","title":"netfilter: x_tables: add and use xtables_unregister_table_exit","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64078"},{"cve":"CVE-2026-64079","month":"2026-07","title":"netfilter: x_tables: allocate hook ops while under mutex","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64079"},{"cve":"CVE-2026-64082","month":"2026-07","title":"riscv: Fix register corruption from uninitialized cregs on error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64082"},{"cve":"CVE-2026-64097","month":"2026-07","title":"drm/amd/display: Validate GPIO pin LUT table size before iterating","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64097"},{"cve":"CVE-2026-64112","month":"2026-07","title":"rbd: eliminate a race in lock_dwork draining on unmap","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64112"},{"cve":"CVE-2026-64117","month":"2026-07","title":"wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64117"},{"cve":"CVE-2026-64133","month":"2026-07","title":"ALSA: asihpi: Fix potential OOB array access at reading cache","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64133"},{"cve":"CVE-2026-64138","month":"2026-07","title":"ksmbd: validate SID in parent security descriptor during ACL inheritance","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64138"},{"cve":"CVE-2026-64146","month":"2026-07","title":"erofs: fix metabuf leak in inode xattr initialization","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64146"},{"cve":"CVE-2026-64154","month":"2026-07","title":"drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64154"},{"cve":"CVE-2026-64160","month":"2026-07","title":"netfs: Fix potential for tearing in ->remote_i_size and ->zero_point","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64160"},{"cve":"CVE-2026-64187","month":"2026-07","title":"xfs: fail recovery on a committed log item with no regions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64187"},{"cve":"CVE-2026-64188","month":"2026-07","title":"net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64188"},{"cve":"CVE-2026-64189","month":"2026-07","title":"netfilter: ipset: fix race between dump and ip_set_list resize","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64189"},{"cve":"CVE-2026-64190","month":"2026-07","title":"net: team: fix NULL pointer dereference in team_xmit during mode change","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64190"},{"cve":"CVE-2026-64191","month":"2026-07","title":"i2c: stub: Reject I2C block transfers with invalid length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64191"},{"cve":"CVE-2026-64192","month":"2026-07","title":"bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64192"},{"cve":"CVE-2026-64205","month":"2026-07","title":"i2c: i801: fix hardware state machine corruption in error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64205"},{"cve":"CVE-2026-64206","month":"2026-07","title":"Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64206"},{"cve":"CVE-2026-64210","month":"2026-07","title":"net/mlx5e: xsk: Fix unlocked writing to ICOSQ","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64210"},{"cve":"CVE-2026-64212","month":"2026-07","title":"wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64212"},{"cve":"CVE-2026-64213","month":"2026-07","title":"hwmon: (lm90) Add lock protection to lm90_alert","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64213"},{"cve":"CVE-2026-64219","month":"2026-07","title":"drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64219"},{"cve":"CVE-2026-64227","month":"2026-07","title":"ACPI: driver: Check ACPI_COMPANION() against NULL during probe","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64227"},{"cve":"CVE-2026-64237","month":"2026-07","title":"Input: elan_i2c - validate firmware size before use","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64237"},{"cve":"CVE-2026-64241","month":"2026-07","title":"gpio: rockchip: teardown bugs and resource leaks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64241"},{"cve":"CVE-2026-64244","month":"2026-07","title":"drivers/base/memory: set mem->altmap after successful device registration","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64244"},{"cve":"CVE-2026-64245","month":"2026-07","title":"fbdev: modedb: fix a possible UAF in fb_find_mode()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64245"},{"cve":"CVE-2026-64247","month":"2026-07","title":"KVM: x86: hyper-v: Bound the bank index when querying sparse banks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64247"},{"cve":"CVE-2026-64248","month":"2026-07","title":"MIPS: smp: report dying CPU to RCU in stop_this_cpu()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64248"},{"cve":"CVE-2026-64250","month":"2026-07","title":"LoongArch: Report dying CPU to RCU in stop_this_cpu()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64250"},{"cve":"CVE-2026-64255","month":"2026-07","title":"wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64255"},{"cve":"CVE-2026-64266","month":"2026-07","title":"fuse: re-lock request before returning from fuse_ref_folio()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64266"},{"cve":"CVE-2026-64268","month":"2026-07","title":"RDMA/siw: bound Read Response placement to the RREAD length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64268"},{"cve":"CVE-2026-64269","month":"2026-07","title":"RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64269"},{"cve":"CVE-2026-64275","month":"2026-07","title":"Input: elan_i2c - prevent division by zero and arithmetic underflow","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64275"},{"cve":"CVE-2026-64276","month":"2026-07","title":"Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64276"},{"cve":"CVE-2026-64277","month":"2026-07","title":"Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64277"},{"cve":"CVE-2026-64279","month":"2026-07","title":"i2c: core: fix adapter deregistration race","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64279"},{"cve":"CVE-2026-64280","month":"2026-07","title":"fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64280"},{"cve":"CVE-2026-64286","month":"2026-07","title":"KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64286"},{"cve":"CVE-2026-64287","month":"2026-07","title":"KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64287"},{"cve":"CVE-2026-64294","month":"2026-07","title":"mm: do file ownership checks with the proper mount idmap","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64294"},{"cve":"CVE-2026-64298","month":"2026-07","title":"NFSv4: include MAY_WRITE in open permission mask for O_TRUNC","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64298"},{"cve":"CVE-2026-64299","month":"2026-07","title":"tracing: Prevent out-of-bounds read in glob matching","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64299"},{"cve":"CVE-2026-64303","month":"2026-07","title":"spi: fsl-lpspi: terminate the RX channel on TX prepare failure path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64303"},{"cve":"CVE-2026-64305","month":"2026-07","title":"crypto: qat - protect service table iterations with service_lock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64305"},{"cve":"CVE-2026-64306","month":"2026-07","title":"crypto: drbg - Fix returning success on failure in CTR_DRBG","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64306"},{"cve":"CVE-2026-64313","month":"2026-07","title":"crypto: ecc - Fix carry overflow in vli multiplication","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64313"},{"cve":"CVE-2026-64316","month":"2026-07","title":"crypto: caam - use print_hex_dump_devel to guard key hex dumps","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64316"},{"cve":"CVE-2026-64317","month":"2026-07","title":"isofs: bound Rock Ridge symlink components to the SL record","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64317"},{"cve":"CVE-2026-64318","month":"2026-07","title":"partitions: aix: bound the pp_count scan to the ppe array","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64318"},{"cve":"CVE-2026-64320","month":"2026-07","title":"nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64320"},{"cve":"CVE-2026-64322","month":"2026-07","title":"udf: validate sparing table length as an entry count, not a byte count","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64322"},{"cve":"CVE-2026-64323","month":"2026-07","title":"udf: validate VAT header length against the VAT inode size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64323"},{"cve":"CVE-2026-64324","month":"2026-07","title":"udf: validate free block extents against the partition length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64324"},{"cve":"CVE-2026-64326","month":"2026-07","title":"block: skip sync_blockdev() on surprise removal in bdev_mark_dead()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64326"},{"cve":"CVE-2026-64332","month":"2026-07","title":"USB: ulpi: fix memory leak on registration failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64332"},{"cve":"CVE-2026-64341","month":"2026-07","title":"USB: iowarrior: fix use-after-free on disconnect race","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64341"},{"cve":"CVE-2026-64346","month":"2026-07","title":"usb: gadget: udc: Fix use-after-free in gadget_match_driver","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64346"},{"cve":"CVE-2026-64348","month":"2026-07","title":"usb: free iso schedules on failed submit","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64348"},{"cve":"CVE-2026-64350","month":"2026-07","title":"usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64350"},{"cve":"CVE-2026-64351","month":"2026-07","title":"net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64351"},{"cve":"CVE-2026-64352","month":"2026-07","title":"bpf: Allow LPM map access from sleepable BPF programs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64352"},{"cve":"CVE-2026-64355","month":"2026-07","title":"bpf: Reject fragmented frames in devmap","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64355"},{"cve":"CVE-2026-64362","month":"2026-07","title":"HID: lg-g15: cancel pending work on remove to fix a use-after-free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64362"},{"cve":"CVE-2026-64363","month":"2026-07","title":"HID: appleir: fix UAF on pending key_up_timer in remove()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64363"},{"cve":"CVE-2026-64364","month":"2026-07","title":"HID: multitouch: fix out-of-bounds bit access on mt_io_flags","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64364"},{"cve":"CVE-2026-64368","month":"2026-07","title":"mm/slab: do not limit zeroing to orig_size when only red zoning is enabled","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64368"},{"cve":"CVE-2026-64370","month":"2026-07","title":"posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64370"},{"cve":"CVE-2026-64371","month":"2026-07","title":"proc: protect ptrace_may_access() with exec_update_lock (part 1)","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64371"},{"cve":"CVE-2026-64372","month":"2026-07","title":"cpufreq: pcc: fix use-after-free and double free in _OSC evaluation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64372"},{"cve":"CVE-2026-64373","month":"2026-07","title":"cpufreq: Fix hotplug-suspend race during reboot","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64373"},{"cve":"CVE-2026-64374","month":"2026-07","title":"sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64374"},{"cve":"CVE-2026-64375","month":"2026-07","title":"proc: protect ptrace_may_access() with exec_update_lock (FD links)","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64375"},{"cve":"CVE-2026-64377","month":"2026-07","title":"cpufreq: qcom-cpufreq-hw: Fix possible double free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64377"},{"cve":"CVE-2026-64378","month":"2026-07","title":"writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64378"},{"cve":"CVE-2026-64379","month":"2026-07","title":"smb: client: mask server-provided mode to 07777 in modefromsid","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64379"},{"cve":"CVE-2026-64380","month":"2026-07","title":"smb: client: harden POSIX SID length parsing","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64380"},{"cve":"CVE-2026-64381","month":"2026-07","title":"smb: client: Fix next buffer leak in receive_encrypted_standard()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64381"},{"cve":"CVE-2026-64382","month":"2026-07","title":"smb: client: fix double-free in SMB2_open() replay","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64382"},{"cve":"CVE-2026-64383","month":"2026-07","title":"smb: client: fix double-free in SMB2_flush() replay","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64383"},{"cve":"CVE-2026-64384","month":"2026-07","title":"smb: client: fix change notify replay double-free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64384"},{"cve":"CVE-2026-64385","month":"2026-07","title":"smb: client: fix double-free in SMB2_ioctl() replay","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64385"},{"cve":"CVE-2026-64386","month":"2026-07","title":"smb: client: fix query_info() replay double-free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64386"},{"cve":"CVE-2026-64387","month":"2026-07","title":"smb: client: fix query directory replay double-free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64387"},{"cve":"CVE-2026-64388","month":"2026-07","title":"smb/client: fix chown/chgrp with SMB3 POSIX Extensions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64388"},{"cve":"CVE-2026-64389","month":"2026-07","title":"ksmbd: validate NTLMv2 response before updating session key","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64389"},{"cve":"CVE-2026-64391","month":"2026-07","title":"ksmbd: use opener credentials for ADS I/O","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64391"},{"cve":"CVE-2026-64400","month":"2026-07","title":"ksmbd: prevent path traversal bypass by restricting caseless retry","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64400"},{"cve":"CVE-2026-64403","month":"2026-07","title":"Bluetooth: L2CAP: validate option length before reading conf opt value","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64403"},{"cve":"CVE-2026-64405","month":"2026-07","title":"Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64405"},{"cve":"CVE-2026-64406","month":"2026-07","title":"Bluetooth: fix UAF in bt_accept_dequeue()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64406"},{"cve":"CVE-2026-64408","month":"2026-07","title":"Bluetooth: bnep: pin L2CAP connection during netdev registration","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64408"},{"cve":"CVE-2026-64409","month":"2026-07","title":"Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64409"},{"cve":"CVE-2026-64411","month":"2026-07","title":"netfilter: ebtables: terminate table name before find_table_lock()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64411"},{"cve":"CVE-2026-64412","month":"2026-07","title":"netfilter: ebtables: module names must be null-terminated","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64412"},{"cve":"CVE-2026-64413","month":"2026-07","title":"netfilter: ebtables: zero chainstack array","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64413"},{"cve":"CVE-2026-64422","month":"2026-07","title":"net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64422"},{"cve":"CVE-2026-64423","month":"2026-07","title":"ipv4: igmp: remove multicast group from hash table on device destruction","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64423"},{"cve":"CVE-2026-64424","month":"2026-07","title":"netpoll: fix a use-after-free on shutdown path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64424"},{"cve":"CVE-2026-64425","month":"2026-07","title":"io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64425"},{"cve":"CVE-2026-64428","month":"2026-07","title":"gpio: sch: use raw_spinlock_t in the irq startup path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64428"},{"cve":"CVE-2026-64429","month":"2026-07","title":"gpio: eic-sprd: use raw_spinlock_t in the irq startup path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64429"},{"cve":"CVE-2026-64433","month":"2026-07","title":"Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64433"},{"cve":"CVE-2026-64434","month":"2026-07","title":"Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64434"},{"cve":"CVE-2026-64435","month":"2026-07","title":"audit: Fix data races of skb_queue_len() readers on audit_queue","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64435"},{"cve":"CVE-2026-64441","month":"2026-07","title":"staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64441"},{"cve":"CVE-2026-64443","month":"2026-07","title":"staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64443"},{"cve":"CVE-2026-64444","month":"2026-07","title":"staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64444"},{"cve":"CVE-2026-64448","month":"2026-07","title":"smb: client: restrict implied bcc[0] exemption to responses without data area","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64448"},{"cve":"CVE-2026-64450","month":"2026-07","title":"tipc: fix out-of-bounds read in broadcast Gap ACK blocks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64450"},{"cve":"CVE-2026-64452","month":"2026-07","title":"6lowpan: fix NHC entry use-after-free on error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64452"},{"cve":"CVE-2026-64456","month":"2026-07","title":"hwrng: virtio: clamp device-reported used.len at copy_data()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64456"},{"cve":"CVE-2026-64462","month":"2026-07","title":"PCI: altera: Fix resource leaks on probe failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64462"},{"cve":"CVE-2026-64465","month":"2026-07","title":"usb: xhci: Fix sleep in atomic context in xhci_free_streams()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64465"},{"cve":"CVE-2026-64470","month":"2026-07","title":"Bluetooth: btusb: fix use-after-free on marvell probe failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64470"},{"cve":"CVE-2026-64471","month":"2026-07","title":"Bluetooth: btusb: fix use-after-free on registration failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64471"},{"cve":"CVE-2026-64474","month":"2026-07","title":"vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64474"},{"cve":"CVE-2026-64475","month":"2026-07","title":"vfio/pci: Release the VGA arbiter client on register_device() failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64475"},{"cve":"CVE-2026-64478","month":"2026-07","title":"ALSA: usb-audio: avoid kobject path lookup in DualSense match","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64478"},{"cve":"CVE-2026-64481","month":"2026-07","title":"ALSA: hda/cs35l41: Fix firmware load work teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64481"},{"cve":"CVE-2026-64482","month":"2026-07","title":"ALSA: gus: check snd_ctl_new1() return value","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64482"},{"cve":"CVE-2026-64487","month":"2026-07","title":"ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64487"},{"cve":"CVE-2026-64496","month":"2026-07","title":"iio: event: Fix event FIFO reset race","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64496"},{"cve":"CVE-2026-64507","month":"2026-07","title":"x86/bugs: Enable IBPB flush on BPF JIT allocation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64507"},{"cve":"CVE-2026-64508","month":"2026-07","title":"bpf: Support for hardening against JIT spraying","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64508"},{"cve":"CVE-2026-64510","month":"2026-07","title":"ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64510"},{"cve":"CVE-2026-64511","month":"2026-07","title":"ACPI: NFIT: core: Fix possible NULL pointer dereference","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64511"},{"cve":"CVE-2026-64512","month":"2026-07","title":"ACPI: CPPC: Suppress UBSAN warning caused by field misuse","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64512"},{"cve":"CVE-2026-64513","month":"2026-07","title":"KVM: x86: Unconditionally recompute CR8 intercept on PPR update","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64513"},{"cve":"CVE-2026-64514","month":"2026-07","title":"userfaultfd: gate must_wait writability check on pte_present()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64514"},{"cve":"CVE-2026-64523","month":"2026-07","title":"net/handshake: Take a long-lived file reference at submit","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64523"},{"cve":"CVE-2026-64525","month":"2026-07","title":"xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64525"},{"cve":"CVE-2026-64530","month":"2026-07","title":"net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64530"},{"cve":"CVE-2026-64531","month":"2026-07","title":"net: openvswitch: reject oversized nested action attrs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64531"},{"cve":"CVE-2026-64532","month":"2026-07","title":"fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64532"},{"cve":"CVE-2026-64533","month":"2026-07","title":"fs/ntfs3: validate lcns_follow in log_replay conversion","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64533"},{"cve":"CVE-2026-64534","month":"2026-07","title":"nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64534"},{"cve":"CVE-2026-64535","month":"2026-07","title":"nvmet-tcp: Fix potential UAF when ddgst mismatch","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64535"},{"cve":"CVE-2026-64536","month":"2026-07","title":"staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64536"},{"cve":"CVE-2026-64539","month":"2026-07","title":"Bluetooth: eir: Fix stack OOB write when prepending the Flags AD","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64539"},{"cve":"CVE-2026-64542","month":"2026-07","title":"ipv6: ndisc: fix NULL deref in accept_untracked_na()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64542"},{"cve":"CVE-2026-64544","month":"2026-07","title":"crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64544"},{"cve":"CVE-2026-64546","month":"2026-07","title":"drm/edid: fix OOB read in drm_parse_tiled_block()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64546"},{"cve":"CVE-2026-64547","month":"2026-07","title":"net: usb: net1080: validate packet_len before pad-byte access in rx_fixup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64547"},{"cve":"CVE-2026-64549","month":"2026-07","title":"Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64549"},{"cve":"CVE-2026-64556","month":"2026-07","title":"perf/core: Detach event groups during remove_on_exec","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64556"},{"cve":"CVE-2026-64557","month":"2026-07","title":"Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64557"},{"cve":"CVE-2026-64560","month":"2026-07","title":"posix-cpu-timers: Prevent UAF caused by non-leader exec() race","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64560"},{"cve":"CVE-2026-64600","month":"2026-07","title":"xfs: resample the data fork mapping after cycling ILOCK","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64600"},{"cve":"CVE-2026-65624","month":"2026-07","title":"Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65624"},{"cve":"CVE-2026-66032","month":"2026-07","title":"libssh2 Double-Free Heap Corruption via sftp_open()","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66032"},{"cve":"CVE-2026-66033","month":"2026-07","title":"libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66033"},{"cve":"CVE-2026-66034","month":"2026-07","title":"libssh2 Heap Out-of-Bounds Read via publickey subsystem","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66034"},{"cve":"CVE-2026-66035","month":"2026-07","title":"libssh2 Heap Buffer Overflow via ETM Cipher Negotiation","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66035"},{"cve":"CVE-2026-66053","month":"2026-07","title":"Apache Thrift: Python TSSLSocket Hostname Matcher Import","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-297"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66053"},{"cve":"CVE-2026-66337","month":"2026-07","title":"Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66337"},{"cve":"CVE-2026-66338","month":"2026-07","title":"Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N/E:U","cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66338"},{"cve":"CVE-2026-66339","month":"2026-07","title":"Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U","cwe":["CWE-201"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66339"},{"cve":"CVE-2026-66373","month":"2026-07","title":"Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free. NOTE: this issue exists because of an incomplete fix for CVE-2026-25243.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66373"},{"cve":"CVE-2026-67215","month":"2026-07","title":"cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67215"},{"cve":"CVE-2026-67216","month":"2026-07","title":"cJSON cJSON_Compare Exponential Complexity Denial of Service","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67216"},{"cve":"CVE-2026-6879","month":"2026-07","title":"Quadratic Behavior in xml.etree.ElementPath Index Predicates","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6879"},{"cve":"CVE-2026-7260","month":"2026-07","title":"Stack overflow in phar with circular symlinks","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7260"},{"cve":"CVE-2026-8286","month":"2026-07","title":"wrong STARTTLS connection reuse","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8286"},{"cve":"CVE-2026-8458","month":"2026-07","title":"wrong reuse for different services","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8458"},{"cve":"CVE-2026-8924","month":"2026-07","title":"trailing dot domain super cookie","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8924"},{"cve":"CVE-2026-8926","month":"2026-07","title":"password leak with netrc and user in URL","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8926"},{"cve":"CVE-2026-8927","month":"2026-07","title":"env-set cross-proxy Digest auth state leak","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8927"},{"cve":"CVE-2026-8932","month":"2026-07","title":"incomplete mTLS config matching in conn reuse","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8932"},{"cve":"CVE-2026-9079","month":"2026-07","title":"stale proxy password leak","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9079"},{"cve":"CVE-2026-9545","month":"2026-07","title":"exposing HTTP/3 early data","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9545"},{"cve":"CVE-2026-9546","month":"2026-07","title":"sending old referer","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-9546"},{"cve":"CVE-2022-4996","month":"2026-08","title":"mruby bigint.c udiv floating point comparison with incorrect operator","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C","cwe":["CWE-1077"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4996"},{"cve":"CVE-2025-30156","month":"2026-08","title":"Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.9,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","cwe":["CWE-327"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30156"},{"cve":"CVE-2025-49506","month":"2026-08","title":"Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-208"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49506"},{"cve":"CVE-2026-13002","month":"2026-08","title":"Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13002"},{"cve":"CVE-2026-13622","month":"2026-08","title":"Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13622"},{"cve":"CVE-2026-13732","month":"2026-08","title":"Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13732"},{"cve":"CVE-2026-14457","month":"2026-08","title":"RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14457"},{"cve":"CVE-2026-14662","month":"2026-08","title":"PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14662"},{"cve":"CVE-2026-14663","month":"2026-08","title":"PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U","cwe":["CWE-313"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14663"},{"cve":"CVE-2026-14664","month":"2026-08","title":"PostgreSQL regexp heap buffer overflow executes arbitrary code","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14664"},{"cve":"CVE-2026-14666","month":"2026-08","title":"PostgreSQL row security caching disregards role modifications","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Low","cvss":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U","cwe":["CWE-1250"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14666"},{"cve":"CVE-2026-14668","month":"2026-08","title":"PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14668"},{"cve":"CVE-2026-14670","month":"2026-08","title":"PostgreSQL plperl tied object heap buffer overflow executes arbitrary code","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14670"},{"cve":"CVE-2026-14671","month":"2026-08","title":"PostgreSQL refint plan cache type confusion executes arbitrary code","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14671"},{"cve":"CVE-2026-14672","month":"2026-08","title":"PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracle","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":["CWE-204"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14672"},{"cve":"CVE-2026-14673","month":"2026-08","title":"PostgreSQL amcheck does not clear untrusted search path","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Low","cvss":3.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14673"},{"cve":"CVE-2026-14677","month":"2026-08","title":"PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14677"},{"cve":"CVE-2026-14678","month":"2026-08","title":"PostgreSQL pg_trgm picksplit reads past end of buffer","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14678"},{"cve":"CVE-2026-14680","month":"2026-08","title":"PostgreSQL type confusion via \"internal\" arguments","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14680"},{"cve":"CVE-2026-15059","month":"2026-08","title":"systemd-oomd: unprivileged users can terminate arbitrary processes","family":"Other","component":"Mariner","cna":"systemd","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15059"},{"cve":"CVE-2026-15310","month":"2026-08","title":"zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15310"},{"cve":"CVE-2026-15534","month":"2026-08","title":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15534"},{"cve":"CVE-2026-15741","month":"2026-08","title":"PostgreSQL expression deparse allows SQL injection via EXTRACT argument","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15741"},{"cve":"CVE-2026-15742","month":"2026-08","title":"PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15742"},{"cve":"CVE-2026-15806","month":"2026-08","title":"`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-319"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15806"},{"cve":"CVE-2026-16238","month":"2026-08","title":"PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16238"},{"cve":"CVE-2026-16239","month":"2026-08","title":"PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-16239"},{"cve":"CVE-2026-17084","month":"2026-08","title":"stringprep.map_table_b2() deviates from RFC 3454 Table B.2","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-436"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17084"},{"cve":"CVE-2026-17106","month":"2026-08","title":"Tar extraction in moby/go-archive can write outside the destination directory via link following","family":"Other","component":"Mariner","cna":"Docker","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17106"},{"cve":"CVE-2026-18024","month":"2026-08","title":"PostgreSQL ascii() function reads past end of buffer","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18024"},{"cve":"CVE-2026-18408","month":"2026-08","title":"PostgreSQL psql \\unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-829"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18408"},{"cve":"CVE-2026-18477","month":"2026-08","title":"Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18477"},{"cve":"CVE-2026-18503","month":"2026-08","title":"Super-linear CPU usage for unbounded input to csv.Sniffer.sniff()","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-1176"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18503"},{"cve":"CVE-2026-18508","month":"2026-08","title":"Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18508"},{"cve":"CVE-2026-18726","month":"2026-08","title":"Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18726"},{"cve":"CVE-2026-18727","month":"2026-08","title":"Open-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsing","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18727"},{"cve":"CVE-2026-18728","month":"2026-08","title":"Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18728"},{"cve":"CVE-2026-18739","month":"2026-08","title":"Popt-devel: popt-static: off-by-one in poptstuffargs","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18739"},{"cve":"CVE-2026-18839","month":"2026-08","title":"Popt-devel: popt-static: size_t underflow in singleoptionhelp","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":2.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18839"},{"cve":"CVE-2026-18917","month":"2026-08","title":"Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18917"},{"cve":"CVE-2026-19023","month":"2026-08","title":"HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets","family":"Other","component":"Mariner","cna":"HDFG","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19023"},{"cve":"CVE-2026-19024","month":"2026-08","title":"HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message","family":"Other","component":"Mariner","cna":"HDFG","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19024"},{"cve":"CVE-2026-19025","month":"2026-08","title":"HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open","family":"Other","component":"Mariner","cna":"HDFG","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-369"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19025"},{"cve":"CVE-2026-19026","month":"2026-08","title":"Nbit filter NULL/short parameter-array dereference","family":"Other","component":"Mariner","cna":"HDFG","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19026"},{"cve":"CVE-2026-19027","month":"2026-08","title":"HDF5 out-of-bounds heap read in N-Bit filter decompression","family":"Other","component":"Mariner","cna":"HDFG","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19027"},{"cve":"CVE-2026-19028","month":"2026-08","title":"HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read","family":"Other","component":"Mariner","cna":"HDFG","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19028"},{"cve":"CVE-2026-19385","month":"2026-08","title":"PostgreSQL pg_dump heap buffer overflow executes arbitrary code","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19385"},{"cve":"CVE-2026-19411","month":"2026-08","title":"Shim/dp.c library: null-pointer dereference in is_removable_media_path() when devicepathtostr() returns null","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":3.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19411"},{"cve":"CVE-2026-19487","month":"2026-08","title":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-670"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19487"},{"cve":"CVE-2026-19548","month":"2026-08","title":"Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19548"},{"cve":"CVE-2026-19582","month":"2026-08","title":"Binutils: stack buffer overflow in gnu binutils in rsrc_print_name from an untrusted pe file","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19582"},{"cve":"CVE-2026-19589","month":"2026-08","title":"Packer vulnerable to arbitrary file write via crafted plugin archive during installation","family":"Other","component":"Mariner","cna":"HashiCorp","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19589"},{"cve":"CVE-2026-19617","month":"2026-08","title":"Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19617"},{"cve":"CVE-2026-19654","month":"2026-08","title":"Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19654"},{"cve":"CVE-2026-19672","month":"2026-08","title":"tarfile extraction filter bypass allows creation of directories outside the destination","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19672"},{"cve":"CVE-2026-19953","month":"2026-08","title":"URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U","cwe":["CWE-1289"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19953"},{"cve":"CVE-2026-20337","month":"2026-08","title":"ClamAV ZIP File Format Processing Memory Corruption Vulnerability","family":"Other","component":"Mariner","cna":"cisco","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-120"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20337"},{"cve":"CVE-2026-20338","month":"2026-08","title":"ClamAV ZIP File Format Processing Memory Corruption Vulnerability","family":"Other","component":"Mariner","cna":"cisco","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20338"},{"cve":"CVE-2026-20339","month":"2026-08","title":"ClamAV PESpin File Format Processing Integer Overflow Vulnerability","family":"Other","component":"Mariner","cna":"cisco","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20339"},{"cve":"CVE-2026-20345","month":"2026-08","title":"ClamAV GPT File Format Processing Memory Corruption Vulnerability","family":"Other","component":"Mariner","cna":"cisco","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20345"},{"cve":"CVE-2026-20346","month":"2026-08","title":"ClamAV PDF File Format Processing Memory Corruption Vulnerability","family":"Other","component":"Mariner","cna":"cisco","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20346"},{"cve":"CVE-2026-20347","month":"2026-08","title":"ClamAV Mach-O File Format Processing Memory Corruption Vulnerability","family":"Other","component":"Mariner","cna":"cisco","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20347"},{"cve":"CVE-2026-20348","month":"2026-08","title":"ClamAV XAR File Format Processing Memory Corruption Vulnerability","family":"Other","component":"Mariner","cna":"cisco","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-120"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20348"},{"cve":"CVE-2026-32327","month":"2026-08","title":"Apache Portable Runtime Utility: apr-util XML stack recursion crash","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32327"},{"cve":"CVE-2026-33818","month":"2026-08","title":"Enforce maximum recursion depth in encoding/asn1","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33818"},{"cve":"CVE-2026-34501","month":"2026-08","title":"Apache Portable Runtime Utility: Heap buffer overflow in APR redis client","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34501"},{"cve":"CVE-2026-34502","month":"2026-08","title":"Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34502"},{"cve":"CVE-2026-37236","month":"2026-08","title":"grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method is rewritten to an arbitrary attacker-supplied value before routing. This allows bypassing method-based access controls enforced by upstream proxies or WAFs.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-37236"},{"cve":"CVE-2026-43971","month":"2026-08","title":"Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-116"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-43971"},{"cve":"CVE-2026-44605","month":"2026-08","title":"Rpm: heap buffer overflow in ndb slot table parsing","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44605"},{"cve":"CVE-2026-47243","month":"2026-08","title":"Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47243"},{"cve":"CVE-2026-47895","month":"2026-08","title":"In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47895"},{"cve":"CVE-2026-49114","month":"2026-08","title":"ONNX symlink-following and path-traversal arbitrary file write","family":"Other","component":"Mariner","cna":"cisa-cg","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49114"},{"cve":"CVE-2026-49825","month":"2026-08","title":"lxml: javascript: URL bypass in Cleaner via xlink:href","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49825"},{"cve":"CVE-2026-50540","month":"2026-08","title":"Kata Containers: Config Path Annotation Arbitrary File Loading","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50540"},{"cve":"CVE-2026-52490","month":"2026-08","title":"An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52490"},{"cve":"CVE-2026-53572","month":"2026-08","title":"KEDA: PostgreSQL connection string parameter injection via incomplete whitespace escaping","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","cwe":["CWE-74"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53572"},{"cve":"CVE-2026-53583","month":"2026-08","title":"libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53583"},{"cve":"CVE-2026-53584","month":"2026-08","title":"libgit2: Submodule path traversal","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53584"},{"cve":"CVE-2026-53783","month":"2026-08","title":"rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53783"},{"cve":"CVE-2026-53784","month":"2026-08","title":"rsync < 3.5.0 Path Traversal via Symlink Module Root","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53784"},{"cve":"CVE-2026-53785","month":"2026-08","title":"rsync < 3.5.0 Path Traversal Write Escape via --relative Mode","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53785"},{"cve":"CVE-2026-53786","month":"2026-08","title":"rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53786"},{"cve":"CVE-2026-53788","month":"2026-08","title":"rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-93"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53788"},{"cve":"CVE-2026-53789","month":"2026-08","title":"rsync < 3.5.0 Arbitrary File Deletion via Malicious File List","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-807"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53789"},{"cve":"CVE-2026-53790","month":"2026-08","title":"rsync < 3.5.0 Command Injection via Multiple Code Paths","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53790"},{"cve":"CVE-2026-53791","month":"2026-08","title":"rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-290"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53791"},{"cve":"CVE-2026-53792","month":"2026-08","title":"rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-129"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53792"},{"cve":"CVE-2026-53793","month":"2026-08","title":"rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53793"},{"cve":"CVE-2026-53794","month":"2026-08","title":"rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53794"},{"cve":"CVE-2026-53795","month":"2026-08","title":"rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53795"},{"cve":"CVE-2026-53796","month":"2026-08","title":"rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53796"},{"cve":"CVE-2026-53797","month":"2026-08","title":"rsync < 3.5.0 Symlink Race Condition Information Disclosure","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53797"},{"cve":"CVE-2026-53798","month":"2026-08","title":"rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-704"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53798"},{"cve":"CVE-2026-53799","month":"2026-08","title":"rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53799"},{"cve":"CVE-2026-53800","month":"2026-08","title":"rsync < 3.5.0 Symlink Race Condition via --remove-source-files","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53800"},{"cve":"CVE-2026-53801","month":"2026-08","title":"rsync < 3.5.0 Symlink Race Condition Directory Traversal","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53801"},{"cve":"CVE-2026-53802","month":"2026-08","title":"rsync < 3.5.0 Arbitrary File Read via Symlink Following","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-61"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53802"},{"cve":"CVE-2026-53803","month":"2026-08","title":"rsync < 3.5.0 Symlink Following Arbitrary File Overwrite","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53803"},{"cve":"CVE-2026-54330","month":"2026-08","title":"Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54330"},{"cve":"CVE-2026-54770","month":"2026-08","title":"WebOb: Open redirect in Location header normalization via leading C0 control / space characters","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U","cwe":["CWE-601"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54770"},{"cve":"CVE-2026-54874","month":"2026-08","title":"Excessive Memory Use Buffering DTLS Records for a Future Epoch","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-405"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54874"},{"cve":"CVE-2026-55618","month":"2026-08","title":"eml_parser: URL extraction bypass via HTML entities in URLs","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cwe":["CWE-116"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55618"},{"cve":"CVE-2026-55619","month":"2026-08","title":"eml_parser: Parser DoS via deeply nested parentheses in e-mail headers","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55619"},{"cve":"CVE-2026-55620","month":"2026-08","title":"eml_parser: DoS via deeply nested parens in Received headers","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55620"},{"cve":"CVE-2026-55893","month":"2026-08","title":"Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55893"},{"cve":"CVE-2026-55894","month":"2026-08","title":"Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55894"},{"cve":"CVE-2026-56135","month":"2026-08","title":"In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted directory.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56135"},{"cve":"CVE-2026-56136","month":"2026-08","title":"In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56136"},{"cve":"CVE-2026-56684","month":"2026-08","title":"Valkey: TLS pending-data processing use-after-free may allow remote code execution","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56684"},{"cve":"CVE-2026-56853","month":"2026-08","title":"Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56853"},{"cve":"CVE-2026-56858","month":"2026-08","title":"Fix Javascript regexp context tracking in html/template","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56858"},{"cve":"CVE-2026-56859","month":"2026-08","title":"Add recursion depth guard during decode in encoding/xml","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56859"},{"cve":"CVE-2026-56860","month":"2026-08","title":"Avoid quadratic complexity in resolvePath in net/url","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56860"},{"cve":"CVE-2026-56862","month":"2026-08","title":"Limit handshake messages we are willing to accept post-handshake in crypto/tls","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56862"},{"cve":"CVE-2026-56864","month":"2026-08","title":"Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56864"},{"cve":"CVE-2026-56865","month":"2026-08","title":"Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56865"},{"cve":"CVE-2026-60589","month":"2026-08","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and  21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vect","family":"Other","component":"Mariner","cna":"oracle","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-60589"},{"cve":"CVE-2026-61477","month":"2026-08","title":"Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N/E:U","cwe":["CWE-93"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61477"},{"cve":"CVE-2026-61711","month":"2026-08","title":"BuildKit: Custom frontend could bypass Seccomp/AppArmor","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61711"},{"cve":"CVE-2026-61712","month":"2026-08","title":"BuildKit: Possible runtime DoS via unbounded group parsing","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61712"},{"cve":"CVE-2026-63072","month":"2026-08","title":"Heap Buffer Overflow in CMS Key Unwrapping","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63072"},{"cve":"CVE-2026-63073","month":"2026-08","title":"Untrusted Sender DN Used as Format String in CMP Response Validation","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U","cwe":["CWE-134"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63073"},{"cve":"CVE-2026-63074","month":"2026-08","title":"CMP Indefinite Cache Growth of ExtraCerts","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63074"},{"cve":"CVE-2026-63075","month":"2026-08","title":"QUIC ACK-only Packet Retention Can Cause Memory Exhaustion","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63075"},{"cve":"CVE-2026-63076","month":"2026-08","title":"Invalid Pointer Dereference in CMP Server via Crafted protectionAlg","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63076"},{"cve":"CVE-2026-63379","month":"2026-08","title":"Libevent: HTTP Header smuggling","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63379"},{"cve":"CVE-2026-63381","month":"2026-08","title":"Libevent: Dangling Pointer in `evbuffer_add_buffer_reference`","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63381"},{"cve":"CVE-2026-63383","month":"2026-08","title":"Libevent: decode_tag_internal() can lead to out-of-bounds read","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63383"},{"cve":"CVE-2026-63384","month":"2026-08","title":"Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value.","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63384"},{"cve":"CVE-2026-63385","month":"2026-08","title":"Libevent: HTTP header handling bugs create risk of access control bypass.","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63385"},{"cve":"CVE-2026-63387","month":"2026-08","title":"Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63387"},{"cve":"CVE-2026-63388","month":"2026-08","title":"Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63388"},{"cve":"CVE-2026-63623","month":"2026-08","title":"Libvirt: information disclosure via world-readable storage volume images during clone/convert","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-732"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63623"},{"cve":"CVE-2026-63639","month":"2026-08","title":"Valkey: UAF in stream deserialization may lead to remote code execution","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63639"},{"cve":"CVE-2026-6368","month":"2026-08","title":"wordexp with WRDE_APPEND can return or use invalid memory","family":"Other","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6368"},{"cve":"CVE-2026-64561","month":"2026-08","title":"KVM: x86: Check for invalid/obsolete root *after* making MMU pages available","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64561"},{"cve":"CVE-2026-64562","month":"2026-08","title":"KVM: nVMX: Hide shadow VMCS right after VMCLEAR","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64562"},{"cve":"CVE-2026-64563","month":"2026-08","title":"rhashtable: clear stale iter->p on table restart","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64563"},{"cve":"CVE-2026-64564","month":"2026-08","title":"sctp: don't free the ASCONF's own transport in DEL-IP processing","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64564"},{"cve":"CVE-2026-64565","month":"2026-08","title":"Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64565"},{"cve":"CVE-2026-64567","month":"2026-08","title":"btrfs: reject free space cache with more entries than pages","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64567"},{"cve":"CVE-2026-64569","month":"2026-08","title":"mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64569"},{"cve":"CVE-2026-64571","month":"2026-08","title":"wifi: p54: validate RX frame length in p54_rx_eeprom_readback()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64571"},{"cve":"CVE-2026-64572","month":"2026-08","title":"ipv4: fib: free fib_alias with kfree_rcu() on insert error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64572"},{"cve":"CVE-2026-64573","month":"2026-08","title":"Bluetooth: qca: fix NVM tag length underflow in TLV parser","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64573"},{"cve":"CVE-2026-64574","month":"2026-08","title":"wifi: mac80211: tear down new links on vif update error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64574"},{"cve":"CVE-2026-64576","month":"2026-08","title":"nexthop: initialize extack in nh_res_bucket_migrate()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64576"},{"cve":"CVE-2026-64579","month":"2026-08","title":"xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64579"},{"cve":"CVE-2026-64580","month":"2026-08","title":"xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64580"},{"cve":"CVE-2026-64581","month":"2026-08","title":"xfrm: fix sk_dst_cache double-free in xfrm_user_policy()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64581"},{"cve":"CVE-2026-64582","month":"2026-08","title":"RDMA/rxe: Fix a use-after-free problem in rxe_mmap","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64582"},{"cve":"CVE-2026-64585","month":"2026-08","title":"can: esd_usb: kill anchored URBs before freeing netdevs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64585"},{"cve":"CVE-2026-64586","month":"2026-08","title":"wifi: brcmfmac: drain bus_reset work on device removal","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64586"},{"cve":"CVE-2026-64590","month":"2026-08","title":"dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64590"},{"cve":"CVE-2026-64593","month":"2026-08","title":"btrfs: do not trim a device which is not writeable","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64593"},{"cve":"CVE-2026-64597","month":"2026-08","title":"smb: client: fix double-free in SMB2_close() replay","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64597"},{"cve":"CVE-2026-64598","month":"2026-08","title":"smb/client: Fix error code in smb2_aead_req_alloc()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64598"},{"cve":"CVE-2026-64599","month":"2026-08","title":"crypto: amlogic - avoid double cleanup in meson_crypto_probe()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64599"},{"cve":"CVE-2026-64604","month":"2026-08","title":"KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H/E:U/RL:U/RC:C","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64604"},{"cve":"CVE-2026-6464","month":"2026-08","title":"PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-829"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6464"},{"cve":"CVE-2026-64652","month":"2026-08","title":"GitHub CLI: Partial token disclosure in `gh auth status` output","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-201"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64652"},{"cve":"CVE-2026-64653","month":"2026-08","title":"GitHub CLI: Unescaped variable components in request URLs could allow path traversal","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64653"},{"cve":"CVE-2026-64654","month":"2026-08","title":"GitHub CLI: Terminal escape sequence injection in multiple `gh` commands","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-150"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64654"},{"cve":"CVE-2026-64655","month":"2026-08","title":"GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-185"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64655"},{"cve":"CVE-2026-6469","month":"2026-08","title":"PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Low","cvss":3.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-708"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6469"},{"cve":"CVE-2026-6470","month":"2026-08","title":"PostgreSQL fails to check type USAGE privilege","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6470"},{"cve":"CVE-2026-6471","month":"2026-08","title":"PostgreSQL logical decoding can dlopen arbitrary file","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Moderate","cvss":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6471"},{"cve":"CVE-2026-65819","month":"2026-08","title":"gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/underflow) enabling unauthenticated remote DoS via DecodingLayerParser","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65819"},{"cve":"CVE-2026-65959","month":"2026-08","title":"Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65959"},{"cve":"CVE-2026-66046","month":"2026-08","title":"Expat Denial of Service via storeAtts() Quadratic Complexity","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66046"},{"cve":"CVE-2026-66484","month":"2026-08","title":"Path Traversal in GNU cpio","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66484"},{"cve":"CVE-2026-66485","month":"2026-08","title":"Uncontrolled Memory Allocation in GNU cpio","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66485"},{"cve":"CVE-2026-66486","month":"2026-08","title":"Improper Output Encoding in GNU cpio","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-116"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66486"},{"cve":"CVE-2026-6791","month":"2026-08","title":"Potential stack-based buffer clash during tilde expansion in wordexp","family":"Other","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6791"},{"cve":"CVE-2026-68081","month":"2026-08","title":"KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68081"},{"cve":"CVE-2026-68082","month":"2026-08","title":"libceph: fix two unsafe bare decodes in decode_lockers()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68082"},{"cve":"CVE-2026-68083","month":"2026-08","title":"ksmbd: fix path resolution in ksmbd_vfs_kern_path_create","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68083"},{"cve":"CVE-2026-68084","month":"2026-08","title":"staging: vme_user: fix location monitor leak in tsi148 bridge","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68084"},{"cve":"CVE-2026-68085","month":"2026-08","title":"Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68085"},{"cve":"CVE-2026-68086","month":"2026-08","title":"mm/khugepaged: write all dirty file folios when collapsing","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68086"},{"cve":"CVE-2026-68088","month":"2026-08","title":"usb: gadget: function: rndis: add length check to response query","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68088"},{"cve":"CVE-2026-68090","month":"2026-08","title":"debugobjects: Plug race against a concurrent OOM disable","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68090"},{"cve":"CVE-2026-68091","month":"2026-08","title":"HID: wacom: stop hardware after post-start probe failures","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68091"},{"cve":"CVE-2026-68093","month":"2026-08","title":"KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68093"},{"cve":"CVE-2026-68096","month":"2026-08","title":"audit: fix recursive locking deadlock in audit_dupe_exe()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68096"},{"cve":"CVE-2026-68097","month":"2026-08","title":"ksmbd: validate ACE size against SID sub-authorities","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68097"},{"cve":"CVE-2026-68098","month":"2026-08","title":"ksmbd: bound DACL dedup walk to copied ACEs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68098"},{"cve":"CVE-2026-68099","month":"2026-08","title":"ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68099"},{"cve":"CVE-2026-68100","month":"2026-08","title":"ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68100"},{"cve":"CVE-2026-68102","month":"2026-08","title":"drm/amdgpu: fix aperture mapping leak","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68102"},{"cve":"CVE-2026-68103","month":"2026-08","title":"drm/amdgpu: reject mapping a reserved doorbell to a new queue","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68103"},{"cve":"CVE-2026-68104","month":"2026-08","title":"drm/amdgpu: invoke pm_genpd_remove() before freeing genpd","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68104"},{"cve":"CVE-2026-68105","month":"2026-08","title":"drm/amdgpu: Fix kernel panic during driver load failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68105"},{"cve":"CVE-2026-68106","month":"2026-08","title":"drm/amdgpu: fix division by zero with invalid uvd dimensions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68106"},{"cve":"CVE-2026-68107","month":"2026-08","title":"drm/amdgpu/vcn4: avoid rereading IB param length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68107"},{"cve":"CVE-2026-68108","month":"2026-08","title":"drm/amdgpu/vce: fix integer overflow in image size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68108"},{"cve":"CVE-2026-68109","month":"2026-08","title":"drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68109"},{"cve":"CVE-2026-68110","month":"2026-08","title":"drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68110"},{"cve":"CVE-2026-68111","month":"2026-08","title":"drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68111"},{"cve":"CVE-2026-68112","month":"2026-08","title":"drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68112"},{"cve":"CVE-2026-68113","month":"2026-08","title":"drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68113"},{"cve":"CVE-2026-68114","month":"2026-08","title":"drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68114"},{"cve":"CVE-2026-68115","month":"2026-08","title":"drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68115"},{"cve":"CVE-2026-68116","month":"2026-08","title":"vxlan: mdb: Fix source list corruption on a failed replace","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68116"},{"cve":"CVE-2026-68117","month":"2026-08","title":"tipc: clear sock->sk on the failed-insert path in tipc_sk_create()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68117"},{"cve":"CVE-2026-68118","month":"2026-08","title":"tcp: challenge ACK for non-exact RST in SYN-RECEIVED","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68118"},{"cve":"CVE-2026-68121","month":"2026-08","title":"pppoe: reload header pointer after dev_hard_header()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68121"},{"cve":"CVE-2026-68123","month":"2026-08","title":"openvswitch: fix GSO userspace truncation underflow","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68123"},{"cve":"CVE-2026-68124","month":"2026-08","title":"mctp: serial: handle zero-length frames to prevent rx buffer overflow","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68124"},{"cve":"CVE-2026-68125","month":"2026-08","title":"mac802154: llsec: reject frames shorter than the authentication tag","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68125"},{"cve":"CVE-2026-68126","month":"2026-08","title":"mac802154: hold an interface reference across the scan worker","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68126"},{"cve":"CVE-2026-68127","month":"2026-08","title":"ila: reload IPv6 header after pskb_may_pull in checksum adjust","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68127"},{"cve":"CVE-2026-68129","month":"2026-08","title":"gve: fix Rx queue stall on alloc failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68129"},{"cve":"CVE-2026-68130","month":"2026-08","title":"ksmbd: defer destroy_previous_session() until after NTLM authentication","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68130"},{"cve":"CVE-2026-68131","month":"2026-08","title":"rbd: Reset positive result codes to zero in object map update path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68131"},{"cve":"CVE-2026-68132","month":"2026-08","title":"super: fix emergency thaw deadlock on frozen block devices","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68132"},{"cve":"CVE-2026-68135","month":"2026-08","title":"net: hip04: fix RX buffer leak on build_skb failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68135"},{"cve":"CVE-2026-68136","month":"2026-08","title":"net: gro: fix double aggregation of flush-marked skbs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68136"},{"cve":"CVE-2026-68137","month":"2026-08","title":"net/x25: fix use-after-free in x25_kill_by_neigh()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68137"},{"cve":"CVE-2026-68138","month":"2026-08","title":"net/sched: serialize qdisc_rtab_list against concurrent get/put","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68138"},{"cve":"CVE-2026-68140","month":"2026-08","title":"net/iucv: fix use-after-free of a severed iucv_path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68140"},{"cve":"CVE-2026-68141","month":"2026-08","title":"net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68141"},{"cve":"CVE-2026-68142","month":"2026-08","title":"geneve: require CAP_NET_ADMIN in the device netns for changelink","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68142"},{"cve":"CVE-2026-68143","month":"2026-08","title":"net: slip: serialize receive against buffer reallocation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68143"},{"cve":"CVE-2026-68144","month":"2026-08","title":"phonet: pep: fix use-after-free in pep_get_sb()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68144"},{"cve":"CVE-2026-68145","month":"2026-08","title":"iomap: fix out-of-bounds bitmap_set() with zero-length range","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68145"},{"cve":"CVE-2026-68146","month":"2026-08","title":"ftrace: Add global mutex to serialize trace_parser access","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68146"},{"cve":"CVE-2026-68147","month":"2026-08","title":"fscrypt: Avoid dynamic allocation in fscrypt_get_devices()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68147"},{"cve":"CVE-2026-68148","month":"2026-08","title":"fscrypt: Add missing superblock check in find_or_insert_direct_key()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68148"},{"cve":"CVE-2026-68149","month":"2026-08","title":"fs: preserve ACL_DONT_CACHE state in forget_cached_acl()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68149"},{"cve":"CVE-2026-68151","month":"2026-08","title":"binfmt_elf_fdpic: only honour the first PT_INTERP","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68151"},{"cve":"CVE-2026-68152","month":"2026-08","title":"amt: fix use-after-free in AMT delayed works","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68152"},{"cve":"CVE-2026-68153","month":"2026-08","title":"libceph: remove debugfs files before client teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68153"},{"cve":"CVE-2026-68154","month":"2026-08","title":"libceph: reject zero bucket types in crush_decode","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68154"},{"cve":"CVE-2026-68155","month":"2026-08","title":"libceph: Reject monmaps advertising zero monitors","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68155"},{"cve":"CVE-2026-68156","month":"2026-08","title":"libceph: refresh auth->authorizer_buf{,_len} after authorizer update","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68156"},{"cve":"CVE-2026-68157","month":"2026-08","title":"libceph: guard missing CRUSH type name lookup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68157"},{"cve":"CVE-2026-68158","month":"2026-08","title":"libceph: Fix multiplication overflow in decode_new_up_state_weight()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68158"},{"cve":"CVE-2026-68159","month":"2026-08","title":"libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68159"},{"cve":"CVE-2026-68160","month":"2026-08","title":"ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68160"},{"cve":"CVE-2026-68161","month":"2026-08","title":"sctp: close UDP tunnel sockets during netns teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68161"},{"cve":"CVE-2026-68162","month":"2026-08","title":"sctp: avoid auth_enable sysctl UAF during netns teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68162"},{"cve":"CVE-2026-68164","month":"2026-08","title":"mm/damon/core: disallow overlapping input ranges for damon_set_regions()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68164"},{"cve":"CVE-2026-68165","month":"2026-08","title":"mm/damon/core: validate ranges in damon_set_regions()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68165"},{"cve":"CVE-2026-68166","month":"2026-08","title":"userfaultfd: prevent registration of special VMAs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68166"},{"cve":"CVE-2026-68169","month":"2026-08","title":"mptcp: pm: userspace: fix use-after-free in get_local_id","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68169"},{"cve":"CVE-2026-68171","month":"2026-08","title":"arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68171"},{"cve":"CVE-2026-68175","month":"2026-08","title":"tracing: Fix resource leak on mmiotrace trace_pipe close","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68175"},{"cve":"CVE-2026-68176","month":"2026-08","title":"tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68176"},{"cve":"CVE-2026-68180","month":"2026-08","title":"intel_th: fix MSC output device reference leak","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68180"},{"cve":"CVE-2026-68181","month":"2026-08","title":"mei: bus: access mei_device under device_lock on cleanup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68181"},{"cve":"CVE-2026-68182","month":"2026-08","title":"comedi: comedi_parport: deal with premature interrupt","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68182"},{"cve":"CVE-2026-68183","month":"2026-08","title":"firmware: stratix10-svc: fix memory leaks and list corruption bugs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68183"},{"cve":"CVE-2026-68184","month":"2026-08","title":"cdrom: fix stack out-of-bounds read in CDROMVOLCTRL","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68184"},{"cve":"CVE-2026-68185","month":"2026-08","title":"LoongArch: Move jump_label_init() before parse_early_param()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68185"},{"cve":"CVE-2026-68186","month":"2026-08","title":"binfmt_misc: set have_execfd only once the interpreter is opened","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68186"},{"cve":"CVE-2026-68187","month":"2026-08","title":"exec: fix unsigned loop counter wrap in transfer_args_to_stack()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68187"},{"cve":"CVE-2026-68188","month":"2026-08","title":"Bluetooth: RFCOMM: Fix session UAF in set_termios","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68188"},{"cve":"CVE-2026-68189","month":"2026-08","title":"Bluetooth: hci_sync: Protect UUID list traversal","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68189"},{"cve":"CVE-2026-68190","month":"2026-08","title":"staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68190"},{"cve":"CVE-2026-68192","month":"2026-08","title":"wifi: brcmfmac: make release_scratchbuffers idempotent","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68192"},{"cve":"CVE-2026-68194","month":"2026-08","title":"wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68194"},{"cve":"CVE-2026-68195","month":"2026-08","title":"wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68195"},{"cve":"CVE-2026-68196","month":"2026-08","title":"wifi: wilc1000: validate assoc response length before subtracting header","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68196"},{"cve":"CVE-2026-68197","month":"2026-08","title":"wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68197"},{"cve":"CVE-2026-68198","month":"2026-08","title":"wifi: ath6kl: fix use-after-free in aggr_reset_state()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68198"},{"cve":"CVE-2026-68199","month":"2026-08","title":"wifi: ath6kl: fix OOB access from firmware ADDBA window size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68199"},{"cve":"CVE-2026-68202","month":"2026-08","title":"ALSA: seq: close a re-opened queue timer in the destructor","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68202"},{"cve":"CVE-2026-68203","month":"2026-08","title":"media: vivid: fix cleanup bugs in vivid_init()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68203"},{"cve":"CVE-2026-68204","month":"2026-08","title":"media: vivid: check for vb2_is_busy() when toggling caps","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68204"},{"cve":"CVE-2026-68205","month":"2026-08","title":"media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68205"},{"cve":"CVE-2026-68206","month":"2026-08","title":"media: v4l2-ctrls: validate HEVC active reference counts","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68206"},{"cve":"CVE-2026-68207","month":"2026-08","title":"media: ti: vpe: unwind v4l2 device registration on probe error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68207"},{"cve":"CVE-2026-68209","month":"2026-08","title":"media: sun4i-csi: Return queued buffers on start_streaming() failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68209"},{"cve":"CVE-2026-68210","month":"2026-08","title":"media: stm32: dcmi: unregister notifier on probe failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68210"},{"cve":"CVE-2026-68212","month":"2026-08","title":"media: saa7134: Fix a possible memory leak in saa7134_video_init1","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68212"},{"cve":"CVE-2026-68214","month":"2026-08","title":"media: rtl2832: fix use-after-free in rtl2832_remove()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68214"},{"cve":"CVE-2026-68215","month":"2026-08","title":"media: radio-si476x: Unregister v4l2_device on probe failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68215"},{"cve":"CVE-2026-68216","month":"2026-08","title":"media: pwc: Return queued buffers on start_streaming() failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68216"},{"cve":"CVE-2026-68217","month":"2026-08","title":"media: pwc: Drain fill_buf on start_streaming() failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68217"},{"cve":"CVE-2026-68218","month":"2026-08","title":"media: pci: dm1105: Free allocated workqueue","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68218"},{"cve":"CVE-2026-68219","month":"2026-08","title":"media: nxp: imx8-isi: Fix potential out-of-bounds issues","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68219"},{"cve":"CVE-2026-68220","month":"2026-08","title":"media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68220"},{"cve":"CVE-2026-68222","month":"2026-08","title":"media: msi2500: Return queued buffers on start_streaming() failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68222"},{"cve":"CVE-2026-68223","month":"2026-08","title":"media: meson: vdec: Fix memory leak in error path of vdec_open","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68223"},{"cve":"CVE-2026-68226","month":"2026-08","title":"media: cx23885: add ioremap return check and cleanup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68226"},{"cve":"CVE-2026-68229","month":"2026-08","title":"media: cedrus: skip invalid H.264 reference list entries","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68229"},{"cve":"CVE-2026-68231","month":"2026-08","title":"media: airspy: Return queued buffers on start_streaming() failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68231"},{"cve":"CVE-2026-68233","month":"2026-08","title":"drm/vc4: Shut down BO cache timer before teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68233"},{"cve":"CVE-2026-68234","month":"2026-08","title":"drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68234"},{"cve":"CVE-2026-68235","month":"2026-08","title":"drm/amd/display: dce100: skip non-DP stream encoders for DP MST","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68235"},{"cve":"CVE-2026-68236","month":"2026-08","title":"drm/amd/display: set new_stream to NULL after release","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68236"},{"cve":"CVE-2026-68238","month":"2026-08","title":"drm/amdgpu: Release VFCT ACPI table reference","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68238"},{"cve":"CVE-2026-68241","month":"2026-08","title":"drm/i915/mst: limit DP MST ESI service loop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68241"},{"cve":"CVE-2026-68242","month":"2026-08","title":"drm/i915/gt: Fix NULL deref on sched_engine alloc failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68242"},{"cve":"CVE-2026-68243","month":"2026-08","title":"drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68243"},{"cve":"CVE-2026-68244","month":"2026-08","title":"drm/i915/gem: Do not leak siblings[] on proto context error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68244"},{"cve":"CVE-2026-68245","month":"2026-08","title":"drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68245"},{"cve":"CVE-2026-68246","month":"2026-08","title":"drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68246"},{"cve":"CVE-2026-68247","month":"2026-08","title":"drm/i915/bios: range check LFP Data Block panel_type2","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68247"},{"cve":"CVE-2026-68248","month":"2026-08","title":"drm/i915: Return NULL on error in active_instance","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68248"},{"cve":"CVE-2026-68249","month":"2026-08","title":"drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68249"},{"cve":"CVE-2026-68250","month":"2026-08","title":"drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68250"},{"cve":"CVE-2026-68251","month":"2026-08","title":"drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68251"},{"cve":"CVE-2026-68252","month":"2026-08","title":"drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68252"},{"cve":"CVE-2026-68253","month":"2026-08","title":"drm/i915/hdcp: check streams[] bounds before overflow","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68253"},{"cve":"CVE-2026-68254","month":"2026-08","title":"drm/i915/vrr: require valid min/max vfreq for VRR","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68254"},{"cve":"CVE-2026-68255","month":"2026-08","title":"drm/virtio: bound EDID block reads to the response buffer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68255"},{"cve":"CVE-2026-68256","month":"2026-08","title":"drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68256"},{"cve":"CVE-2026-68257","month":"2026-08","title":"drm/amdkfd: fix 32-bit overflow in CWSR total size calculation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68257"},{"cve":"CVE-2026-68258","month":"2026-08","title":"drm/amdkfd: Check bounds on CRIU restore queue type and mqd size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68258"},{"cve":"CVE-2026-68259","month":"2026-08","title":"drm/amdkfd: Check bounds in allocate_event_notification_slot","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68259"},{"cve":"CVE-2026-68269","month":"2026-08","title":"drm/i915/gem: Add missing nospec on parallel submit slot","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68269"},{"cve":"CVE-2026-68271","month":"2026-08","title":"drm/nouveau: fix reversed error cleanup order in ucopy functions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68271"},{"cve":"CVE-2026-68272","month":"2026-08","title":"drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68272"},{"cve":"CVE-2026-68273","month":"2026-08","title":"drm/amdgpu: Fix context pstate override handling","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68273"},{"cve":"CVE-2026-68277","month":"2026-08","title":"drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68277"},{"cve":"CVE-2026-68278","month":"2026-08","title":"drm/dp/mst: fix buffer overflows in sideband chunk accumulation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68278"},{"cve":"CVE-2026-68279","month":"2026-08","title":"drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68279"},{"cve":"CVE-2026-68280","month":"2026-08","title":"drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68280"},{"cve":"CVE-2026-68284","month":"2026-08","title":"bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68284"},{"cve":"CVE-2026-68286","month":"2026-08","title":"drop_monitor: perform u64_stats updates under IRQ-disabled section","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68286"},{"cve":"CVE-2026-68287","month":"2026-08","title":"drop_monitor: fix size calculations for 64-bit attributes","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68287"},{"cve":"CVE-2026-68288","month":"2026-08","title":"net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68288"},{"cve":"CVE-2026-68289","month":"2026-08","title":"tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68289"},{"cve":"CVE-2026-68293","month":"2026-08","title":"net/mlx5: Fix MCIA register buffer overflow on 32 dword reads","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68293"},{"cve":"CVE-2026-68294","month":"2026-08","title":"net: qrtr: restrict socket creation to the initial network namespace","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68294"},{"cve":"CVE-2026-68297","month":"2026-08","title":"tipc: fix u16 MTU truncation in media and bearer MTU validation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68297"},{"cve":"CVE-2026-68299","month":"2026-08","title":"vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68299"},{"cve":"CVE-2026-68300","month":"2026-08","title":"sctp: auth: verify auth requirement when auth_chunk is NULL","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68300"},{"cve":"CVE-2026-68301","month":"2026-08","title":"net: hsr: fix memory leak on slave unregistration by removing synced VLANs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68301"},{"cve":"CVE-2026-68302","month":"2026-08","title":"amt: re-read skb header pointers after every pull","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68302"},{"cve":"CVE-2026-68303","month":"2026-08","title":"drm/vc4: hvs/v3d: Fix null dereference in unbind","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68303"},{"cve":"CVE-2026-68304","month":"2026-08","title":"wifi: brcmfmac: fix 802.1X-SHA256 call trace warning","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68304"},{"cve":"CVE-2026-68306","month":"2026-08","title":"wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68306"},{"cve":"CVE-2026-68308","month":"2026-08","title":"wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68308"},{"cve":"CVE-2026-68309","month":"2026-08","title":"wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68309"},{"cve":"CVE-2026-68310","month":"2026-08","title":"wifi: mt76: mt7915: guard HE capability lookups","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68310"},{"cve":"CVE-2026-68312","month":"2026-08","title":"cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68312"},{"cve":"CVE-2026-68313","month":"2026-08","title":"tipc: fix infinite loop in __tipc_nl_compat_dumpit","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68313"},{"cve":"CVE-2026-68315","month":"2026-08","title":"sctp: validate stream count in sctp_process_strreset_inreq()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68315"},{"cve":"CVE-2026-68317","month":"2026-08","title":"pds_core: fix auxiliary device add/del races","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68317"},{"cve":"CVE-2026-68318","month":"2026-08","title":"pds_core: fix use-after-free on workqueue during remove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68318"},{"cve":"CVE-2026-68320","month":"2026-08","title":"sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68320"},{"cve":"CVE-2026-68322","month":"2026-08","title":"rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68322"},{"cve":"CVE-2026-68323","month":"2026-08","title":"tipc: serialize udp bearer replicast list updates","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68323"},{"cve":"CVE-2026-68324","month":"2026-08","title":"iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68324"},{"cve":"CVE-2026-68325","month":"2026-08","title":"iommu/amd: Bound the early ACPI HID map","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68325"},{"cve":"CVE-2026-68326","month":"2026-08","title":"wifi: mwifiex: bound uAP association event IEs to the event buffer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68326"},{"cve":"CVE-2026-68327","month":"2026-08","title":"wan: wanxl: Only reset hardware after BAR mapping","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68327"},{"cve":"CVE-2026-68328","month":"2026-08","title":"nfp: Check resource mutex allocation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68328"},{"cve":"CVE-2026-68329","month":"2026-08","title":"iommu/amd: Wait for completion instead of returning early in iommu_completion_wait()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68329"},{"cve":"CVE-2026-68331","month":"2026-08","title":"dpaa2-eth: put MAC endpoint device on disconnect","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68331"},{"cve":"CVE-2026-68333","month":"2026-08","title":"dpaa2-switch: put MAC endpoint device on disconnect","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68333"},{"cve":"CVE-2026-68335","month":"2026-08","title":"rds: drop incoming messages that cross network namespace boundaries","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68335"},{"cve":"CVE-2026-68336","month":"2026-08","title":"bonding: fix devconf_all NULL dereference when IPv6 is disabled","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68336"},{"cve":"CVE-2026-68337","month":"2026-08","title":"bpf: Reject redirect helpers without a bpf_net_context","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68337"},{"cve":"CVE-2026-68338","month":"2026-08","title":"net/packet: avoid fanout hook re-registration after unregister","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68338"},{"cve":"CVE-2026-68339","month":"2026-08","title":"Bluetooth: btusb: validate Realtek vendor event length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68339"},{"cve":"CVE-2026-68340","month":"2026-08","title":"hwmon: occ: validate poll response sensor blocks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68340"},{"cve":"CVE-2026-68343","month":"2026-08","title":"smb: client: validate DFS referral PathConsumed","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68343"},{"cve":"CVE-2026-68348","month":"2026-08","title":"ASoC: tas2781: bound firmware description string parsing","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68348"},{"cve":"CVE-2026-68349","month":"2026-08","title":"wifi: carl9170: fix buffer overflow in rx_stream failover path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68349"},{"cve":"CVE-2026-68350","month":"2026-08","title":"wifi: carl9170: fix OOB read from off-by-two in TX status handler","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68350"},{"cve":"CVE-2026-68351","month":"2026-08","title":"wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68351"},{"cve":"CVE-2026-68352","month":"2026-08","title":"wifi: ath6kl: fix OOB read from firmware IE lengths in connect event","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68352"},{"cve":"CVE-2026-68353","month":"2026-08","title":"wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68353"},{"cve":"CVE-2026-68354","month":"2026-08","title":"firewire: net: Fix fragmented datagram reassembly","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68354"},{"cve":"CVE-2026-68355","month":"2026-08","title":"wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68355"},{"cve":"CVE-2026-68357","month":"2026-08","title":"watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68357"},{"cve":"CVE-2026-68359","month":"2026-08","title":"hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68359"},{"cve":"CVE-2026-68360","month":"2026-08","title":"hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68360"},{"cve":"CVE-2026-68361","month":"2026-08","title":"hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68361"},{"cve":"CVE-2026-68362","month":"2026-08","title":"wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68362"},{"cve":"CVE-2026-68363","month":"2026-08","title":"wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.0,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68363"},{"cve":"CVE-2026-68364","month":"2026-08","title":"drm/amd/display: Fix ISM dc_lock deadlock during suspend","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68364"},{"cve":"CVE-2026-68365","month":"2026-08","title":"USB: serial: io_edgeport: cap received transmit credits","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68365"},{"cve":"CVE-2026-68366","month":"2026-08","title":"usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68366"},{"cve":"CVE-2026-68367","month":"2026-08","title":"usb: gadget: f_tcm: synchronize delayed set_alt with teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68367"},{"cve":"CVE-2026-68368","month":"2026-08","title":"usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68368"},{"cve":"CVE-2026-68369","month":"2026-08","title":"usb: gadget: printer: fix infinite loop in printer_read()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68369"},{"cve":"CVE-2026-68370","month":"2026-08","title":"usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68370"},{"cve":"CVE-2026-68371","month":"2026-08","title":"usb: musb: omap2430: Do not put borrowed of_node in probe","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68371"},{"cve":"CVE-2026-68373","month":"2026-08","title":"wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68373"},{"cve":"CVE-2026-68374","month":"2026-08","title":"usb: core: sysfs: add lock to bos_descriptors_read()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68374"},{"cve":"CVE-2026-68376","month":"2026-08","title":"sctp: fix auth_hmacs array size in struct sctp_cookie","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68376"},{"cve":"CVE-2026-68377","month":"2026-08","title":"net/sched: act_tunnel_key: Defer dst_release to RCU callback","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68377"},{"cve":"CVE-2026-68381","month":"2026-08","title":"ksmbd: pin conn during async oplock break notification","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68381"},{"cve":"CVE-2026-68386","month":"2026-08","title":"bpf, sockmap: Reject unhashed UDP sockets on sockmap update","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68386"},{"cve":"CVE-2026-68388","month":"2026-08","title":"smb/client: handle overlapping allocated ranges in fallocate","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68388"},{"cve":"CVE-2026-68389","month":"2026-08","title":"Bluetooth: hci_qca: Clear memdump state on invalid dump size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68389"},{"cve":"CVE-2026-68391","month":"2026-08","title":"Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68391"},{"cve":"CVE-2026-68392","month":"2026-08","title":"Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68392"},{"cve":"CVE-2026-68395","month":"2026-08","title":"ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68395"},{"cve":"CVE-2026-68396","month":"2026-08","title":"scsi: core: wake eh reliably when using scsi_schedule_eh","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68396"},{"cve":"CVE-2026-68397","month":"2026-08","title":"net/iucv: take a reference on the socket found in afiucv_hs_rcv()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68397"},{"cve":"CVE-2026-68398","month":"2026-08","title":"ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68398"},{"cve":"CVE-2026-68399","month":"2026-08","title":"bpf: Fix UAF in sock clone early bailouts","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68399"},{"cve":"CVE-2026-68401","month":"2026-08","title":"firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68401"},{"cve":"CVE-2026-68402","month":"2026-08","title":"wifi: cfg80211: bound element ID read when checking non-inheritance","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68402"},{"cve":"CVE-2026-68403","month":"2026-08","title":"wifi: brcmfmac: initialize SDIO data work before cleanup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68403"},{"cve":"CVE-2026-68404","month":"2026-08","title":"wifi: cfg80211: use wiphy work for socket owner autodisconnect","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68404"},{"cve":"CVE-2026-68405","month":"2026-08","title":"wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68405"},{"cve":"CVE-2026-68406","month":"2026-08","title":"wifi: cfg80211: validate PMSR FTM preamble range","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68406"},{"cve":"CVE-2026-68407","month":"2026-08","title":"wifi: nl80211: free RNR data on MBSSID mismatch","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68407"},{"cve":"CVE-2026-68408","month":"2026-08","title":"wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68408"},{"cve":"CVE-2026-68409","month":"2026-08","title":"wifi: mac80211: defer link RX stats percpu free to RCU","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68409"},{"cve":"CVE-2026-68410","month":"2026-08","title":"wifi: libertas: fix memory leak in helper_firmware_cb()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68410"},{"cve":"CVE-2026-68411","month":"2026-08","title":"wifi: mac80211_hwsim: clamp virtio RX length before skb_put","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68411"},{"cve":"CVE-2026-68412","month":"2026-08","title":"wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68412"},{"cve":"CVE-2026-68413","month":"2026-08","title":"wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68413"},{"cve":"CVE-2026-68414","month":"2026-08","title":"wifi: cfg80211: cancel sched scan results work on unregister","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68414"},{"cve":"CVE-2026-68416","month":"2026-08","title":"mtd: fix double free and WARN_ON in add_mtd_device() error paths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68416"},{"cve":"CVE-2026-68417","month":"2026-08","title":"RDMA/siw: publish QP after initialization","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68417"},{"cve":"CVE-2026-68418","month":"2026-08","title":"RDMA/irdma: Prevent user-triggered null deref on QP create","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68418"},{"cve":"CVE-2026-68419","month":"2026-08","title":"RDMA/irdma: Prevent rereg_mr for non-mem regions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68419"},{"cve":"CVE-2026-68422","month":"2026-08","title":"btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68422"},{"cve":"CVE-2026-68425","month":"2026-08","title":"IB/mad: Drop unmatched RMPP responses before reassembly","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68425"},{"cve":"CVE-2026-68426","month":"2026-08","title":"xfrm: fix stale skb->prev after async crypto steals a GSO segment","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68426"},{"cve":"CVE-2026-68427","month":"2026-08","title":"gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68427"},{"cve":"CVE-2026-68428","month":"2026-08","title":"KVM: x86/mmu: Fix use-after-free on vendor module reload","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68428"},{"cve":"CVE-2026-68429","month":"2026-08","title":"drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.8,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68429"},{"cve":"CVE-2026-68430","month":"2026-08","title":"drm/amdgpu/gfx8: drop unecessary BUG_ON()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68430"},{"cve":"CVE-2026-68432","month":"2026-08","title":"vxlan: require CAP_NET_ADMIN in the device netns for changelink","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68432"},{"cve":"CVE-2026-68433","month":"2026-08","title":"libceph: bound get_version reply decode to front len","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68433"},{"cve":"CVE-2026-68436","month":"2026-08","title":"drm/amd/display: use kvzalloc to allocate struct dc","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68436"},{"cve":"CVE-2026-68441","month":"2026-08","title":"net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68441"},{"cve":"CVE-2026-68444","month":"2026-08","title":"firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68444"},{"cve":"CVE-2026-68445","month":"2026-08","title":"drm/vc4: Prevent shader BO mappings from becoming writable","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68445"},{"cve":"CVE-2026-68446","month":"2026-08","title":"drm/vmwgfx: Validate vmw_surface_metadata::array_size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68446"},{"cve":"CVE-2026-68447","month":"2026-08","title":"drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68447"},{"cve":"CVE-2026-68448","month":"2026-08","title":"ovl: check access to copy_file_range source with src mounter creds","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68448"},{"cve":"CVE-2026-68450","month":"2026-08","title":"btrfs: free mapping node on duplicate reloc root insert","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68450"},{"cve":"CVE-2026-68452","month":"2026-08","title":"s390/zcrypt: Validate length for CCA AES cipher key requests","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68452"},{"cve":"CVE-2026-68470","month":"2026-08","title":"wifi: mac80211: validate extension-frame layout before RX","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68470"},{"cve":"CVE-2026-68471","month":"2026-08","title":"wifi: ieee80211: validate MLE common info length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68471"},{"cve":"CVE-2026-68480","month":"2026-08","title":"x86/bugs: Make Safe-RET robust against interrupt injection","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68480"},{"cve":"CVE-2026-69249","month":"2026-08","title":"python-cryptography: Duplicate self-signed intermediates can cause exponential path-building","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69249"},{"cve":"CVE-2026-70367","month":"2026-08","title":"Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70367"},{"cve":"CVE-2026-70368","month":"2026-08","title":"Stunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70368"},{"cve":"CVE-2026-70452","month":"2026-08","title":"rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Critical","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70452"},{"cve":"CVE-2026-70453","month":"2026-08","title":"rsync < 3.5.0 Algorithmic Complexity DoS via hash_search()","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70453"},{"cve":"CVE-2026-70454","month":"2026-08","title":"rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70454"},{"cve":"CVE-2026-70455","month":"2026-08","title":"rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70455"},{"cve":"CVE-2026-70456","month":"2026-08","title":"rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args()","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70456"},{"cve":"CVE-2026-70457","month":"2026-08","title":"rsync 3.2.3\u00a0< 3.5.0 Out-of-Bounds Write via parse_size_arg()","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-131"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70457"},{"cve":"CVE-2026-70458","month":"2026-08","title":"rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70458"},{"cve":"CVE-2026-70459","month":"2026-08","title":"rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70459"},{"cve":"CVE-2026-70460","month":"2026-08","title":"rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70460"},{"cve":"CVE-2026-70461","month":"2026-08","title":"rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70461"},{"cve":"CVE-2026-70462","month":"2026-08","title":"rsync 3.1.0 < 3.5.0\u00a0Signed Integer Overflow via MSG_IO_TIMEOUT","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70462"},{"cve":"CVE-2026-70464","month":"2026-08","title":"rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70464"},{"cve":"CVE-2026-70622","month":"2026-08","title":"tar-rs 0.4.11 - 0.4.46 Symlink Escape via append_dir_all()","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70622"},{"cve":"CVE-2026-71217","month":"2026-08","title":"Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71217"},{"cve":"CVE-2026-71218","month":"2026-08","title":"Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71218"},{"cve":"CVE-2026-71225","month":"2026-08","title":"Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","cwe":["CWE-330"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71225"},{"cve":"CVE-2026-71226","month":"2026-08","title":"Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71226"},{"cve":"CVE-2026-71227","month":"2026-08","title":"Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71227"},{"cve":"CVE-2026-71497","month":"2026-08","title":"jsoup: Cleaner may expose markup with custom raw-text elements","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71497"},{"cve":"CVE-2026-71556","month":"2026-08","title":"go-git: Worktree operations may follow symlinks","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71556"},{"cve":"CVE-2026-71557","month":"2026-08","title":"go-git: Malicious reference names may modify files outside the reference storage","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71557"},{"cve":"CVE-2026-72042","month":"2026-08","title":"ipmi: Fix user refcount underflow in event delivery","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72042"},{"cve":"CVE-2026-72073","month":"2026-08","title":"mmc: vub300: fix use-after-free on probe failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72073"},{"cve":"CVE-2026-72098","month":"2026-08","title":"dm-verity: fix buffer overflow in FEC calculation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72098"},{"cve":"CVE-2026-72131","month":"2026-08","title":"nvme-apple: Prevent shared tags across queues on Apple A11","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72131"},{"cve":"CVE-2026-72198","month":"2026-08","title":"ntfs: reject non-resident records for resident-only attributes","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72198"},{"cve":"CVE-2026-72200","month":"2026-08","title":"ntfs: detect mapping-pairs LCN accumulator overflow","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72200"},{"cve":"CVE-2026-72203","month":"2026-08","title":"ntfs: skip extent mft records in writeback to prevent deadlock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72203"},{"cve":"CVE-2026-72315","month":"2026-08","title":"smb: client: fix busy dentry warning on unmount after DIO","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72315"},{"cve":"CVE-2026-72320","month":"2026-08","title":"netfilter: nft_lookup: fix catchall element handling with inverted lookups","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72320"},{"cve":"CVE-2026-72321","month":"2026-08","title":"ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72321"},{"cve":"CVE-2026-72324","month":"2026-08","title":"gpio: mvebu: free generic chips on unbind","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72324"},{"cve":"CVE-2026-72325","month":"2026-08","title":"perf/x86/amd/core: Avoid enabling BRS from the SVM reload path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72325"},{"cve":"CVE-2026-72329","month":"2026-08","title":"net/liquidio: drop cached VF pci_dev LUT","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72329"},{"cve":"CVE-2026-72337","month":"2026-08","title":"Bluetooth: 6lowpan: avoid untracked enable work","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72337"},{"cve":"CVE-2026-72341","month":"2026-08","title":"net/mlx5e: Fix publication race for priv->channel_stats[]","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72341"},{"cve":"CVE-2026-72383","month":"2026-08","title":"sctp: fix addr_wq_timer race in sctp_free_addr_wq()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72383"},{"cve":"CVE-2026-72392","month":"2026-08","title":"ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72392"},{"cve":"CVE-2026-72397","month":"2026-08","title":"hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72397"},{"cve":"CVE-2026-72398","month":"2026-08","title":"sctp: add INIT verification after cookie unpacking","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72398"},{"cve":"CVE-2026-72402","month":"2026-08","title":"bpf: Mask pseudo pointer values in verifier logs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72402"},{"cve":"CVE-2026-72404","month":"2026-08","title":"tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72404"},{"cve":"CVE-2026-72405","month":"2026-08","title":"net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72405"},{"cve":"CVE-2026-72413","month":"2026-08","title":"sctp: fix err_chunk memory leaks in INIT handling","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72413"},{"cve":"CVE-2026-72420","month":"2026-08","title":"md/raid5: avoid R5_Overlap races while breaking stripe batches","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72420"},{"cve":"CVE-2026-72423","month":"2026-08","title":"bpf: Guard conntrack opts error writes","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72423"},{"cve":"CVE-2026-72434","month":"2026-08","title":"netfilter: ipset: make sure gc is properly stopped","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72434"},{"cve":"CVE-2026-72438","month":"2026-08","title":"md/raid10: fix writes_pending and barrier reference leaks on discard failures","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72438"},{"cve":"CVE-2026-72439","month":"2026-08","title":"md/raid10: fix writes_pending leak on write request failures","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72439"},{"cve":"CVE-2026-72440","month":"2026-08","title":"md/raid1: fix writes_pending and barrier reference leaks on write failures","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72440"},{"cve":"CVE-2026-72469","month":"2026-08","title":"xprtrdma: Fix ep kref imbalance on ADDR_CHANGE","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72469"},{"cve":"CVE-2026-72472","month":"2026-08","title":"nfs: use nfsi->rwsem to protect traversal of the file lock list","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72472"},{"cve":"CVE-2026-72493","month":"2026-08","title":"net: serialize netif_running() check in enqueue_to_backlog()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72493"},{"cve":"CVE-2026-72495","month":"2026-08","title":"RDMA/bnxt_re: Avoid repeated requests to allocate WC pages","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72495"},{"cve":"CVE-2026-72496","month":"2026-08","title":"RDMA/bnxt_re: Proper rollback if the ioremap fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72496"},{"cve":"CVE-2026-72501","month":"2026-08","title":"RDMA/bnxt_re: Initialize dpi variable to zero","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72501"},{"cve":"CVE-2026-72522","month":"2026-08","title":"libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72522"},{"cve":"CVE-2026-72568","month":"2026-08","title":"Redis - Heap Out-of-Bounds Read in Cluster Bus PING Message Handler","family":"Other","component":"Mariner","cna":"TuranSec","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:U/RL:U/RC:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72568"},{"cve":"CVE-2026-72693","month":"2026-08","title":"Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72693"},{"cve":"CVE-2026-72712","month":"2026-08","title":"Nmap 7.99 Denial of Service via Zero-Length TCP Option Packet","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Low","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72712"},{"cve":"CVE-2026-72816","month":"2026-08","title":"go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-290"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72816"},{"cve":"CVE-2026-72817","month":"2026-08","title":"go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-345"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72817"},{"cve":"CVE-2026-72854","month":"2026-08","title":"msgpack-c Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized Reservation","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72854"},{"cve":"CVE-2026-72924","month":"2026-08","title":"GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-1327"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72924"},{"cve":"CVE-2026-73070","month":"2026-08","title":"Vim: Stack Buffer Overflow in the Vim Socket Server","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73070"},{"cve":"CVE-2026-73071","month":"2026-08","title":"Vim: Use-after-free in JSON Decoding","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73071"},{"cve":"CVE-2026-73072","month":"2026-08","title":"Vim: Heap Buffer Overflow when Loading a Spell File","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73072"},{"cve":"CVE-2026-73073","month":"2026-08","title":"Vim: Arbitrary Ex Command Execution in C Omni-Completion","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73073"},{"cve":"CVE-2026-73074","month":"2026-08","title":"Vim: Heap Buffer Overflow in Text Property Handling","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73074"},{"cve":"CVE-2026-73075","month":"2026-08","title":"Vim: Out-of-bounds Access in Popup Opacity Handling","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-124"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73075"},{"cve":"CVE-2026-73076","month":"2026-08","title":"Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73076"},{"cve":"CVE-2026-73077","month":"2026-08","title":"Vim: Arbitrary Code Execution via Shell Keyword Lookup","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73077"},{"cve":"CVE-2026-73078","month":"2026-08","title":"Vim: Arbitrary Code Execution via Netrw Menu Construction","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73078"},{"cve":"CVE-2026-73194","month":"2026-08","title":"DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73194"},{"cve":"CVE-2026-73281","month":"2026-08","title":"In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":3.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","cwe":["CWE-669"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73281"},{"cve":"CVE-2026-73282","month":"2026-08","title":"In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73282"},{"cve":"CVE-2026-73283","month":"2026-08","title":"In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U","cwe":["CWE-670"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73283"},{"cve":"CVE-2026-73499","month":"2026-08","title":"etcd: Watch API authorization bypass via open-ended range requests","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73499"},{"cve":"CVE-2026-73500","month":"2026-08","title":"etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73500"},{"cve":"CVE-2026-73566","month":"2026-08","title":"node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73566"},{"cve":"CVE-2026-74257","month":"2026-08","title":"sockmap: Fix use-after-free in udp_bpf_recvmsg()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74257"},{"cve":"CVE-2026-74258","month":"2026-08","title":"bpf: Guard __get_user acesss with access_ok for uprobe_multi data","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74258"},{"cve":"CVE-2026-74264","month":"2026-08","title":"net: watchdog: fix refcount tracking races","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74264"},{"cve":"CVE-2026-74268","month":"2026-08","title":"tcp: clear sock_ops cb flags before force-closing a child socket","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74268"},{"cve":"CVE-2026-74269","month":"2026-08","title":"bnxt: fix head underflow on XDP head-grow","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74269"},{"cve":"CVE-2026-74289","month":"2026-08","title":"ipv4: fib: Don't dump dying fib_info in fib_leaf_notify().","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74289"},{"cve":"CVE-2026-74291","month":"2026-08","title":"ASoC: topology: Check PCM and DAI name strings before use","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74291"},{"cve":"CVE-2026-74302","month":"2026-08","title":"Bluetooth: hci_core: Fix UAF in hci_unregister_dev()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74302"},{"cve":"CVE-2026-74307","month":"2026-08","title":"ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74307"},{"cve":"CVE-2026-74314","month":"2026-08","title":"bpf: Cancel special fields on map value recycle","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74314"},{"cve":"CVE-2026-74317","month":"2026-08","title":"ixgbe: do not configure xps for XDP queues","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74317"},{"cve":"CVE-2026-74318","month":"2026-08","title":"btrfs: fix deadlock cloning inline extent when using flushoncommit","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74318"},{"cve":"CVE-2026-74334","month":"2026-08","title":"RDMA/nldev: Fix locking when accessing mr->pd","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74334"},{"cve":"CVE-2026-74338","month":"2026-08","title":"bpf: Reject sleepable BPF_LSM_CGROUP programs at load time","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74338"},{"cve":"CVE-2026-74342","month":"2026-08","title":"kernfs: link kn to its parent before the LSM init hook","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74342"},{"cve":"CVE-2026-74344","month":"2026-08","title":"bpf: Clear rb node linkage when freeing bpf_rb_root","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74344"},{"cve":"CVE-2026-74345","month":"2026-08","title":"RDMA/siw: Fix endpoint/socket association handling","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74345"},{"cve":"CVE-2026-74347","month":"2026-08","title":"netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74347"},{"cve":"CVE-2026-74356","month":"2026-08","title":"vhost: fix vhost_get_avail_idx for a non empty ring","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74356"},{"cve":"CVE-2026-74373","month":"2026-08","title":"md/raid1,raid10: fix bio accounting for split md cloned bios","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74373"},{"cve":"CVE-2026-74374","month":"2026-08","title":"md/raid1,raid10: fix error-path detection with md_cloned_bio()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74374"},{"cve":"CVE-2026-74375","month":"2026-08","title":"md/raid1,raid10: fix deadlock in read error recovery path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74375"},{"cve":"CVE-2026-74386","month":"2026-08","title":"nvmet-tcp: fix page fragment cache leak in error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74386"},{"cve":"CVE-2026-74405","month":"2026-08","title":"OPP: Fix race between OPP addition and lookup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74405"},{"cve":"CVE-2026-74443","month":"2026-08","title":"drm/vmwgfx: bound DMA command body size against suffix pointer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74443"},{"cve":"CVE-2026-74444","month":"2026-08","title":"drm/vmwgfx: validate DRAW_PRIMITIVES header size before division","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74444"},{"cve":"CVE-2026-74445","month":"2026-08","title":"drm/vmwgfx: reject DX_BIND_QUERY without a DX context","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74445"},{"cve":"CVE-2026-74446","month":"2026-08","title":"drm/amdkfd: hold event_mutex while checkpointing CRIU events","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74446"},{"cve":"CVE-2026-74448","month":"2026-08","title":"drm/amdkfd: fix QID bit leak in pqm_create_queue()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74448"},{"cve":"CVE-2026-74450","month":"2026-08","title":"drm/amd/pm: fix pptable use-after-free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74450"},{"cve":"CVE-2026-74453","month":"2026-08","title":"drm/vc4: Zero the tile state data array before each BIN job","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74453"},{"cve":"CVE-2026-74454","month":"2026-08","title":"drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74454"},{"cve":"CVE-2026-74455","month":"2026-08","title":"can: peak_usb: validate uCAN receive record lengths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74455"},{"cve":"CVE-2026-74456","month":"2026-08","title":"can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.8,"vector":"CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74456"},{"cve":"CVE-2026-74457","month":"2026-08","title":"can: peak_usb: add bounds check for USB channel index","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74457"},{"cve":"CVE-2026-74458","month":"2026-08","title":"can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74458"},{"cve":"CVE-2026-74460","month":"2026-08","title":"can: ems_usb: validate CPC message lengths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74460"},{"cve":"CVE-2026-74461","month":"2026-08","title":"i2c: imx: Cancel hrtimer before clearing slave pointer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74461"},{"cve":"CVE-2026-74464","month":"2026-08","title":"net: openvswitch: fix skb leak on flow key update failure during ct","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74464"},{"cve":"CVE-2026-74465","month":"2026-08","title":"net: openvswitch: fix potential UAF on meter attach failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74465"},{"cve":"CVE-2026-74469","month":"2026-08","title":"sctp: prevent peer transport count overflow","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74469"},{"cve":"CVE-2026-74470","month":"2026-08","title":"scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74470"},{"cve":"CVE-2026-74471","month":"2026-08","title":"tracing: Check return value of __register_event() in trace_module_add_events()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74471"},{"cve":"CVE-2026-74473","month":"2026-08","title":"vxlan: use pskb_network_may_pull() in route_shortcircuit()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74473"},{"cve":"CVE-2026-74474","month":"2026-08","title":"vxlan: use pskb_network_may_pull() for transmit path header pulls","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74474"},{"cve":"CVE-2026-74475","month":"2026-08","title":"vxlan: use neigh_ha_snapshot() in route_shortcircuit()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74475"},{"cve":"CVE-2026-74476","month":"2026-08","title":"veth: convert frag_list skbs before running XDP","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74476"},{"cve":"CVE-2026-74479","month":"2026-08","title":"net: pktgen: fix proc entry use-after-free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74479"},{"cve":"CVE-2026-74480","month":"2026-08","title":"net: bridge: stop fast-leave after deleting a port group","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74480"},{"cve":"CVE-2026-74481","month":"2026-08","title":"mm/page_reporting: use system_freezable_wq to fix UAF during suspend","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74481"},{"cve":"CVE-2026-74482","month":"2026-08","title":"mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74482"},{"cve":"CVE-2026-74485","month":"2026-08","title":"binfmt_misc: reject a flag character as the field delimiter","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74485"},{"cve":"CVE-2026-74487","month":"2026-08","title":"binfmt_misc: restore write access when removing an entry","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74487"},{"cve":"CVE-2026-74488","month":"2026-08","title":"wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74488"},{"cve":"CVE-2026-74490","month":"2026-08","title":"tipc: avoid use-after-free in poll trace queue dumps","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74490"},{"cve":"CVE-2026-74492","month":"2026-08","title":"netfilter: ipset: do not update comments from kernel-side hash adds","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74492"},{"cve":"CVE-2026-74493","month":"2026-08","title":"net/smc: fix socket use-after-free during link group termination","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74493"},{"cve":"CVE-2026-74495","month":"2026-08","title":"igbvf: Fix leak in TX DMA error cleanup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74495"},{"cve":"CVE-2026-74496","month":"2026-08","title":"fou: Fix use-after-free in fou_create()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74496"},{"cve":"CVE-2026-74497","month":"2026-08","title":"ALSA: usb-audio: Clamp frame size in implicit-feedback mode","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74497"},{"cve":"CVE-2026-74498","month":"2026-08","title":"ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74498"},{"cve":"CVE-2026-74499","month":"2026-08","title":"ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74499"},{"cve":"CVE-2026-74501","month":"2026-08","title":"ALSA: usb-audio: fix use-after-free in ump_to_endpoint()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74501"},{"cve":"CVE-2026-74507","month":"2026-08","title":"Bluetooth: HIDP: validate numbered report payloads","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74507"},{"cve":"CVE-2026-74508","month":"2026-08","title":"Bluetooth: HIDP: reject frames without a transaction header","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74508"},{"cve":"CVE-2026-74509","month":"2026-08","title":"Bluetooth: hci_sync: Fix advertising data UAFs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74509"},{"cve":"CVE-2026-74510","month":"2026-08","title":"Bluetooth: mgmt: fix UAF in pair command cancellation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74510"},{"cve":"CVE-2026-74511","month":"2026-08","title":"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74511"},{"cve":"CVE-2026-74512","month":"2026-08","title":"audit: fix potential use-after-free in audit_del_rule()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74512"},{"cve":"CVE-2026-74516","month":"2026-08","title":"KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74516"},{"cve":"CVE-2026-74518","month":"2026-08","title":"mm/hugetlb: fix list corruption in allocate_file_region_entries()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74518"},{"cve":"CVE-2026-74519","month":"2026-08","title":"pinctrl: devicetree: don't free uninitialized dev_name on error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74519"},{"cve":"CVE-2026-74523","month":"2026-08","title":"qede: sync udp_tunnel ports outside qede_lock in the recovery path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74523"},{"cve":"CVE-2026-74525","month":"2026-08","title":"net: sxgbe: free TX rings on RX allocation failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74525"},{"cve":"CVE-2026-74531","month":"2026-08","title":"Bluetooth: hci_conn: hold conn reference in abort_conn_sync()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74531"},{"cve":"CVE-2026-74532","month":"2026-08","title":"Bluetooth: btintel: Validate length before parsing diagnostics TLV","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74532"},{"cve":"CVE-2026-74540","month":"2026-08","title":"Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74540"},{"cve":"CVE-2026-74543","month":"2026-08","title":"net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74543"},{"cve":"CVE-2026-74544","month":"2026-08","title":"net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74544"},{"cve":"CVE-2026-74546","month":"2026-08","title":"hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74546"},{"cve":"CVE-2026-74547","month":"2026-08","title":"hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74547"},{"cve":"CVE-2026-74548","month":"2026-08","title":"forcedeth: fix UAF of txrx_stats in nv_remove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74548"},{"cve":"CVE-2026-74549","month":"2026-08","title":"hwmon: (nct6775-core) Prevent access to unsupported weight registers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74549"},{"cve":"CVE-2026-74550","month":"2026-08","title":"net: do not send ICMP/NDISC Redirects when peer allocation fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74550"},{"cve":"CVE-2026-74552","month":"2026-08","title":"hwmon: (lm90) Only report alarms if driver is ready","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74552"},{"cve":"CVE-2026-74553","month":"2026-08","title":"hwmon: (nct6775-core) Fix number of temperature registers for NCT6116","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74553"},{"cve":"CVE-2026-74556","month":"2026-08","title":"scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74556"},{"cve":"CVE-2026-74557","month":"2026-08","title":"scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74557"},{"cve":"CVE-2026-74558","month":"2026-08","title":"xsk: reclaim invalid Tx descriptors in ZC batch path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74558"},{"cve":"CVE-2026-74559","month":"2026-08","title":"xsk: drain continuation descs after overflow in xsk_build_skb()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74559"},{"cve":"CVE-2026-74560","month":"2026-08","title":"xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74560"},{"cve":"CVE-2026-74563","month":"2026-08","title":"rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74563"},{"cve":"CVE-2026-74564","month":"2026-08","title":"netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74564"},{"cve":"CVE-2026-74565","month":"2026-08","title":"netfilter: nf_tables: make nft_object rhltable per table","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74565"},{"cve":"CVE-2026-74566","month":"2026-08","title":"keys: make keyring key-chunk byte order agree with keyring_diff_objects()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74566"},{"cve":"CVE-2026-74567","month":"2026-08","title":"keys: fix out-of-bounds read in keyring_get_key_chunk()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74567"},{"cve":"CVE-2026-74569","month":"2026-08","title":"netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74569"},{"cve":"CVE-2026-74571","month":"2026-08","title":"btrfs: skip global block reserve accounting for rescue mounts","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74571"},{"cve":"CVE-2026-74572","month":"2026-08","title":"btrfs: zoned: fix deadlock between metadata writeback and transaction commit","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74572"},{"cve":"CVE-2026-74577","month":"2026-08","title":"net: mpls: initialize rtm_tos in mpls_getroute()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74577"},{"cve":"CVE-2026-74579","month":"2026-08","title":"netfilter: nft_payload: fix mask build for partial field offload","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74579"},{"cve":"CVE-2026-74580","month":"2026-08","title":"vhost: reset the vring metadata cache on vring reconfiguration","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74580"},{"cve":"CVE-2026-74581","month":"2026-08","title":"net: ipv6: clear suppressed fib6 rule result","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74581"},{"cve":"CVE-2026-74582","month":"2026-08","title":"packet: use consistent hard_header_len in non-ring send paths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74582"},{"cve":"CVE-2026-74583","month":"2026-08","title":"net/sched: cls_route: fix fastmap use-after-free on filter","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74583"},{"cve":"CVE-2026-74586","month":"2026-08","title":"sctp: clear new_transport when removing a peer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74586"},{"cve":"CVE-2026-74587","month":"2026-08","title":"sctp: fix use-after-free of cached ASCONF chunk","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74587"},{"cve":"CVE-2026-74588","month":"2026-08","title":"sctp: keep chunk->transport in step with the list it is queued on","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74588"},{"cve":"CVE-2026-74589","month":"2026-08","title":"bpf, sockmap: Fix sk_redir use-after-free in send verdict","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74589"},{"cve":"CVE-2026-74592","month":"2026-08","title":"ima: Instantiate file_truncate and path_truncate hooks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74592"},{"cve":"CVE-2026-74594","month":"2026-08","title":"sched/psi: Shut down rtpoll_timer in psi_cgroup_free()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74594"},{"cve":"CVE-2026-74595","month":"2026-08","title":"fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74595"},{"cve":"CVE-2026-74597","month":"2026-08","title":"ip6_tunnel: clear skb2->cb[] in ip6ip6_err()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74597"},{"cve":"CVE-2026-74598","month":"2026-08","title":"ipv6: fix Route Information option length validation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74598"},{"cve":"CVE-2026-74599","month":"2026-08","title":"mm/ptdump: always stabilise against page table freeing using init_mm","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74599"},{"cve":"CVE-2026-74600","month":"2026-08","title":"mm/page_table_check: skip special zero mappings","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74600"},{"cve":"CVE-2026-74601","month":"2026-08","title":"ring-buffer: Use current_context for safe per-CPU buffer swap","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74601"},{"cve":"CVE-2026-74603","month":"2026-08","title":"ptp: ocp: Fix board ID over-read","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74603"},{"cve":"CVE-2026-74604","month":"2026-08","title":"Revert \"thermal/drivers/hwmon: Cleanup coding style a bit\"","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74604"},{"cve":"CVE-2026-74605","month":"2026-08","title":"eventfs: Use children field for rcu head and add memory barriers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74605"},{"cve":"CVE-2026-74606","month":"2026-08","title":"eventfs: Fix use-after-free in eventfs_remove_rec()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74606"},{"cve":"CVE-2026-74607","month":"2026-08","title":"KVM: SVM: Serialize accesses to the owner and mirror list with separate lock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74607"},{"cve":"CVE-2026-74608","month":"2026-08","title":"smb: client: Fix use-after-free in cifs_try_adding_channels()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74608"},{"cve":"CVE-2026-74609","month":"2026-08","title":"tipc: read le->link under the node lock in tipc_node_link_down()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74609"},{"cve":"CVE-2026-74610","month":"2026-08","title":"tls: don't leave a full plaintext sk_msg ring unpushed","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74610"},{"cve":"CVE-2026-74611","month":"2026-08","title":"tls: rx: restore msg_iter before TLS 1.3 optimistic retry","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74611"},{"cve":"CVE-2026-74612","month":"2026-08","title":"veth: fix skb length accounting after XDP frag adjustment","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74612"},{"cve":"CVE-2026-74613","month":"2026-08","title":"vsock/virtio: avoid refilling the RX queue after teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74613"},{"cve":"CVE-2026-74614","month":"2026-08","title":"vsock/virtio: read virtqueues under worker locks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74614"},{"cve":"CVE-2026-74615","month":"2026-08","title":"vxlan: do not arm the ageing timer on a device that is down","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74615"},{"cve":"CVE-2026-74616","month":"2026-08","title":"xdp: reject clones that overrun skb_shared_info tailroom","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74616"},{"cve":"CVE-2026-74619","month":"2026-08","title":"ovl: don't warn when the mount is completed from another user namespace","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74619"},{"cve":"CVE-2026-74620","month":"2026-08","title":"net/sched: act_gact, act_police: range check the fallback control action","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74620"},{"cve":"CVE-2026-74621","month":"2026-08","title":"net/sched: act_ct: fix sk_buff leak when the header checks reject a packet","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74621"},{"cve":"CVE-2026-74622","month":"2026-08","title":"net: atlantic: free RX pages of consumed but not refilled buffers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74622"},{"cve":"CVE-2026-74623","month":"2026-08","title":"net: atlantic: free stranded TX buffers on ring deinit","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74623"},{"cve":"CVE-2026-74624","month":"2026-08","title":"netfilter: nf_conntrack: defer invalid log until after unlock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74624"},{"cve":"CVE-2026-74625","month":"2026-08","title":"netfilter: bridge: release template ct on non-IP path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74625"},{"cve":"CVE-2026-74626","month":"2026-08","title":"NTB: ntb_netdev: Preserve RX queue depth on allocation failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74626"},{"cve":"CVE-2026-74628","month":"2026-08","title":"net/x25: fix use-after-free of the socket by its timers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74628"},{"cve":"CVE-2026-74630","month":"2026-08","title":"ipv6: prevent in6_dev_get() from resurrecting inet6_dev","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74630"},{"cve":"CVE-2026-74631","month":"2026-08","title":"net: smc: fix splice entry lifetime imbalance in smc_rx_splice","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74631"},{"cve":"CVE-2026-74632","month":"2026-08","title":"mm/huge_memory: fix huge_zero_pfn race","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74632"},{"cve":"CVE-2026-74635","month":"2026-08","title":"fbdev: bitblit: bound-check glyph index in bit_cursor()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74635"},{"cve":"CVE-2026-74636","month":"2026-08","title":"tracing: Fix race between update_event_fields and, event_define_fields","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74636"},{"cve":"CVE-2026-74637","month":"2026-08","title":"perf/core: Fix group leader use-after-free after sibling detach","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74637"},{"cve":"CVE-2026-74638","month":"2026-08","title":"drm/v3d: Serialize the scheduler timeout handlers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74638"},{"cve":"CVE-2026-74641","month":"2026-08","title":"ALSA: usx2y: bound the hwdep mmap fault offset","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74641"},{"cve":"CVE-2026-74646","month":"2026-08","title":"misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74646"},{"cve":"CVE-2026-74647","month":"2026-08","title":"misc: fastrpc: Remove buffer from list prior to unmap operation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74647"},{"cve":"CVE-2026-74650","month":"2026-08","title":"staging: rtl8723bs: fix OOB read in WMM_param_handler()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74650"},{"cve":"CVE-2026-74653","month":"2026-08","title":"serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74653"},{"cve":"CVE-2026-74654","month":"2026-08","title":"serial: 8250_dma: Clear stale RX state on shutdown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74654"},{"cve":"CVE-2026-74655","month":"2026-08","title":"serial: qcom-geni: fix TX DMA buffer flush","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74655"},{"cve":"CVE-2026-74656","month":"2026-08","title":"ipv4: fix use-after-free in fib_nhc_update_mtu()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74656"},{"cve":"CVE-2026-74657","month":"2026-08","title":"ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74657"},{"cve":"CVE-2026-74658","month":"2026-08","title":"futex: Prevent robust futex exit race some more","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74658"},{"cve":"CVE-2026-74659","month":"2026-08","title":"net: bridge: mrp: fix uninitialised bytes on the wire","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74659"},{"cve":"CVE-2026-74661","month":"2026-08","title":"mac802154: fix netdev use-after-free in beacon worker","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74661"},{"cve":"CVE-2026-74662","month":"2026-08","title":"inet: frags: publish queues before arming timer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74662"},{"cve":"CVE-2026-74663","month":"2026-08","title":"net/sched: reject overly deep qdisc hierarchies","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74663"},{"cve":"CVE-2026-74664","month":"2026-08","title":"net: openvswitch: reallocate update replies for mismatched IDs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74664"},{"cve":"CVE-2026-74666","month":"2026-08","title":"packet: synchronize pressure clearing with ring reconfiguration","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74666"},{"cve":"CVE-2026-74667","month":"2026-08","title":"net/packet: reset the MAC header on the packet-socket transmit path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74667"},{"cve":"CVE-2026-74668","month":"2026-08","title":"packet: use consistent hard_header_len in TX_RING send path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74668"},{"cve":"CVE-2026-74669","month":"2026-08","title":"ipvs: clear IPv4 options after rebasing tunnel ICMP errors","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74669"},{"cve":"CVE-2026-74670","month":"2026-08","title":"ipvs: stop estimator after disabled calc phase","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74670"},{"cve":"CVE-2026-74671","month":"2026-08","title":"ima: fix out-of-bounds read in xattr_verify()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74671"},{"cve":"CVE-2026-74672","month":"2026-08","title":"mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74672"},{"cve":"CVE-2026-74673","month":"2026-08","title":"Input: evdev - fix information leak in evdev_pass_values()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74673"},{"cve":"CVE-2026-74675","month":"2026-08","title":"vt: stabilize tty reference in kbd_keycode with tty_port_tty_get","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74675"},{"cve":"CVE-2026-74676","month":"2026-08","title":"vt: add permission check for KDSKBMETA ioctl","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74676"},{"cve":"CVE-2026-74677","month":"2026-08","title":"net: usb: ipheth: fix carrier_work UAF on disconnect","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74677"},{"cve":"CVE-2026-74678","month":"2026-08","title":"net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74678"},{"cve":"CVE-2026-74680","month":"2026-08","title":"usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74680"},{"cve":"CVE-2026-74682","month":"2026-08","title":"ALSA: usb-audio: fix OOB write on Type II inbound URBs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74682"},{"cve":"CVE-2026-74683","month":"2026-08","title":"Input: evdev - sanitize event type index when fetching event masks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74683"},{"cve":"CVE-2026-74684","month":"2026-08","title":"net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74684"},{"cve":"CVE-2026-74687","month":"2026-08","title":"watchdog: at91sam9_wdt: prevent timer rearm during teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74687"},{"cve":"CVE-2026-74688","month":"2026-08","title":"sctp: clear control chunk transport if it is being removed","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74688"},{"cve":"CVE-2026-74689","month":"2026-08","title":"net/atm: fix slab-out-of-bounds read in vcc_setsockopt()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74689"},{"cve":"CVE-2026-74690","month":"2026-08","title":"s390/ism: Fix UAF of sba and ieq during ism_dev_exit()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74690"},{"cve":"CVE-2026-74691","month":"2026-08","title":"net: thunderbolt: Tear down DMA paths before stopping the rings","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74691"},{"cve":"CVE-2026-74692","month":"2026-08","title":"net/smc: fix TOCTOU race between smc_listen_out() and listener close","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74692"},{"cve":"CVE-2026-74693","month":"2026-08","title":"net: prestera: validate firmware header length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74693"},{"cve":"CVE-2026-74694","month":"2026-08","title":"net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74694"},{"cve":"CVE-2026-74695","month":"2026-08","title":"netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74695"},{"cve":"CVE-2026-74696","month":"2026-08","title":"tcp: fix TFO max_qlen accounting across reuseport migration","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74696"},{"cve":"CVE-2026-74697","month":"2026-08","title":"bnxt_en: Disable EOP for TPA on all chips to prevent data corruption","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74697"},{"cve":"CVE-2026-74700","month":"2026-08","title":"net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74700"},{"cve":"CVE-2026-74701","month":"2026-08","title":"net/openvswitch: check Ethernet header length in key_extract()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74701"},{"cve":"CVE-2026-74704","month":"2026-08","title":"net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74704"},{"cve":"CVE-2026-74705","month":"2026-08","title":"udp: fix potential use-after-free in tunnel segmentation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74705"},{"cve":"CVE-2026-74711","month":"2026-08","title":"hwmon: (pmbus) Fix type confusion in notification logic","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.5,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74711"},{"cve":"CVE-2026-74713","month":"2026-08","title":"vhost_iotlb: bound map allocation in add_range","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74713"},{"cve":"CVE-2026-74714","month":"2026-08","title":"bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74714"},{"cve":"CVE-2026-74715","month":"2026-08","title":"bpf: Fix netns reference imbalance in conntrack kfuncs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74715"},{"cve":"CVE-2026-74717","month":"2026-08","title":"net/mlx5: fw_tracer, return NULL on create error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74717"},{"cve":"CVE-2026-74718","month":"2026-08","title":"devlink: fix net namespace reference leak in reload","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74718"},{"cve":"CVE-2026-74719","month":"2026-08","title":"net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74719"},{"cve":"CVE-2026-74720","month":"2026-08","title":"bpf: Preserve pointer state for commuted arithmetic","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74720"},{"cve":"CVE-2026-74722","month":"2026-08","title":"btrfs: fix memory leak in btrfs_do_encoded_write()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74722"},{"cve":"CVE-2026-74723","month":"2026-08","title":"btrfs: lzo: reject inline extents without valid headers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74723"},{"cve":"CVE-2026-74724","month":"2026-08","title":"ipvs: avoid out-of-bounds write in ip_vs_nat_icmp","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74724"},{"cve":"CVE-2026-74725","month":"2026-08","title":"enic: fix tx_hang_reset use-after-free on device removal","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74725"},{"cve":"CVE-2026-74726","month":"2026-08","title":"bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74726"},{"cve":"CVE-2026-74730","month":"2026-08","title":"NFS: Pin the 'struct nfs_server' during a FREE_STATEID call","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74730"},{"cve":"CVE-2026-74732","month":"2026-08","title":"drm/amd/display: Check for tg ops in dce110_set_avmute","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74732"},{"cve":"CVE-2026-74733","month":"2026-08","title":"gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74733"},{"cve":"CVE-2026-74734","month":"2026-08","title":"firewire: ohci: fix NULL pointer dereference in ar_context_release","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74734"},{"cve":"CVE-2026-74736","month":"2026-08","title":"net/sched: cls_bpf: reject dev-bound programs bound to a different device","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74736"},{"cve":"CVE-2026-74737","month":"2026-08","title":"net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74737"},{"cve":"CVE-2026-74739","month":"2026-08","title":"net/sched: cls_u32: skip hash tables in u32_bind_class()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74739"},{"cve":"CVE-2026-74740","month":"2026-08","title":"net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74740"},{"cve":"CVE-2026-74743","month":"2026-08","title":"macvlan: inherit needed_headroom and needed_tailroom from lowerdev","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74743"},{"cve":"CVE-2026-74744","month":"2026-08","title":"ipvlan: inherit needed_headroom and needed_tailroom from phy_dev","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74744"},{"cve":"CVE-2026-74746","month":"2026-08","title":"netfilter: flowtable: publish GC-visible tuple last","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74746"},{"cve":"CVE-2026-74747","month":"2026-08","title":"ipvs: revalidate ihl to prevent out-of-bounds access","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74747"},{"cve":"CVE-2026-74748","month":"2026-08","title":"netfilter: ipset: fix refcount race between list:set GC and swap","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74748"},{"cve":"CVE-2026-74752","month":"2026-08","title":"sctp: validate cookie AUTH state before use","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74752"},{"cve":"CVE-2026-74753","month":"2026-08","title":"perf: Reject exited events as group leaders","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74753"},{"cve":"CVE-2026-74754","month":"2026-08","title":"scsi: core: pair EH runtime PM get and put","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74754"},{"cve":"CVE-2026-75032","month":"2026-08","title":"Bluez: bluez: out-of-bounds read in avrcp parse_media_element and parse_media_folder","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-75032"},{"cve":"CVE-2026-75593","month":"2026-08","title":"BuildKit: Malicious client can bypass destination directory validation on local sources upload","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-75593"},{"cve":"CVE-2026-75900","month":"2026-08","title":"Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-75900"},{"cve":"CVE-2026-76098","month":"2026-08","title":"Mistune has Denial of Service \u2014 RecursionError via Excessive Emphasis Markers in Markdown","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76098"},{"cve":"CVE-2026-76844","month":"2026-08","title":"zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76844"},{"cve":"CVE-2026-76956","month":"2026-08","title":"In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-394"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76956"},{"cve":"CVE-2026-76957","month":"2026-08","title":"libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76957"},{"cve":"CVE-2026-77014","month":"2026-08","title":"Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U","cwe":["CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77014"},{"cve":"CVE-2026-77176","month":"2026-08","title":"Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77176"},{"cve":"CVE-2026-77219","month":"2026-08","title":"GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77219"},{"cve":"CVE-2026-78002","month":"2026-08","title":"Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-131"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78002"},{"cve":"CVE-2026-79655","month":"2026-08","title":"Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79655"},{"cve":"CVE-2026-79992","month":"2026-08","title":"Emacs: local shell command injection through the user field in emacs tramp","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79992"},{"cve":"CVE-2026-80521","month":"2026-08","title":"af_unix: Unlink scc_entry in unix_del_edge().","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80521"},{"cve":"CVE-2026-80526","month":"2026-08","title":"ASoC: tas2562: Validate values for volume writes","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80526"},{"cve":"CVE-2026-80527","month":"2026-08","title":"ceph: fix hanging __ceph_get_caps() with stale mds_wanted","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80527"},{"cve":"CVE-2026-80528","month":"2026-08","title":"ceph: avoid fs reclaim while using current->journal_info","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80528"},{"cve":"CVE-2026-80529","month":"2026-08","title":"xfs: don't swallow dquot recovery verification errors","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80529"},{"cve":"CVE-2026-80534","month":"2026-08","title":"xfs: fix ilock leak on error in xfs_dq_get_next_id","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80534"},{"cve":"CVE-2026-80536","month":"2026-08","title":"xfs: bounds-check buffer log item's dirty bitmap","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80536"},{"cve":"CVE-2026-80539","month":"2026-08","title":"drm/amdgpu: disallow multiple FENCE chunks in one submit","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80539"},{"cve":"CVE-2026-80540","month":"2026-08","title":"drm/amdgpu: Fix UVD decode image min size calculation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80540"},{"cve":"CVE-2026-80541","month":"2026-08","title":"drm/amdgpu: validate GEM_CREATE domain combinations","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80541"},{"cve":"CVE-2026-80547","month":"2026-08","title":"s390/vfio_ccw: Implement a crw lock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80547"},{"cve":"CVE-2026-80549","month":"2026-08","title":"s390/vfio_ccw: Move cp cleanup out of not operational","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80549"},{"cve":"CVE-2026-80550","month":"2026-08","title":"s390/vfio_ccw: Fix out of bounds check on CCW array","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80550"},{"cve":"CVE-2026-80551","month":"2026-08","title":"s390/vfio_ccw: Ensure first IDAW remains constant","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80551"},{"cve":"CVE-2026-80552","month":"2026-08","title":"s390/vfio_ccw: Ensure index for read/write regions are within range","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80552"},{"cve":"CVE-2026-80553","month":"2026-08","title":"s390/vfio_ccw: Cancel existing workqueues","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80553"},{"cve":"CVE-2026-80554","month":"2026-08","title":"s390/vfio_ccw: Limit the number of channel program segments","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80554"},{"cve":"CVE-2026-80556","month":"2026-08","title":"mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80556"},{"cve":"CVE-2026-80558","month":"2026-08","title":"libceph: Avoid using invalid osd indices from primary_temp","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80558"},{"cve":"CVE-2026-80559","month":"2026-08","title":"Input: sur40 - fix input device registration ordering","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80559"},{"cve":"CVE-2026-80560","month":"2026-08","title":"openrisc: signal: do not restore privileged SR bits on sigreturn","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80560"},{"cve":"CVE-2026-80561","month":"2026-08","title":"libceph: fix multiple unsafe decodes in decode_locker()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80561"},{"cve":"CVE-2026-80562","month":"2026-08","title":"gpio: ml-ioh: use raw_spinlock_t for the register lock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80562"},{"cve":"CVE-2026-80565","month":"2026-08","title":"crypto: qce - fix error path in devm_qce_register_algs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80565"},{"cve":"CVE-2026-80566","month":"2026-08","title":"Input: hynitron_cstxxx - validate touch count and finger IDs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.5,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80566"},{"cve":"CVE-2026-80567","month":"2026-08","title":"Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80567"},{"cve":"CVE-2026-80568","month":"2026-08","title":"Input: synaptics-rmi4 - block s_input when F54 queue is busy","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80568"},{"cve":"CVE-2026-80569","month":"2026-08","title":"Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80569"},{"cve":"CVE-2026-80570","month":"2026-08","title":"Input: synaptics-rmi4 - zero report size on F54 work error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80570"},{"cve":"CVE-2026-80572","month":"2026-08","title":"Input: byd - synchronize timer deletion before freeing private data","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80572"},{"cve":"CVE-2026-80573","month":"2026-08","title":"Input: iforce - validate input packet lengths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80573"},{"cve":"CVE-2026-80574","month":"2026-08","title":"Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80574"},{"cve":"CVE-2026-80576","month":"2026-08","title":"drm/amdgpu: reject oversized IBs with per-ring packet limits","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80576"},{"cve":"CVE-2026-80578","month":"2026-08","title":"fbdev: core: Fix pointer desynchronization in fb_io_read()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80578"},{"cve":"CVE-2026-80579","month":"2026-08","title":"fbdev: clear fb_info->mode before deleting a videomode","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80579"},{"cve":"CVE-2026-80580","month":"2026-08","title":"fbdev: bound mode sysfs output to the sysfs buffer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80580"},{"cve":"CVE-2026-80581","month":"2026-08","title":"ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80581"},{"cve":"CVE-2026-80583","month":"2026-08","title":"ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80583"},{"cve":"CVE-2026-80584","month":"2026-08","title":"s390/qeth: validate user buffer length in SNMP and ARP query ioctls","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80584"},{"cve":"CVE-2026-80585","month":"2026-08","title":"mptcp: fastopen: only mark MPTFO subflows with SYN data","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80585"},{"cve":"CVE-2026-80586","month":"2026-08","title":"mptcp: options: reset DSS fields in case of unexpected size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80586"},{"cve":"CVE-2026-80587","month":"2026-08","title":"mptcp: avoid combining some incoming suboptions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80587"},{"cve":"CVE-2026-80589","month":"2026-08","title":"block: stop the timeout timer when releasing a never added disk","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80589"},{"cve":"CVE-2026-80590","month":"2026-08","title":"inet: frags: strip GSO state from fragments before reassembly","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80590"},{"cve":"CVE-2026-80598","month":"2026-08","title":"ntfs3: fix out-of-bounds read in decompress_lznt","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80598"},{"cve":"CVE-2026-80607","month":"2026-08","title":"tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80607"},{"cve":"CVE-2026-80611","month":"2026-08","title":"ACPI: processor_idle: Mark LPI enter functions as __cpuidle","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80611"},{"cve":"CVE-2026-80616","month":"2026-08","title":"ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80616"},{"cve":"CVE-2026-80623","month":"2026-08","title":"coresight: ete: Always save state on power down","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80623"},{"cve":"CVE-2026-80628","month":"2026-08","title":"ALSA: seq: oss: Serialize readq reset state with q->lock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80628"},{"cve":"CVE-2026-80629","month":"2026-08","title":"octeontx2-af: npc: Fix size of entry2cntr_map","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80629"},{"cve":"CVE-2026-80631","month":"2026-08","title":"btrfs: lzo: reject compressed segment that overflows the compressed input","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80631"},{"cve":"CVE-2026-80634","month":"2026-08","title":"netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80634"},{"cve":"CVE-2026-80637","month":"2026-08","title":"netfilter: synproxy: fix unaligned memory access in timestamp adjustment","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80637"},{"cve":"CVE-2026-80643","month":"2026-08","title":"EDAC/igen6: Fix call trace due to missing release()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80643"},{"cve":"CVE-2026-80650","month":"2026-08","title":"media: atomisp: gc2235: fix UAF and memory leak","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80650"},{"cve":"CVE-2026-80653","month":"2026-08","title":"scsi: hisi_sas: Add slave_destroy interface for v3 hw","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80653"},{"cve":"CVE-2026-80654","month":"2026-08","title":"soc: xilinx: Shutdown and free rx mailbox channel","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80654"},{"cve":"CVE-2026-80668","month":"2026-08","title":"netfilter: nf_conntrack_expect: use conntrack GC to reap expectations","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80668"},{"cve":"CVE-2026-80670","month":"2026-08","title":"perf tools: Use perf_env__get_cpu_topology() in machine__resolve()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80670"},{"cve":"CVE-2026-80676","month":"2026-08","title":"Drivers: hv: vmbus: use generic driver_override infrastructure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80676"},{"cve":"CVE-2026-80678","month":"2026-08","title":"i2c: imx: Fix slave registration race and error handling","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80678"},{"cve":"CVE-2026-80679","month":"2026-08","title":"s390/dasd: Fix potential NULL pointer dereference","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80679"},{"cve":"CVE-2026-80680","month":"2026-08","title":"i2c: amd-mp2: Unregister callback on adapter add failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80680"},{"cve":"CVE-2026-80681","month":"2026-08","title":"vxlan: re-fetch eth header after route_shortcircuit()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80681"},{"cve":"CVE-2026-80684","month":"2026-08","title":"KVM: s390: pci: Fix NULL dereference on AIBV allocation failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80684"},{"cve":"CVE-2026-80686","month":"2026-08","title":"mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80686"},{"cve":"CVE-2026-80689","month":"2026-08","title":"tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80689"},{"cve":"CVE-2026-80691","month":"2026-08","title":"scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80691"},{"cve":"CVE-2026-80692","month":"2026-08","title":"Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80692"},{"cve":"CVE-2026-80694","month":"2026-08","title":"net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80694"},{"cve":"CVE-2026-80695","month":"2026-08","title":"hwmon: (sht3x) Fix unaligned accesses","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80695"},{"cve":"CVE-2026-80697","month":"2026-08","title":"erofs: ensure valid f_path for page cache sharing","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80697"},{"cve":"CVE-2026-80698","month":"2026-08","title":"dmaengine: idxd: fix double free of wq, engine, and group structs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80698"},{"cve":"CVE-2026-80702","month":"2026-08","title":"drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80702"},{"cve":"CVE-2026-80703","month":"2026-08","title":"drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80703"},{"cve":"CVE-2026-80704","month":"2026-08","title":"drm/amd/display: use proper context for logging","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80704"},{"cve":"CVE-2026-80706","month":"2026-08","title":"can: softing: fw_parse(): validate firmware record spans","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80706"},{"cve":"CVE-2026-80707","month":"2026-08","title":"can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80707"},{"cve":"CVE-2026-80708","month":"2026-08","title":"s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80708"},{"cve":"CVE-2026-80709","month":"2026-08","title":"s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80709"},{"cve":"CVE-2026-80714","month":"2026-08","title":"ipvs: do not propagate one-packet flag to synced conns","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80714"},{"cve":"CVE-2026-80715","month":"2026-08","title":"igc: remove napi_synchronize() in igc_down()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80715"},{"cve":"CVE-2026-80717","month":"2026-08","title":"sctp: validate Adaptation Indication parameter length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80717"},{"cve":"CVE-2026-80718","month":"2026-08","title":"mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80718"},{"cve":"CVE-2026-80721","month":"2026-08","title":"Bluetooth: ISO: ensure no dangling hcon references in iso_conn","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80721"},{"cve":"CVE-2026-80722","month":"2026-08","title":"wifi: mac80211: validate individual TWT params before driver setup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80722"},{"cve":"CVE-2026-81893","month":"2026-08","title":"Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81893"},{"cve":"CVE-2026-82251","month":"2026-08","title":"gitoxide before 0.52.1 Path Traversal via Submodule Name","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82251"},{"cve":"CVE-2026-82252","month":"2026-08","title":"gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82252"},{"cve":"CVE-2026-82253","month":"2026-08","title":"gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82253"},{"cve":"CVE-2026-82254","month":"2026-08","title":"gitoxide before 0.69.0 Denial of Service via gix-pack","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-248"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82254"},{"cve":"CVE-2026-82327","month":"2026-08","title":"Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cwe":["CWE-129"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82327"},{"cve":"CVE-2026-82455","month":"2026-08","title":"RubyGems before 4.0.13 Path Traversal via Symlink Resolution","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82455"},{"cve":"CVE-2026-82474","month":"2026-08","title":"Sudo through 1.9.17p2 Intercept Policy Bypass via execveat","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82474"},{"cve":"CVE-2026-82631","month":"2026-08","title":"valkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after free","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Low","cvss":2.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82631"},{"cve":"CVE-2026-19137","month":"2026-08","title":"CVE-2026-19137 Use after free in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19137"},{"cve":"CVE-2026-19138","month":"2026-08","title":"CVE-2026-19138 Heap buffer overflow in CrashReporting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19138"},{"cve":"CVE-2026-19139","month":"2026-08","title":"CVE-2026-19139 Race in CredentialProvider","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19139"},{"cve":"CVE-2026-19140","month":"2026-08","title":"CVE-2026-19140 Use after free in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19140"},{"cve":"CVE-2026-19142","month":"2026-08","title":"CVE-2026-19142 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19142"},{"cve":"CVE-2026-19144","month":"2026-08","title":"CVE-2026-19144 Use after free in HTML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19144"},{"cve":"CVE-2026-19145","month":"2026-08","title":"CVE-2026-19145 Use after free in Translate","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19145"},{"cve":"CVE-2026-19146","month":"2026-08","title":"CVE-2026-19146 Uninitialized Use in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19146"},{"cve":"CVE-2026-19147","month":"2026-08","title":"CVE-2026-19147 Use after free in Aura","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19147"},{"cve":"CVE-2026-19148","month":"2026-08","title":"CVE-2026-19148 Out of bounds write in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19148"},{"cve":"CVE-2026-19149","month":"2026-08","title":"CVE-2026-19149 Use after free in Aura","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19149"},{"cve":"CVE-2026-19150","month":"2026-08","title":"CVE-2026-19150 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19150"},{"cve":"CVE-2026-19151","month":"2026-08","title":"CVE-2026-19151 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19151"},{"cve":"CVE-2026-19152","month":"2026-08","title":"CVE-2026-19152 Inappropriate implementation in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19152"},{"cve":"CVE-2026-19153","month":"2026-08","title":"CVE-2026-19153 Insufficient validation of untrusted input in Workers","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19153"},{"cve":"CVE-2026-19155","month":"2026-08","title":"CVE-2026-19155 Use after free in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19155"},{"cve":"CVE-2026-19156","month":"2026-08","title":"CVE-2026-19156 Heap buffer overflow in Base","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19156"},{"cve":"CVE-2026-19157","month":"2026-08","title":"CVE-2026-19157 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19157"},{"cve":"CVE-2026-19158","month":"2026-08","title":"CVE-2026-19158 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19158"},{"cve":"CVE-2026-19159","month":"2026-08","title":"CVE-2026-19159 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19159"},{"cve":"CVE-2026-19160","month":"2026-08","title":"CVE-2026-19160 Uninitialized Use in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19160"},{"cve":"CVE-2026-19161","month":"2026-08","title":"CVE-2026-19161 Uninitialized Use in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19161"},{"cve":"CVE-2026-19162","month":"2026-08","title":"CVE-2026-19162 Out of bounds write in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19162"},{"cve":"CVE-2026-19163","month":"2026-08","title":"CVE-2026-19163 Use after free in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19163"},{"cve":"CVE-2026-19164","month":"2026-08","title":"CVE-2026-19164 Insufficient validation of untrusted input in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19164"},{"cve":"CVE-2026-19165","month":"2026-08","title":"CVE-2026-19165 Use after free in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19165"},{"cve":"CVE-2026-19166","month":"2026-08","title":"CVE-2026-19166 Use after free in Web Authentication","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19166"},{"cve":"CVE-2026-19167","month":"2026-08","title":"CVE-2026-19167 Integer overflow in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19167"},{"cve":"CVE-2026-19168","month":"2026-08","title":"CVE-2026-19168 Inappropriate implementation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19168"},{"cve":"CVE-2026-19169","month":"2026-08","title":"CVE-2026-19169 Insufficient validation of untrusted input in Contextual Tasks","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19169"},{"cve":"CVE-2026-19170","month":"2026-08","title":"CVE-2026-19170 Use after free in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19170"},{"cve":"CVE-2026-19171","month":"2026-08","title":"CVE-2026-19171 Use after free in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19171"},{"cve":"CVE-2026-19172","month":"2026-08","title":"CVE-2026-19172 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19172"},{"cve":"CVE-2026-19173","month":"2026-08","title":"CVE-2026-19173 Out of bounds write in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19173"},{"cve":"CVE-2026-19174","month":"2026-08","title":"CVE-2026-19174 Integer overflow in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19174"},{"cve":"CVE-2026-19175","month":"2026-08","title":"CVE-2026-19175 Use after free in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19175"},{"cve":"CVE-2026-19176","month":"2026-08","title":"CVE-2026-19176 Use after free in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19176"},{"cve":"CVE-2026-19177","month":"2026-08","title":"CVE-2026-19177 Insufficient validation of untrusted input in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19177"},{"cve":"CVE-2026-19556","month":"2026-08","title":"Chromium: CVE-2026-19556 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19556"},{"cve":"CVE-2026-19557","month":"2026-08","title":"Chromium: CVE-2026-19557 Use after free in TabStrip","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19557"},{"cve":"CVE-2026-19558","month":"2026-08","title":"Chromium: CVE-2026-19558 Use after free in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19558"},{"cve":"CVE-2026-19559","month":"2026-08","title":"Chromium: CVE-2026-19559 Use after free in HTML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19559"},{"cve":"CVE-2026-19560","month":"2026-08","title":"Chromium: CVE-2026-19560 Use after free in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19560"},{"cve":"CVE-2026-24301","month":"2026-08","title":"Microsoft Copilot Information Disclosure Vulnerability","family":"Other","component":"Microsoft Copilot","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24301"},{"cve":"CVE-2026-40375","month":"2026-08","title":"Microsoft Dynamics Business Central Information Disclosure Vulnerability","family":"Microsoft Dynamics","component":"Dynamics Business Central","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40375"},{"cve":"CVE-2026-42976","month":"2026-08","title":"Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows RPC API","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42976"},{"cve":"CVE-2026-47285","month":"2026-08","title":"Visual Studio Code Information Disclosure Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47285"},{"cve":"CVE-2026-47299","month":"2026-08","title":"Azure Monitor Agent Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Monitor Agent","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47299"},{"cve":"CVE-2026-49163","month":"2026-08","title":"Application Insights Profiler Elevation of Privilege Vulnerability","family":"Azure","component":"Application Insights Profiler","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49163"},{"cve":"CVE-2026-49179","month":"2026-08","title":"Windows Active Directory Domain Services Remote Code Execution Vulnerability","family":"Windows","component":"Windows Active Directory","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49179"},{"cve":"CVE-2026-50472","month":"2026-08","title":"Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows LUAFV","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50472"},{"cve":"CVE-2026-50481","month":"2026-08","title":"Azure Active Directory Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Active Directory","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-471"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50481"},{"cve":"CVE-2026-50515","month":"2026-08","title":"Azure Service Bus Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Azure Service Bus","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50515"},{"cve":"CVE-2026-50516","month":"2026-08","title":"Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft Azure Kubernetes Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50516"},{"cve":"CVE-2026-50523","month":"2026-08","title":"Microsoft PowerShell Remote Code Execution Vulnerability","family":"Developer Tools","component":"Microsoft PowerShell","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50523"},{"cve":"CVE-2026-54113","month":"2026-08","title":"Remote Procedure Call Denial of Service Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54113"},{"cve":"CVE-2026-54123","month":"2026-08","title":"Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability","family":"System Center","component":"Microsoft Defender for Endpoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54123"},{"cve":"CVE-2026-54981","month":"2026-08","title":"Visual Studio Code Python Extension Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code - Python extension","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-829","CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54981"},{"cve":"CVE-2026-54984","month":"2026-08","title":"Windows Imaging Component Remote Code Execution Vulnerability","family":"Windows","component":"Windows Imaging Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54984"},{"cve":"CVE-2026-55013","month":"2026-08","title":"Windows Remote Help Defense Spoofing Vulnerability","family":"Windows","component":"Windows Remote Help Defense","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-427"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55013"},{"cve":"CVE-2026-55015","month":"2026-08","title":"Microsoft Remote Help Denial of Service Vulnerability","family":"Windows","component":"Windows Remote Help","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-427"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55015"},{"cve":"CVE-2026-56161","month":"2026-08","title":"Azure Logic Apps Information Disclosure Vulnerability","family":"Azure","component":"Azure Logic Apps","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56161"},{"cve":"CVE-2026-56162","month":"2026-08","title":"Azure SQL Database Elevation of Privilege Vulnerability","family":"Azure","component":"Azure SQL Database","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56162"},{"cve":"CVE-2026-56174","month":"2026-08","title":"Windows Narrator Braille Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Narrator Braille","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56174"},{"cve":"CVE-2026-56179","month":"2026-08","title":"Windows Network Address Translation (NAT) Spoofing Vulnerability","family":"Windows","component":"Windows Network Address Translation (NAT)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Moderate","cvss":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56179"},{"cve":"CVE-2026-57104","month":"2026-08","title":"Azure Storage Explorer Elevation of Privilege Vulnerability","family":"Open Source Software","component":"Azure Storage Explorer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57104"},{"cve":"CVE-2026-57105","month":"2026-08","title":"Microsoft Office SharePoint Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57105"},{"cve":"CVE-2026-58612","month":"2026-08","title":"PowerShell Information Disclosure Vulnerability","family":"Developer Tools","component":"Microsoft PowerShell Core","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58612"},{"cve":"CVE-2026-58616","month":"2026-08","title":"Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability","family":"Browser","component":"Copilot Chat (Microsoft Edge)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58616"},{"cve":"CVE-2026-58639","month":"2026-08","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58639"},{"cve":"CVE-2026-58641","month":"2026-08","title":".NET Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58641"},{"cve":"CVE-2026-58650","month":"2026-08","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-639"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58650"},{"cve":"CVE-2026-58651","month":"2026-08","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58651"},{"cve":"CVE-2026-59113","month":"2026-08","title":"Visual Studio Code Remote Code Execution Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59113"},{"cve":"CVE-2026-59115","month":"2026-08","title":"Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft Entra Provisioning Service (SyncFabric)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-35"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59115"},{"cve":"CVE-2026-59118","month":"2026-08","title":"Copilot Cowork Elevation of Privilege Vulnerability","family":"Microsoft Dynamics","component":"Copilot Cowork","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59118"},{"cve":"CVE-2026-59119","month":"2026-08","title":"PowerShell Elevation of Privilege Vulnerability","family":"Developer Tools","component":"Microsoft PowerShell","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-276"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59119"},{"cve":"CVE-2026-59122","month":"2026-08","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59122"},{"cve":"CVE-2026-59124","month":"2026-08","title":"Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability","family":"Azure","component":"Microsoft High Performance Computing (HPC) Pack","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59124"},{"cve":"CVE-2026-59125","month":"2026-08","title":"Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability","family":"Windows","component":"Virtual Hard Disk (VHD) Miniport Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59125"},{"cve":"CVE-2026-59126","month":"2026-08","title":"Windows Event Logging Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Event Logging Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59126"},{"cve":"CVE-2026-59127","month":"2026-08","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59127"},{"cve":"CVE-2026-59128","month":"2026-08","title":"Windows Encrypting File System (EFS) Information Disclosure Vulnerability","family":"Windows","component":"Windows Encrypting File System (EFS)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59128"},{"cve":"CVE-2026-59130","month":"2026-08","title":"AMD Zen Information Disclosure Vulnerability","family":"Windows","component":"AMD Zen","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-1303"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59130"},{"cve":"CVE-2026-59131","month":"2026-08","title":"AMD Zen Information Disclosure Vulnerability","family":"Windows","component":"AMD Zen","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-1303"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59131"},{"cve":"CVE-2026-59132","month":"2026-08","title":"Windows TCP/IP Denial of Service Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59132"},{"cve":"CVE-2026-59133","month":"2026-08","title":"Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft High Performance Computing (HPC) Pack","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-250"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59133"},{"cve":"CVE-2026-59134","month":"2026-08","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59134"},{"cve":"CVE-2026-59135","month":"2026-08","title":"Microsoft Windows Search Component Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59135"},{"cve":"CVE-2026-59136","month":"2026-08","title":"Microsoft COM for Windows Information Disclosure Vulnerability","family":"Windows","component":"Microsoft COM for Windows","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59136"},{"cve":"CVE-2026-59137","month":"2026-08","title":"Windows Event Logging Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Event Logging Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59137"},{"cve":"CVE-2026-59138","month":"2026-08","title":"Microsoft Remote Registry Service Denial of Service Vulnerability","family":"Windows","component":"Microsoft Remote Registry Service","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59138"},{"cve":"CVE-2026-61345","month":"2026-08","title":"Microsoft Remote Registry Service Denial of Service Vulnerability","family":"Windows","component":"Microsoft Remote Registry Service","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61345"},{"cve":"CVE-2026-61346","month":"2026-08","title":"Windows Graphics Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Graphics Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61346"},{"cve":"CVE-2026-61347","month":"2026-08","title":"Windows Event Logging Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Event Logging Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61347"},{"cve":"CVE-2026-61348","month":"2026-08","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61348"},{"cve":"CVE-2026-61349","month":"2026-08","title":"Windows Work Folder Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Work Folder Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61349"},{"cve":"CVE-2026-61350","month":"2026-08","title":"Windows NTFS Information Disclosure Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61350"},{"cve":"CVE-2026-61352","month":"2026-08","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61352"},{"cve":"CVE-2026-61353","month":"2026-08","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61353"},{"cve":"CVE-2026-61355","month":"2026-08","title":"Windows Sensor Data Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Sensor Data Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61355"},{"cve":"CVE-2026-61356","month":"2026-08","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Desktop Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61356"},{"cve":"CVE-2026-61357","month":"2026-08","title":"Application Information Services Elevation of Privilege Vulnerability","family":"Windows","component":"Application Information Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61357"},{"cve":"CVE-2026-61358","month":"2026-08","title":"Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Accessibility Infrastructure (ATBroker.exe)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61358"},{"cve":"CVE-2026-61359","month":"2026-08","title":"Windows Storage Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61359"},{"cve":"CVE-2026-61360","month":"2026-08","title":"Windows GDI Information Disclosure Vulnerability","family":"Windows","component":"Windows GDI","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61360"},{"cve":"CVE-2026-61361","month":"2026-08","title":"Windows DHCP Client Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61361"},{"cve":"CVE-2026-61363","month":"2026-08","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61363"},{"cve":"CVE-2026-61364","month":"2026-08","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Desktop Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61364"},{"cve":"CVE-2026-61365","month":"2026-08","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Desktop Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61365"},{"cve":"CVE-2026-61366","month":"2026-08","title":"Windows Network Connection Broker Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Network Connection Broker","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61366"},{"cve":"CVE-2026-61367","month":"2026-08","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Desktop Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61367"},{"cve":"CVE-2026-61368","month":"2026-08","title":"Windows Hyper-V Information Disclosure Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61368"},{"cve":"CVE-2026-61918","month":"2026-08","title":"Windows Remote Desktop Client Information Disclosure Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61918"},{"cve":"CVE-2026-61920","month":"2026-08","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61920"},{"cve":"CVE-2026-61921","month":"2026-08","title":"Windows Remote Desktop Client Information Disclosure Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61921"},{"cve":"CVE-2026-61923","month":"2026-08","title":"Windows Display Enhancement Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Display Enhancement Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61923"},{"cve":"CVE-2026-61924","month":"2026-08","title":"Windows Remote Desktop Client Information Disclosure Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61924"},{"cve":"CVE-2026-61925","month":"2026-08","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61925"},{"cve":"CVE-2026-61926","month":"2026-08","title":"Windows USB Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61926"},{"cve":"CVE-2026-61927","month":"2026-08","title":"Windows Bind Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bind Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61927"},{"cve":"CVE-2026-61928","month":"2026-08","title":"Windows Hello Tampering Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-312"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61928"},{"cve":"CVE-2026-61929","month":"2026-08","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61929"},{"cve":"CVE-2026-61930","month":"2026-08","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61930"},{"cve":"CVE-2026-61932","month":"2026-08","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61932"},{"cve":"CVE-2026-61933","month":"2026-08","title":"Windows DWM Core Library Information Disclosure Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61933"},{"cve":"CVE-2026-61934","month":"2026-08","title":"Windows Bind Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bind Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61934"},{"cve":"CVE-2026-61936","month":"2026-08","title":"Windows Defender Firewall Service Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Defender Firewall Service","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61936"},{"cve":"CVE-2026-61937","month":"2026-08","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61937"},{"cve":"CVE-2026-61938","month":"2026-08","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61938"},{"cve":"CVE-2026-61939","month":"2026-08","title":"Winlogon Elevation of Privilege Vulnerability","family":"Windows","component":"Winlogon","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61939"},{"cve":"CVE-2026-62688","month":"2026-08","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","family":"Windows","component":"Windows MIDI Service Module","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62688"},{"cve":"CVE-2026-62690","month":"2026-08","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62690"},{"cve":"CVE-2026-62692","month":"2026-08","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Desktop Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62692"},{"cve":"CVE-2026-62693","month":"2026-08","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","family":"Windows","component":"Windows MIDI Service Module","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62693"},{"cve":"CVE-2026-62695","month":"2026-08","title":"Windows Storage Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62695"},{"cve":"CVE-2026-62696","month":"2026-08","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Program Compatibility Assistant Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62696"},{"cve":"CVE-2026-62698","month":"2026-08","title":"Microsoft Digest Authentication Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Digest Authentication","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62698"},{"cve":"CVE-2026-62699","month":"2026-08","title":"Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62699"},{"cve":"CVE-2026-62700","month":"2026-08","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62700"},{"cve":"CVE-2026-62701","month":"2026-08","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62701"},{"cve":"CVE-2026-62702","month":"2026-08","title":"Windows Graphics Kernel Denial of Service Vulnerability","family":"Windows","component":"Windows Graphics Kernel","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62702"},{"cve":"CVE-2026-62703","month":"2026-08","title":"Windows DWM Core Library Information Disclosure Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62703"},{"cve":"CVE-2026-62705","month":"2026-08","title":"Microsoft Brokering File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bind Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62705"},{"cve":"CVE-2026-62707","month":"2026-08","title":"Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Modern Device Management (MDM)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62707"},{"cve":"CVE-2026-62708","month":"2026-08","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62708"},{"cve":"CVE-2026-62709","month":"2026-08","title":"Windows GDI+ Information Disclosure Vulnerability","family":"Windows","component":"Windows GDI+","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62709"},{"cve":"CVE-2026-62710","month":"2026-08","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62710"},{"cve":"CVE-2026-62711","month":"2026-08","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62711"},{"cve":"CVE-2026-62712","month":"2026-08","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62712"},{"cve":"CVE-2026-62713","month":"2026-08","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62713"},{"cve":"CVE-2026-62714","month":"2026-08","title":"Windows DHCP Server Information Disclosure Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62714"},{"cve":"CVE-2026-62715","month":"2026-08","title":"Windows DHCP Server Information Disclosure Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62715"},{"cve":"CVE-2026-62716","month":"2026-08","title":"Windows DHCP Server Information Disclosure Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62716"},{"cve":"CVE-2026-62717","month":"2026-08","title":"Windows Message Queuing Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Message Queuing","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62717"},{"cve":"CVE-2026-62718","month":"2026-08","title":"Windows DHCP Server Information Disclosure Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62718"},{"cve":"CVE-2026-62719","month":"2026-08","title":"Windows Message Queuing Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Message Queuing","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62719"},{"cve":"CVE-2026-62720","month":"2026-08","title":"Windows DHCP Server Information Disclosure Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62720"},{"cve":"CVE-2026-62721","month":"2026-08","title":"Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability","family":"Windows","component":"User-Mode Power Service (UMPS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1220"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62721"},{"cve":"CVE-2026-62722","month":"2026-08","title":"Microsoft Brokering File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Brokering File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62722"},{"cve":"CVE-2026-62723","month":"2026-08","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62723"},{"cve":"CVE-2026-62724","month":"2026-08","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62724"},{"cve":"CVE-2026-62725","month":"2026-08","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62725"},{"cve":"CVE-2026-62726","month":"2026-08","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62726"},{"cve":"CVE-2026-62727","month":"2026-08","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62727"},{"cve":"CVE-2026-62728","month":"2026-08","title":"Windows Common Log File System Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Common Log File System Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62728"},{"cve":"CVE-2026-62729","month":"2026-08","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62729"},{"cve":"CVE-2026-62730","month":"2026-08","title":"Windows Wired AutoConfig Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Wired AutoConfig Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62730"},{"cve":"CVE-2026-62732","month":"2026-08","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62732"},{"cve":"CVE-2026-62733","month":"2026-08","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62733"},{"cve":"CVE-2026-62734","month":"2026-08","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62734"},{"cve":"CVE-2026-62735","month":"2026-08","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62735"},{"cve":"CVE-2026-62736","month":"2026-08","title":"Windows DHCP Client Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DHCP Client","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62736"},{"cve":"CVE-2026-62737","month":"2026-08","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62737"},{"cve":"CVE-2026-62738","month":"2026-08","title":"Windows Management Instrumentation Information Disclosure Vulnerability","family":"Windows","component":"Windows Management Instrumentation","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62738"},{"cve":"CVE-2026-62739","month":"2026-08","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62739"},{"cve":"CVE-2026-62740","month":"2026-08","title":"Windows Imaging Component Information Disclosure Vulnerability","family":"Windows","component":"Windows Imaging Component","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62740"},{"cve":"CVE-2026-62741","month":"2026-08","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62741"},{"cve":"CVE-2026-62742","month":"2026-08","title":"Windows DHCP Server Information Disclosure Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62742"},{"cve":"CVE-2026-62743","month":"2026-08","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62743"},{"cve":"CVE-2026-62745","month":"2026-08","title":"Windows DHCP Server Information Disclosure Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62745"},{"cve":"CVE-2026-62746","month":"2026-08","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62746"},{"cve":"CVE-2026-62747","month":"2026-08","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62747"},{"cve":"CVE-2026-62748","month":"2026-08","title":"Windows Telephony Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62748"},{"cve":"CVE-2026-62749","month":"2026-08","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62749"},{"cve":"CVE-2026-62750","month":"2026-08","title":"Windows HTTP Protocol Stack Tampering Vulnerability","family":"Windows","component":"Windows HTTP Protocol Stack","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-187"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62750"},{"cve":"CVE-2026-62751","month":"2026-08","title":"Windows Projected File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Projected File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62751"},{"cve":"CVE-2026-62752","month":"2026-08","title":"Windows Kerberos Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62752"},{"cve":"CVE-2026-62753","month":"2026-08","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62753"},{"cve":"CVE-2026-62754","month":"2026-08","title":"Windows Kerberos Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62754"},{"cve":"CVE-2026-62755","month":"2026-08","title":"Windows DHCP Client Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DHCP Client","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62755"},{"cve":"CVE-2026-62757","month":"2026-08","title":"Windows Schannel Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Schannel","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62757"},{"cve":"CVE-2026-62758","month":"2026-08","title":"Windows Remote Access Connection Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Access Connection Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62758"},{"cve":"CVE-2026-62761","month":"2026-08","title":"Windows DHCP Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62761"},{"cve":"CVE-2026-62766","month":"2026-08","title":"Windows Kerberos Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62766"},{"cve":"CVE-2026-62768","month":"2026-08","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62768"},{"cve":"CVE-2026-62769","month":"2026-08","title":"Windows DNS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62769"},{"cve":"CVE-2026-62770","month":"2026-08","title":"Windows Shell Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62770"},{"cve":"CVE-2026-62771","month":"2026-08","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62771"},{"cve":"CVE-2026-62772","month":"2026-08","title":"Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Container Isolation FS Filter Driver (unionfs.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62772"},{"cve":"CVE-2026-62773","month":"2026-08","title":"Windows Kerberos Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62773"},{"cve":"CVE-2026-62774","month":"2026-08","title":"Windows Graphics Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Graphics Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62774"},{"cve":"CVE-2026-62775","month":"2026-08","title":"Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability","family":"Windows","component":"Windows Container Isolation FS Filter Driver (unionfs.sys)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62775"},{"cve":"CVE-2026-62776","month":"2026-08","title":"Windows DHCP Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62776"},{"cve":"CVE-2026-62777","month":"2026-08","title":"Windows License Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Windows License Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62777"},{"cve":"CVE-2026-62778","month":"2026-08","title":"Windows DNS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62778"},{"cve":"CVE-2026-62779","month":"2026-08","title":"Windows Schannel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Schannel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62779"},{"cve":"CVE-2026-62780","month":"2026-08","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62780"},{"cve":"CVE-2026-62781","month":"2026-08","title":"RPC Runtime Library Remote Code Execution Vulnerability","family":"Windows","component":"RPC Runtime","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62781"},{"cve":"CVE-2026-62782","month":"2026-08","title":"Windows SMB Client Information Disclosure Vulnerability","family":"Windows","component":"Windows SMB Client","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62782"},{"cve":"CVE-2026-62783","month":"2026-08","title":"Windows Remote Access Connection Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Access Connection Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62783"},{"cve":"CVE-2026-62784","month":"2026-08","title":"Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Local Security Authority Server (lsasrv)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62784"},{"cve":"CVE-2026-62785","month":"2026-08","title":"Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability","family":"Windows","component":"Windows LDAP - Lightweight Directory Access Protocol","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62785"},{"cve":"CVE-2026-62786","month":"2026-08","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62786"},{"cve":"CVE-2026-62787","month":"2026-08","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62787"},{"cve":"CVE-2026-62788","month":"2026-08","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62788"},{"cve":"CVE-2026-62790","month":"2026-08","title":"Windows SMBv3 Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows SMB Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62790"},{"cve":"CVE-2026-62792","month":"2026-08","title":"Windows TCP/IP Remote Code Execution Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62792"},{"cve":"CVE-2026-62793","month":"2026-08","title":"Windows NTFS Information Disclosure Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62793"},{"cve":"CVE-2026-62795","month":"2026-08","title":"Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability","family":"Windows","component":"Windows LDAP - Lightweight Directory Access Protocol","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62795"},{"cve":"CVE-2026-62796","month":"2026-08","title":"Windows NTFS Information Disclosure Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62796"},{"cve":"CVE-2026-62797","month":"2026-08","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62797"},{"cve":"CVE-2026-62798","month":"2026-08","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62798"},{"cve":"CVE-2026-62799","month":"2026-08","title":"Windows SMB Client Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SMB Client","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62799"},{"cve":"CVE-2026-62800","month":"2026-08","title":"Windows SMBv3 Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows SMB Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62800"},{"cve":"CVE-2026-62803","month":"2026-08","title":"Windows DHCP Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62803"},{"cve":"CVE-2026-62807","month":"2026-08","title":"Windows DHCP Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62807"},{"cve":"CVE-2026-62811","month":"2026-08","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62811"},{"cve":"CVE-2026-62812","month":"2026-08","title":"Windows DHCP Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62812"},{"cve":"CVE-2026-62814","month":"2026-08","title":"Windows DHCP Server Information Disclosure Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62814"},{"cve":"CVE-2026-62815","month":"2026-08","title":"Microsoft QUIC Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft QUIC","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62815"},{"cve":"CVE-2026-62816","month":"2026-08","title":"Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability","family":"Windows","component":"Reliable Multicast Transport Driver (RMCAST)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62816"},{"cve":"CVE-2026-62817","month":"2026-08","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62817"},{"cve":"CVE-2026-62818","month":"2026-08","title":"Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability","family":"Windows","component":"Active Directory Certificate Services (AD CS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62818"},{"cve":"CVE-2026-62819","month":"2026-08","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62819"},{"cve":"CVE-2026-62820","month":"2026-08","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62820"},{"cve":"CVE-2026-62822","month":"2026-08","title":"Windows GDI+ Remote Code Execution Vulnerability","family":"Windows","component":"Windows GDI+","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62822"},{"cve":"CVE-2026-62823","month":"2026-08","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62823"},{"cve":"CVE-2026-62824","month":"2026-08","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62824"},{"cve":"CVE-2026-62827","month":"2026-08","title":"Microsoft SharePoint Server Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62827"},{"cve":"CVE-2026-62829","month":"2026-08","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62829"},{"cve":"CVE-2026-62830","month":"2026-08","title":"Azure SRE Agent Elevation of Privilege Vulnerability","family":"Azure","component":"Azure SRE Agent","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62830"},{"cve":"CVE-2026-62832","month":"2026-08","title":"Windows User Profile Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows User Profile Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":true,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62832"},{"cve":"CVE-2026-62834","month":"2026-08","title":"Azure Data Factory Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Data Factory","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62834"},{"cve":"CVE-2026-62836","month":"2026-08","title":"Azure SQL Managed Instance Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Azure SQL Managed Instance","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-923"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62836"},{"cve":"CVE-2026-62837","month":"2026-08","title":"Microsoft SharePoint Server Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62837"},{"cve":"CVE-2026-62839","month":"2026-08","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-522"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62839"},{"cve":"CVE-2026-62842","month":"2026-08","title":"Microsoft Office Graphics Component Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62842"},{"cve":"CVE-2026-62869","month":"2026-08","title":"Azure Entra ID Spoofing Vulnerability","family":"Azure","component":"Azure Entra ID","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-345"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62869"},{"cve":"CVE-2026-62871","month":"2026-08","title":".NET Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62871"},{"cve":"CVE-2026-62872","month":"2026-08","title":".NET Framework Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET Framework","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62872"},{"cve":"CVE-2026-62873","month":"2026-08","title":"Microsoft 365 Admin Center Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft 365 Admin Center","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62873"},{"cve":"CVE-2026-62876","month":"2026-08","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62876"},{"cve":"CVE-2026-62877","month":"2026-08","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62877"},{"cve":"CVE-2026-62878","month":"2026-08","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62878"},{"cve":"CVE-2026-62880","month":"2026-08","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62880"},{"cve":"CVE-2026-62881","month":"2026-08","title":"Windows DNS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62881"},{"cve":"CVE-2026-62882","month":"2026-08","title":"Microsoft Outlook Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-522"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62882"},{"cve":"CVE-2026-62883","month":"2026-08","title":"Windows DNS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62883"},{"cve":"CVE-2026-62885","month":"2026-08","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62885"},{"cve":"CVE-2026-62886","month":"2026-08","title":".NET Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62886"},{"cve":"CVE-2026-62887","month":"2026-08","title":"Windows NTFS Information Disclosure Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62887"},{"cve":"CVE-2026-62888","month":"2026-08","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62888"},{"cve":"CVE-2026-62889","month":"2026-08","title":"Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Secure Socket Tunneling Protocol (SSTP)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62889"},{"cve":"CVE-2026-62890","month":"2026-08","title":"Windows GDI+ Elevation of Privilege Vulnerability","family":"Windows","component":"Windows GDI+","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62890"},{"cve":"CVE-2026-62892","month":"2026-08","title":"Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability","family":"Windows","component":"Capability Access Management Service (camsvc)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62892"},{"cve":"CVE-2026-62893","month":"2026-08","title":"Windows Deployment Services TFTP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows Deployment Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62893"},{"cve":"CVE-2026-62894","month":"2026-08","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62894"},{"cve":"CVE-2026-62896","month":"2026-08","title":"Microsoft Teams Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Teams","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62896"},{"cve":"CVE-2026-62897","month":"2026-08","title":".NET Framework Remote Code Execution Vulnerability","family":"Developer Tools","component":".NET Framework","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62897"},{"cve":"CVE-2026-62898","month":"2026-08","title":"Microsoft QUIC Information Disclosure Vulnerability","family":"Developer Tools","component":"Microsoft QUIC","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62898"},{"cve":"CVE-2026-62899","month":"2026-08","title":".NET Security Feature Bypass Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62899"},{"cve":"CVE-2026-62900","month":"2026-08","title":".NET Information Disclosure Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-212"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62900"},{"cve":"CVE-2026-62901","month":"2026-08","title":".NET Denial of Service Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-606"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62901"},{"cve":"CVE-2026-62902","month":"2026-08","title":".NET Information Disclosure Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-829","CWE-693","CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62902"},{"cve":"CVE-2026-62904","month":"2026-08","title":"Microsoft Edge (Chromium-based) Information Disclosure Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62904"},{"cve":"CVE-2026-62908","month":"2026-08","title":"Windows Backup Engine Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Backup Engine","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62908"},{"cve":"CVE-2026-62909","month":"2026-08","title":".NET Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-252"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62909"},{"cve":"CVE-2026-62910","month":"2026-08","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-99"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62910"},{"cve":"CVE-2026-62911","month":"2026-08","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-294"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62911"},{"cve":"CVE-2026-62912","month":"2026-08","title":"Microsoft Exchange Server Denial of Service Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62912"},{"cve":"CVE-2026-62913","month":"2026-08","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62913"},{"cve":"CVE-2026-62914","month":"2026-08","title":"Microsoft Exchange Server Spoofing Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62914"},{"cve":"CVE-2026-62915","month":"2026-08","title":"Microsoft Exchange Server Security Feature Bypass Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62915"},{"cve":"CVE-2026-62917","month":"2026-08","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62917"},{"cve":"CVE-2026-62918","month":"2026-08","title":"Microsoft Teams Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Teams","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62918"},{"cve":"CVE-2026-63508","month":"2026-08","title":"Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability","family":"Device","component":"Microsoft Planetary Computer Pro","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63508"},{"cve":"CVE-2026-63509","month":"2026-08","title":"Microsoft Fabric Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Fabric","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63509"},{"cve":"CVE-2026-63512","month":"2026-08","title":"Microsoft SharePoint Server Tampering Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63512"},{"cve":"CVE-2026-63513","month":"2026-08","title":"Microsoft Office Graphics Component Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63513"},{"cve":"CVE-2026-63514","month":"2026-08","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63514"},{"cve":"CVE-2026-63515","month":"2026-08","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63515"},{"cve":"CVE-2026-63516","month":"2026-08","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63516"},{"cve":"CVE-2026-63517","month":"2026-08","title":"Microsoft Office Graphics Component Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63517"},{"cve":"CVE-2026-63518","month":"2026-08","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63518"},{"cve":"CVE-2026-63519","month":"2026-08","title":"Microsoft Office Graphics Component Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63519"},{"cve":"CVE-2026-63520","month":"2026-08","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63520"},{"cve":"CVE-2026-63521","month":"2026-08","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63521"},{"cve":"CVE-2026-63522","month":"2026-08","title":"Azure SQL Database Elevation of Privilege Vulnerability","family":"Azure","component":"Azure SQL Database","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-732"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63522"},{"cve":"CVE-2026-63524","month":"2026-08","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63524"},{"cve":"CVE-2026-63525","month":"2026-08","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63525"},{"cve":"CVE-2026-63526","month":"2026-08","title":"Microsoft Office Graphics Component Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63526"},{"cve":"CVE-2026-63527","month":"2026-08","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63527"},{"cve":"CVE-2026-63528","month":"2026-08","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63528"},{"cve":"CVE-2026-63529","month":"2026-08","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63529"},{"cve":"CVE-2026-63530","month":"2026-08","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63530"},{"cve":"CVE-2026-63531","month":"2026-08","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63531"},{"cve":"CVE-2026-63532","month":"2026-08","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63532"},{"cve":"CVE-2026-63533","month":"2026-08","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63533"},{"cve":"CVE-2026-64897","month":"2026-08","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64897"},{"cve":"CVE-2026-64898","month":"2026-08","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64898"},{"cve":"CVE-2026-64899","month":"2026-08","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64899"},{"cve":"CVE-2026-64900","month":"2026-08","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64900"},{"cve":"CVE-2026-64901","month":"2026-08","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64901"},{"cve":"CVE-2026-64902","month":"2026-08","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64902"},{"cve":"CVE-2026-64903","month":"2026-08","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64903"},{"cve":"CVE-2026-64904","month":"2026-08","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64904"},{"cve":"CVE-2026-64905","month":"2026-08","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64905"},{"cve":"CVE-2026-64906","month":"2026-08","title":"Microsoft Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64906"},{"cve":"CVE-2026-64907","month":"2026-08","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64907"},{"cve":"CVE-2026-64908","month":"2026-08","title":"Microsoft Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64908"},{"cve":"CVE-2026-64909","month":"2026-08","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-125","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64909"},{"cve":"CVE-2026-64910","month":"2026-08","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64910"},{"cve":"CVE-2026-64911","month":"2026-08","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64911"},{"cve":"CVE-2026-64912","month":"2026-08","title":"Microsoft Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64912"},{"cve":"CVE-2026-64914","month":"2026-08","title":"Microsoft Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64914"},{"cve":"CVE-2026-64915","month":"2026-08","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64915"},{"cve":"CVE-2026-64916","month":"2026-08","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64916"},{"cve":"CVE-2026-64917","month":"2026-08","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64917"},{"cve":"CVE-2026-64919","month":"2026-08","title":"Microsoft Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64919"},{"cve":"CVE-2026-64920","month":"2026-08","title":"Microsoft Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64920"},{"cve":"CVE-2026-64921","month":"2026-08","title":"Microsoft SharePoint Server Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64921"},{"cve":"CVE-2026-64922","month":"2026-08","title":"Microsoft SharePoint Server Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64922"},{"cve":"CVE-2026-65656","month":"2026-08","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65656"},{"cve":"CVE-2026-65657","month":"2026-08","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65657"},{"cve":"CVE-2026-65658","month":"2026-08","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65658"},{"cve":"CVE-2026-65660","month":"2026-08","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":true,"kev_added":"2026-09-25","class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65660"},{"cve":"CVE-2026-65661","month":"2026-08","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65661"},{"cve":"CVE-2026-65662","month":"2026-08","title":"Windows GDI Information Disclosure Vulnerability","family":"Windows","component":"Windows GDI","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65662"},{"cve":"CVE-2026-65663","month":"2026-08","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65663"},{"cve":"CVE-2026-65664","month":"2026-08","title":"Microsoft Office Graphics Component Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65664"},{"cve":"CVE-2026-65665","month":"2026-08","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65665"},{"cve":"CVE-2026-65667","month":"2026-08","title":"Microsoft Teams Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Teams","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65667"},{"cve":"CVE-2026-65668","month":"2026-08","title":"Microsoft Purview eDiscovery Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft Purview eDiscovery","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65668"},{"cve":"CVE-2026-65671","month":"2026-08","title":"Remote Access API Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Access API","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65671"},{"cve":"CVE-2026-65672","month":"2026-08","title":"Remote Access API Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Access API","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65672"},{"cve":"CVE-2026-65673","month":"2026-08","title":"Microsoft Entra Connect Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft Entra Connect Sync","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65673"},{"cve":"CVE-2026-65675","month":"2026-08","title":"CoPilot Chat Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code CoPilot Chat Extension","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65675"},{"cve":"CVE-2026-65678","month":"2026-08","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65678"},{"cve":"CVE-2026-65679","month":"2026-08","title":"Windows iSCSI Target Service Remote Code Execution Vulnerability","family":"Windows","component":"Windows iSCSI Target Service","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65679"},{"cve":"CVE-2026-65680","month":"2026-08","title":"Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft OneDrive","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65680"},{"cve":"CVE-2026-65681","month":"2026-08","title":"Windows iSCSI Target Service Denial of Service Vulnerability","family":"Windows","component":"Windows iSCSI Target Service","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65681"},{"cve":"CVE-2026-65767","month":"2026-08","title":"Microsoft Teams for Android Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Teams for Android","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65767"},{"cve":"CVE-2026-65768","month":"2026-08","title":"Microsoft Teams Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Teams for Android","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65768"},{"cve":"CVE-2026-65769","month":"2026-08","title":"Microsoft Teams iOS Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Teams Mobile","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65769"},{"cve":"CVE-2026-65770","month":"2026-08","title":"Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability","family":"Azure","component":"Azure Managed Instance for Apache Cassandra","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-88"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65770"},{"cve":"CVE-2026-65773","month":"2026-08","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65773"},{"cve":"CVE-2026-65774","month":"2026-08","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65774"},{"cve":"CVE-2026-65775","month":"2026-08","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65775"},{"cve":"CVE-2026-65776","month":"2026-08","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65776"},{"cve":"CVE-2026-65777","month":"2026-08","title":"Active Directory Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Active Directory","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-326"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65777"},{"cve":"CVE-2026-65778","month":"2026-08","title":"Windows Autopilot Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Autopilot","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65778"},{"cve":"CVE-2026-65779","month":"2026-08","title":"Windows Autopilot Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Autopilot","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65779"},{"cve":"CVE-2026-65780","month":"2026-08","title":"Windows Autopilot Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Autopilot","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65780"},{"cve":"CVE-2026-65781","month":"2026-08","title":"Windows Autopilot Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Autopilot","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65781"},{"cve":"CVE-2026-65782","month":"2026-08","title":"Windows Autopilot Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Autopilot","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65782"},{"cve":"CVE-2026-65783","month":"2026-08","title":"Windows Autopilot Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Autopilot","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65783"},{"cve":"CVE-2026-65784","month":"2026-08","title":"Windows NTFS Information Disclosure Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65784"},{"cve":"CVE-2026-65785","month":"2026-08","title":"Windows DHCP Client Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Client","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65785"},{"cve":"CVE-2026-65786","month":"2026-08","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65786"},{"cve":"CVE-2026-65787","month":"2026-08","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65787"},{"cve":"CVE-2026-65788","month":"2026-08","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65788"},{"cve":"CVE-2026-65789","month":"2026-08","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65789"},{"cve":"CVE-2026-65790","month":"2026-08","title":"Windows Message Queuing Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Message Queuing","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65790"},{"cve":"CVE-2026-65791","month":"2026-08","title":"Windows iSCSI Target Service Remote Code Execution Vulnerability","family":"Windows","component":"Windows iSCSI Target Service","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65791"},{"cve":"CVE-2026-65794","month":"2026-08","title":"Windows SMB Client Information Disclosure Vulnerability","family":"Windows","component":"Windows SMB Client","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65794"},{"cve":"CVE-2026-65795","month":"2026-08","title":"Windows DNS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65795"},{"cve":"CVE-2026-65796","month":"2026-08","title":"Windows iSCSI Target Service Remote Code Execution Vulnerability","family":"Windows","component":"Windows iSCSI Target Service","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65796"},{"cve":"CVE-2026-65797","month":"2026-08","title":"Windows DNS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65797"},{"cve":"CVE-2026-65798","month":"2026-08","title":"Windows DNS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65798"},{"cve":"CVE-2026-65799","month":"2026-08","title":"Windows DNS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65799"},{"cve":"CVE-2026-65801","month":"2026-08","title":"Microsoft Exchange Online Elevation of Privilege Vulnerability","family":"Server Software","component":"Microsoft Exchange Online","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65801"},{"cve":"CVE-2026-65806","month":"2026-08","title":"Azure CycleCloud Information Disclosure Vulnerability","family":"Azure","component":"Azure CycleCloud","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65806"},{"cve":"CVE-2026-65807","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65807"},{"cve":"CVE-2026-65810","month":"2026-08","title":".NET Framework Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET Framework","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65810"},{"cve":"CVE-2026-65811","month":"2026-08","title":"Power BI Remote Code Execution Vulnerability","family":"SQL Server","component":"Power BI","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65811"},{"cve":"CVE-2026-65813","month":"2026-08","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65813"},{"cve":"CVE-2026-65814","month":"2026-08","title":"Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage Port Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65814"},{"cve":"CVE-2026-65815","month":"2026-08","title":"Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability","family":"Microsoft Dynamics","component":"Microsoft Dynamics 365 (on-premises)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65815"},{"cve":"CVE-2026-65816","month":"2026-08","title":"Azure Arc Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Arc","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-706"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65816"},{"cve":"CVE-2026-66301","month":"2026-08","title":"Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability","family":"Microsoft Dynamics","component":"Microsoft Dynamics 365 (on-premises)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66301"},{"cve":"CVE-2026-66309","month":"2026-08","title":"Azure SQL Database Elevation of Privilege Vulnerability","family":"Azure","component":"Azure SQL Database","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66309"},{"cve":"CVE-2026-66323","month":"2026-08","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-141"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66323"},{"cve":"CVE-2026-66324","month":"2026-08","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66324"},{"cve":"CVE-2026-66798","month":"2026-08","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66798"},{"cve":"CVE-2026-66799","month":"2026-08","title":"Windows Key Guard Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Key Guard","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66799"},{"cve":"CVE-2026-66800","month":"2026-08","title":"Azure Data Factory Information Disclosure Vulnerability","family":"Azure","component":"Azure Data Factory","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66800"},{"cve":"CVE-2026-66802","month":"2026-08","title":"Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Device Health Attestation (DHA)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66802"},{"cve":"CVE-2026-66804","month":"2026-08","title":"Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cross Device Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66804"},{"cve":"CVE-2026-66805","month":"2026-08","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66805"},{"cve":"CVE-2026-66806","month":"2026-08","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-193","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66806"},{"cve":"CVE-2026-66807","month":"2026-08","title":"Microsoft Office Graphics Component Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66807"},{"cve":"CVE-2026-66808","month":"2026-08","title":"Microsoft SharePoint Server Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66808"},{"cve":"CVE-2026-66809","month":"2026-08","title":"Microsoft Office Graphics Component Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66809"},{"cve":"CVE-2026-66810","month":"2026-08","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66810"},{"cve":"CVE-2026-6726","month":"2026-08","title":"MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse","family":"Windows","component":"Windows TPM","cna":"MITRE","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-908","CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6726"},{"cve":"CVE-2026-6727","month":"2026-08","title":"MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability","family":"Windows","component":"Windows TPM","cna":"MITRE","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-208"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6727"},{"cve":"CVE-2026-68782","month":"2026-08","title":"Azure SQL Database Elevation of Privilege Vulnerability","family":"Azure","component":"Azure SQL Database","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68782"},{"cve":"CVE-2026-68789","month":"2026-08","title":"Azure SQL Database Elevation of Privilege Vulnerability","family":"Azure","component":"Azure SQL Database","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68789"},{"cve":"CVE-2026-68792","month":"2026-08","title":"Microsoft Office Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68792"},{"cve":"CVE-2026-68793","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68793"},{"cve":"CVE-2026-68794","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68794"},{"cve":"CVE-2026-68795","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68795"},{"cve":"CVE-2026-68796","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68796"},{"cve":"CVE-2026-68797","month":"2026-08","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68797"},{"cve":"CVE-2026-68798","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68798"},{"cve":"CVE-2026-68799","month":"2026-08","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68799"},{"cve":"CVE-2026-68800","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68800"},{"cve":"CVE-2026-68801","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68801"},{"cve":"CVE-2026-68802","month":"2026-08","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68802"},{"cve":"CVE-2026-68803","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68803"},{"cve":"CVE-2026-68804","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68804"},{"cve":"CVE-2026-68805","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68805"},{"cve":"CVE-2026-68806","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68806"},{"cve":"CVE-2026-68807","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68807"},{"cve":"CVE-2026-68808","month":"2026-08","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68808"},{"cve":"CVE-2026-68809","month":"2026-08","title":"Powerpoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-459"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68809"},{"cve":"CVE-2026-68810","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68810"},{"cve":"CVE-2026-68811","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68811"},{"cve":"CVE-2026-68812","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68812"},{"cve":"CVE-2026-68813","month":"2026-08","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68813"},{"cve":"CVE-2026-68814","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68814"},{"cve":"CVE-2026-68815","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68815"},{"cve":"CVE-2026-68816","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68816"},{"cve":"CVE-2026-68817","month":"2026-08","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68817"},{"cve":"CVE-2026-68819","month":"2026-08","title":"Windows Network File System Denial of Service Vulnerability","family":"Windows","component":"Windows Network File System","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68819"},{"cve":"CVE-2026-68820","month":"2026-08","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":true,"disclosed":false,"kev":true,"kev_added":"2026-08-11","class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68820"},{"cve":"CVE-2026-68821","month":"2026-08","title":"Windows Package Manager Elevation of Privilege Vulnerability","family":"Apps","component":"Windows Package Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-269"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68821"},{"cve":"CVE-2026-68823","month":"2026-08","title":"Azure Confidential Ledger Remote Code Execution Vulnerability","family":"Azure","component":"Azure Confidential Ledger","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-749"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68823"},{"cve":"CVE-2026-69278","month":"2026-08","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-863","CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69278"},{"cve":"CVE-2026-69306","month":"2026-08","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-636"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69306"},{"cve":"CVE-2026-69320","month":"2026-08","title":"Visual Studio Code Remote Code Execution Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69320"},{"cve":"CVE-2026-69400","month":"2026-08","title":"Azure Logic Apps Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Logic Apps","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69400"},{"cve":"CVE-2026-69414","month":"2026-08","title":"Microsoft Defender Elevation of Privilege Vulnerability","family":"System Center","component":"Microsoft Defender","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":true,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69414"},{"cve":"CVE-2026-69419","month":"2026-08","title":"Azure Data Manager for Energy Remote Code Execution Vulnerability","family":"Azure","component":"Azure Data Manager for Energy","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69419"},{"cve":"CVE-2026-69502","month":"2026-08","title":"Azure SQL Database Elevation of Privilege Vulnerability","family":"Azure","component":"Azure SQL Database","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69502"},{"cve":"CVE-2026-69519","month":"2026-08","title":"Azure Stack HCI Information Disclosure Vulnerability","family":"Azure","component":"Azure Stack HCI","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C","cwe":["CWE-204"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69519"},{"cve":"CVE-2026-69543","month":"2026-08","title":"Azure Virtual Machines Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Virtual Machines","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69543"},{"cve":"CVE-2026-69550","month":"2026-08","title":"Windows App for Mac Information Disclosure Vulnerability","family":"Windows","component":"Windows App for Mac","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69550"},{"cve":"CVE-2026-69555","month":"2026-08","title":"Azure Arc Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Arc","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69555"},{"cve":"CVE-2026-69558","month":"2026-08","title":"Microsoft Partner Center Information Disclosure Vulnerability","family":"Azure","component":"Microsoft Partner Center","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-639"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69558"},{"cve":"CVE-2026-69836","month":"2026-08","title":"Microsoft Entra ID Remote Code Execution Vulnerability","family":"Azure","component":"Microsoft Entra ID","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69836"},{"cve":"CVE-2026-69851","month":"2026-08","title":"Microsoft Entra ID Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Active Directory","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69851"},{"cve":"CVE-2026-69855","month":"2026-08","title":"Microsoft Copilot in Azure Information Disclosure Vulnerability","family":"Azure","component":"Microsoft Copilot in Azure","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69855"},{"cve":"CVE-2026-70105","month":"2026-08","title":"Microsoft Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70105"},{"cve":"CVE-2026-70130","month":"2026-08","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70130"},{"cve":"CVE-2026-70304","month":"2026-08","title":"Windows DNS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70304"},{"cve":"CVE-2026-70306","month":"2026-08","title":"Microsoft Office SharePoint Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70306"},{"cve":"CVE-2026-70307","month":"2026-08","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70307"},{"cve":"CVE-2026-70309","month":"2026-08","title":"Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70309"},{"cve":"CVE-2026-70310","month":"2026-08","title":"Microsoft Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70310"},{"cve":"CVE-2026-70311","month":"2026-08","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70311"},{"cve":"CVE-2026-70312","month":"2026-08","title":"Powerpoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70312"},{"cve":"CVE-2026-70313","month":"2026-08","title":"Microsoft PowerPoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70313"},{"cve":"CVE-2026-70314","month":"2026-08","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70314"},{"cve":"CVE-2026-70315","month":"2026-08","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70315"},{"cve":"CVE-2026-70316","month":"2026-08","title":"Powerpoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70316"},{"cve":"CVE-2026-70317","month":"2026-08","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70317"},{"cve":"CVE-2026-70318","month":"2026-08","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70318"},{"cve":"CVE-2026-70319","month":"2026-08","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70319"},{"cve":"CVE-2026-70320","month":"2026-08","title":"Powerpoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70320"},{"cve":"CVE-2026-70321","month":"2026-08","title":"Microsoft SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70321"},{"cve":"CVE-2026-70322","month":"2026-08","title":"Powerpoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70322"},{"cve":"CVE-2026-70323","month":"2026-08","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70323"},{"cve":"CVE-2026-70324","month":"2026-08","title":"Microsoft SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70324"},{"cve":"CVE-2026-70325","month":"2026-08","title":"Powerpoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70325"},{"cve":"CVE-2026-70326","month":"2026-08","title":"Microsoft SharePoint Server Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70326"},{"cve":"CVE-2026-70327","month":"2026-08","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70327"},{"cve":"CVE-2026-70328","month":"2026-08","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70328"},{"cve":"CVE-2026-70329","month":"2026-08","title":"Microsoft Outlook Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70329"},{"cve":"CVE-2026-70330","month":"2026-08","title":"Windows DNS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70330"},{"cve":"CVE-2026-70331","month":"2026-08","title":"Microsoft Edge for iOS Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge for iOS","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-1427"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70331"},{"cve":"CVE-2026-70332","month":"2026-08","title":"Microsoft Office SharePoint Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70332"},{"cve":"CVE-2026-70335","month":"2026-08","title":"GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability","family":"Developer Tools","component":"GitHub Copilot and Visual Studio Code","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70335"},{"cve":"CVE-2026-70336","month":"2026-08","title":"Visual Studio Code Remote Code Execution Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70336"},{"cve":"CVE-2026-70337","month":"2026-08","title":"Microsoft PowerShell Remote Code Execution Vulnerability","family":"Developer Tools","component":"Microsoft PowerShell Core","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70337"},{"cve":"CVE-2026-70338","month":"2026-08","title":"Microsoft PowerShell Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Microsoft PowerShell","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70338"},{"cve":"CVE-2026-70339","month":"2026-08","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70339"},{"cve":"CVE-2026-70340","month":"2026-08","title":"Azure CycleCloud Elevation of Privilege Vulnerability","family":"Azure","component":"Azure CycleCloud","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70340"},{"cve":"CVE-2026-70341","month":"2026-08","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70341"},{"cve":"CVE-2026-70344","month":"2026-08","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70344"},{"cve":"CVE-2026-70345","month":"2026-08","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70345"},{"cve":"CVE-2026-70346","month":"2026-08","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70346"},{"cve":"CVE-2026-70347","month":"2026-08","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70347"},{"cve":"CVE-2026-70348","month":"2026-08","title":"Windows Management Services Denial of Service Vulnerability","family":"Windows","component":"Windows Management Services","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70348"},{"cve":"CVE-2026-70354","month":"2026-08","title":".NET Core Remote Code Execution Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70354"},{"cve":"CVE-2026-70355","month":"2026-08","title":"Microsoft SharePoint Server Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70355"},{"cve":"CVE-2026-71331","month":"2026-08","title":"Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Device Health Attestation (DHA)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71331"},{"cve":"CVE-2026-72970","month":"2026-08","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72970"},{"cve":"CVE-2026-72971","month":"2026-08","title":"Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability","family":"Windows","component":"Windows Container Isolation FS Filter Driver (unionfs.sys)","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":true,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72971"},{"cve":"CVE-2026-72984","month":"2026-08","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72984"},{"cve":"CVE-2026-76033","month":"2026-08","title":"Chromium: CVE-2026-76033 Inappropriate implementation in CORS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76033"},{"cve":"CVE-2026-76034","month":"2026-08","title":"Chromium: CVE-2026-76034 Buffer overflow in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76034"},{"cve":"CVE-2026-76035","month":"2026-08","title":"Chromium: CVE-2026-76035 Inappropriate implementation in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76035"},{"cve":"CVE-2026-76037","month":"2026-08","title":"Chromium: CVE-2026-76037 Link following in CredentialProvider","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76037"},{"cve":"CVE-2026-76038","month":"2026-08","title":"Chromium: CVE-2026-76038 Type confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76038"},{"cve":"CVE-2026-76040","month":"2026-08","title":"Chromium: CVE-2026-76040 Use after free in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76040"},{"cve":"CVE-2026-76041","month":"2026-08","title":"Chromium: CVE-2026-76041 Information leak in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76041"},{"cve":"CVE-2026-76042","month":"2026-08","title":"Chromium: CVE-2026-76042 Use of uninitialized resource in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76042"},{"cve":"CVE-2026-76043","month":"2026-08","title":"Chromium: CVE-2026-76043 Incorrect calculation in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76043"},{"cve":"CVE-2026-76044","month":"2026-08","title":"Chromium: CVE-2026-76044 Race condition in USB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76044"},{"cve":"CVE-2026-76045","month":"2026-08","title":"Chromium: CVE-2026-76045 Use after free in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76045"},{"cve":"CVE-2026-76047","month":"2026-08","title":"Chromium: CVE-2026-76047 Type confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76047"},{"cve":"CVE-2026-78891","month":"2026-08","title":"Chromium: CVE-2026-78891 Buffer overflow in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78891"},{"cve":"CVE-2026-78892","month":"2026-08","title":"Chromium: CVE-2026-78892 Incorrect authorization in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78892"},{"cve":"CVE-2026-78893","month":"2026-08","title":"Chromium: CVE-2026-78893 Information leak in QUIC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78893"},{"cve":"CVE-2026-78894","month":"2026-08","title":"Chromium: CVE-2026-78894 Race condition in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78894"},{"cve":"CVE-2026-78895","month":"2026-08","title":"Chromium: CVE-2026-78895 Information leak in Paint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78895"},{"cve":"CVE-2026-78896","month":"2026-08","title":"Chromium: CVE-2026-78896 Information leak in StorageAccessAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78896"},{"cve":"CVE-2026-78897","month":"2026-08","title":"Chromium: CVE-2026-78897 Missing authorization in BrowserTag","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78897"},{"cve":"CVE-2026-78898","month":"2026-08","title":"Chromium: CVE-2026-78898 Incorrect authorization in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78898"},{"cve":"CVE-2026-78899","month":"2026-08","title":"Chromium: CVE-2026-78899 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78899"},{"cve":"CVE-2026-78900","month":"2026-08","title":"Chromium: CVE-2026-78900 Improper input validation in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78900"},{"cve":"CVE-2026-78901","month":"2026-08","title":"Chromium: CVE-2026-78901 Race condition in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78901"},{"cve":"CVE-2026-78903","month":"2026-08","title":"Chromium: CVE-2026-78903 Incomplete cleanup in SiteIsolation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78903"},{"cve":"CVE-2026-78904","month":"2026-08","title":"Chromium: CVE-2026-78904 Type confusion in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78904"},{"cve":"CVE-2026-78905","month":"2026-08","title":"Chromium: CVE-2026-78905 Type confusion in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78905"},{"cve":"CVE-2026-78906","month":"2026-08","title":"Chromium: CVE-2026-78906 Race condition in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78906"},{"cve":"CVE-2026-78907","month":"2026-08","title":"Chromium: CVE-2026-78907 Incorrect authorization in WebProtect","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78907"},{"cve":"CVE-2026-78908","month":"2026-08","title":"Chromium: CVE-2026-78908 Information leak in Canvas","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78908"},{"cve":"CVE-2026-78909","month":"2026-08","title":"Chromium: CVE-2026-78909 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78909"},{"cve":"CVE-2026-78910","month":"2026-08","title":"Chromium: CVE-2026-78910 Buffer overflow in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78910"},{"cve":"CVE-2026-78911","month":"2026-08","title":"Chromium: CVE-2026-78911 Incorrect authorization in USB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78911"},{"cve":"CVE-2026-78912","month":"2026-08","title":"Chromium: CVE-2026-78912 UI misrepresentation in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78912"},{"cve":"CVE-2026-78913","month":"2026-08","title":"Chromium: CVE-2026-78913 Use after free in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78913"},{"cve":"CVE-2026-78914","month":"2026-08","title":"Chromium: CVE-2026-78914 Uninitialized resource in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78914"},{"cve":"CVE-2026-78915","month":"2026-08","title":"Chromium: CVE-2026-78915 Race condition in Enterprise","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78915"},{"cve":"CVE-2026-78934","month":"2026-08","title":"Chromium: CVE-2026-78934 Race condition in ReadAloud","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78934"},{"cve":"CVE-2026-78938","month":"2026-08","title":"Chromium: CVE-2026-78938 Type confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78938"},{"cve":"CVE-2026-78939","month":"2026-08","title":"Chromium: CVE-2026-78939 Use after free in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78939"},{"cve":"CVE-2026-78940","month":"2026-08","title":"Chromium: CVE-2026-78940 Improper initialization in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78940"},{"cve":"CVE-2026-78941","month":"2026-08","title":"Chromium: CVE-2026-78941 Information leak in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78941"},{"cve":"CVE-2026-78942","month":"2026-08","title":"Chromium: CVE-2026-78942 Incorrect reference resolution in Loader","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78942"},{"cve":"CVE-2026-78943","month":"2026-08","title":"Chromium: CVE-2026-78943 Improper input validation in Editing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78943"},{"cve":"CVE-2026-78944","month":"2026-08","title":"Chromium: CVE-2026-78944 Use after free in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78944"},{"cve":"CVE-2026-78945","month":"2026-08","title":"Chromium: CVE-2026-78945 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78945"},{"cve":"CVE-2026-78946","month":"2026-08","title":"Chromium: CVE-2026-78946 Incorrect authorization in Select","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78946"},{"cve":"CVE-2026-78947","month":"2026-08","title":"Chromium: CVE-2026-78947 Incomplete cleanup in Chromium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78947"},{"cve":"CVE-2026-78948","month":"2026-08","title":"Chromium: CVE-2026-78948 Buffer overflow in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78948"},{"cve":"CVE-2026-78950","month":"2026-08","title":"Chromium: CVE-2026-78950 Integer overflow in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78950"},{"cve":"CVE-2026-78951","month":"2026-08","title":"Chromium: CVE-2026-78951 Use after free in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78951"},{"cve":"CVE-2026-78952","month":"2026-08","title":"Chromium: CVE-2026-78952 Out of bounds write in Crashpad","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78952"},{"cve":"CVE-2026-78953","month":"2026-08","title":"Chromium: CVE-2026-78953 Missing authorization in SiteIsolation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78953"},{"cve":"CVE-2026-78954","month":"2026-08","title":"Chromium: CVE-2026-78954 Incorrect authorization in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78954"},{"cve":"CVE-2026-78955","month":"2026-08","title":"Chromium: CVE-2026-78955 Observable discrepancy in PerformanceAPIs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78955"},{"cve":"CVE-2026-78956","month":"2026-08","title":"Chromium: CVE-2026-78956 Type confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78956"},{"cve":"CVE-2026-78958","month":"2026-08","title":"Chromium: CVE-2026-78958 Uninitialized resource in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78958"},{"cve":"CVE-2026-78959","month":"2026-08","title":"Chromium: CVE-2026-78959 Improper handling of case sensitivity in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78959"},{"cve":"CVE-2026-78960","month":"2026-08","title":"Chromium: CVE-2026-78960 Information leak in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78960"},{"cve":"CVE-2026-78961","month":"2026-08","title":"Chromium: CVE-2026-78961 Incorrect authorization in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78961"},{"cve":"CVE-2026-78962","month":"2026-08","title":"Chromium: CVE-2026-78962 Uninitialized resource in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78962"},{"cve":"CVE-2026-78963","month":"2026-08","title":"Chromium: CVE-2026-78963 Improper input validation in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78963"},{"cve":"CVE-2026-78964","month":"2026-08","title":"Chromium: CVE-2026-78964 Use after free in Sync","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78964"},{"cve":"CVE-2026-78965","month":"2026-08","title":"Chromium: CVE-2026-78965 Uninitialized resource in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78965"},{"cve":"CVE-2026-78966","month":"2026-08","title":"Chromium: CVE-2026-78966 Externally controlled reference in QUIC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78966"},{"cve":"CVE-2026-78967","month":"2026-08","title":"Chromium: CVE-2026-78967 Missing authorization in BFCache","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78967"},{"cve":"CVE-2026-78968","month":"2026-08","title":"Chromium: CVE-2026-78968 Missing authorization in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78968"},{"cve":"CVE-2026-78969","month":"2026-08","title":"Chromium: CVE-2026-78969 Uninitialized resource in Video","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78969"},{"cve":"CVE-2026-78974","month":"2026-08","title":"Chromium: CVE-2026-78974 UI misrepresentation in Linux Toolkit Theming","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78974"},{"cve":"CVE-2026-78975","month":"2026-08","title":"Chromium: CVE-2026-78975 Incorrect authorization in DOM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78975"},{"cve":"CVE-2026-78976","month":"2026-08","title":"Chromium: CVE-2026-78976 Improper input validation in StorageAccessAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78976"},{"cve":"CVE-2026-78977","month":"2026-08","title":"Chromium: CVE-2026-78977 Uninitialized resource in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78977"},{"cve":"CVE-2026-78978","month":"2026-08","title":"Chromium: CVE-2026-78978 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78978"},{"cve":"CVE-2026-78979","month":"2026-08","title":"Chromium: CVE-2026-78979 Race condition in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78979"},{"cve":"CVE-2026-78980","month":"2026-08","title":"Chromium: CVE-2026-78980 Improper input validation in ReaderMode","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78980"},{"cve":"CVE-2026-78983","month":"2026-08","title":"Chromium: CVE-2026-78983 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78983"},{"cve":"CVE-2026-78984","month":"2026-08","title":"Chromium: CVE-2026-78984 Uninitialized resource in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78984"},{"cve":"CVE-2026-78985","month":"2026-08","title":"Chromium: CVE-2026-78985 Incorrect reference resolution in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78985"},{"cve":"CVE-2026-78986","month":"2026-08","title":"Chromium: CVE-2026-78986 Uninitialized resource in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78986"},{"cve":"CVE-2026-78987","month":"2026-08","title":"Chromium: CVE-2026-78987 Information leak in Canvas","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78987"},{"cve":"CVE-2026-78989","month":"2026-08","title":"Chromium: CVE-2026-78989 Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78989"},{"cve":"CVE-2026-78990","month":"2026-08","title":"Chromium: CVE-2026-78990 Use after free in Compositing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78990"},{"cve":"CVE-2026-78991","month":"2026-08","title":"Chromium: CVE-2026-78991 Race condition in WebProtect","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78991"},{"cve":"CVE-2026-78999","month":"2026-08","title":"Chromium: CVE-2026-78999 Improper privilege management in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78999"},{"cve":"CVE-2026-79000","month":"2026-08","title":"Chromium: CVE-2026-79000 Improper input validation in DeviceBoundSessionCredentials","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79000"},{"cve":"CVE-2026-79001","month":"2026-08","title":"Chromium: CVE-2026-79001 Information leak in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79001"},{"cve":"CVE-2026-79002","month":"2026-08","title":"Chromium: CVE-2026-79002 Incorrect authorization in SiteIsolation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79002"},{"cve":"CVE-2026-79003","month":"2026-08","title":"Chromium: CVE-2026-79003 Incorrect authorization in Device","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79003"},{"cve":"CVE-2026-79004","month":"2026-08","title":"Chromium: CVE-2026-79004 Out of bounds read in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79004"},{"cve":"CVE-2026-79005","month":"2026-08","title":"Chromium: CVE-2026-79005 Incorrect authorization in StorageAccessAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79005"},{"cve":"CVE-2026-79006","month":"2026-08","title":"Chromium: CVE-2026-79006 Protection mechanism failure in HttpsUpgrades","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79006"},{"cve":"CVE-2026-79007","month":"2026-08","title":"Chromium: CVE-2026-79007 Uninitialized resource in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79007"},{"cve":"CVE-2026-79009","month":"2026-08","title":"Chromium: CVE-2026-79009 UI misrepresentation in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79009"},{"cve":"CVE-2026-79010","month":"2026-08","title":"Chromium: CVE-2026-79010 Operation on a resource after expiration or release in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79010"},{"cve":"CVE-2026-79011","month":"2026-08","title":"Chromium: CVE-2026-79011 UI misrepresentation in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79011"},{"cve":"CVE-2026-79012","month":"2026-08","title":"Chromium: CVE-2026-79012 Use after free in Safebrowsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79012"},{"cve":"CVE-2026-79013","month":"2026-08","title":"Chromium: CVE-2026-79013 Improper input validation in Sync","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79013"},{"cve":"CVE-2026-79014","month":"2026-08","title":"Chromium: CVE-2026-79014 Race condition in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79014"},{"cve":"CVE-2026-79015","month":"2026-08","title":"Chromium: CVE-2026-79015 Improper input validation in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79015"},{"cve":"CVE-2026-79016","month":"2026-08","title":"Chromium: CVE-2026-79016 Observable discrepancy in SVG","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79016"},{"cve":"CVE-2026-79017","month":"2026-08","title":"Chromium: CVE-2026-79017 Race condition in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79017"},{"cve":"CVE-2026-79018","month":"2026-08","title":"Chromium: CVE-2026-79018 Information leak in FoldableAPIs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79018"},{"cve":"CVE-2026-79019","month":"2026-08","title":"Chromium: CVE-2026-79019 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79019"},{"cve":"CVE-2026-79020","month":"2026-08","title":"Chromium: CVE-2026-79020 Out of bounds read in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79020"},{"cve":"CVE-2026-79021","month":"2026-08","title":"Chromium: CVE-2026-79021 Missing authorization in InterestGroups","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79021"},{"cve":"CVE-2026-79022","month":"2026-08","title":"Chromium: CVE-2026-79022 UI misrepresentation in Transactions Platform","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79022"},{"cve":"CVE-2026-79023","month":"2026-08","title":"Chromium: CVE-2026-79023 Incorrect authorization in Editing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79023"},{"cve":"CVE-2026-79024","month":"2026-08","title":"Chromium: CVE-2026-79024 Information leak in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79024"},{"cve":"CVE-2026-79025","month":"2026-08","title":"Chromium: CVE-2026-79025 Improper input validation in Workers","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79025"},{"cve":"CVE-2026-79026","month":"2026-08","title":"Chromium: CVE-2026-79026 Use after free in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79026"},{"cve":"CVE-2026-79027","month":"2026-08","title":"Chromium: CVE-2026-79027 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79027"},{"cve":"CVE-2026-79028","month":"2026-08","title":"Chromium: CVE-2026-79028 Observable discrepancy in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79028"},{"cve":"CVE-2026-79030","month":"2026-08","title":"Chromium: CVE-2026-79030 Observable discrepancy in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79030"},{"cve":"CVE-2026-79031","month":"2026-08","title":"Chromium: CVE-2026-79031 Improper resource exposure in Preload","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79031"},{"cve":"CVE-2026-79032","month":"2026-08","title":"Chromium: CVE-2026-79032 Improper input validation in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79032"},{"cve":"CVE-2026-79033","month":"2026-08","title":"Chromium: CVE-2026-79033 Insufficient control flow management in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79033"},{"cve":"CVE-2026-79034","month":"2026-08","title":"Chromium: CVE-2026-79034 Information leak in CORS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79034"},{"cve":"CVE-2026-79038","month":"2026-08","title":"Chromium: CVE-2026-79038 Incorrect authorization in WebProtect","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79038"},{"cve":"CVE-2026-79040","month":"2026-08","title":"Chromium: CVE-2026-79040 Uninitialized resource in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79040"},{"cve":"CVE-2026-79041","month":"2026-08","title":"Chromium: CVE-2026-79041 Missing authorization in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79041"},{"cve":"CVE-2026-79042","month":"2026-08","title":"Chromium: CVE-2026-79042 Missing authorization in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79042"},{"cve":"CVE-2026-79043","month":"2026-08","title":"Chromium: CVE-2026-79043 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79043"},{"cve":"CVE-2026-79045","month":"2026-08","title":"Chromium: CVE-2026-79045 Type confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79045"},{"cve":"CVE-2026-79047","month":"2026-08","title":"Chromium: CVE-2026-79047 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79047"},{"cve":"CVE-2026-79048","month":"2026-08","title":"Chromium: CVE-2026-79048 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79048"},{"cve":"CVE-2026-79049","month":"2026-08","title":"Chromium: CVE-2026-79049 Incorrect reference resolution in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79049"},{"cve":"CVE-2026-79050","month":"2026-08","title":"Chromium: CVE-2026-79050 Incorrect authorization in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79050"},{"cve":"CVE-2026-79051","month":"2026-08","title":"Chromium: CVE-2026-79051 Incorrect authorization in Loader","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79051"},{"cve":"CVE-2026-79052","month":"2026-08","title":"Chromium: CVE-2026-79052 Use after free in Aura","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79052"},{"cve":"CVE-2026-79053","month":"2026-08","title":"Chromium: CVE-2026-79053 Missing authorization in Lighthouse","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79053"},{"cve":"CVE-2026-79054","month":"2026-08","title":"Chromium: CVE-2026-79054 Use after free in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79054"},{"cve":"CVE-2026-79055","month":"2026-08","title":"Chromium: CVE-2026-79055 Information leak in Sharing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79055"},{"cve":"CVE-2026-79056","month":"2026-08","title":"Chromium: CVE-2026-79056 Use after free in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79056"},{"cve":"CVE-2026-79058","month":"2026-08","title":"Chromium: CVE-2026-79058 Missing authorization in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79058"},{"cve":"CVE-2026-79059","month":"2026-08","title":"Chromium: CVE-2026-79059 Information leak in BFCache","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79059"},{"cve":"CVE-2026-79060","month":"2026-08","title":"Chromium: CVE-2026-79060 Incorrect authorization in StorageAccessAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79060"},{"cve":"CVE-2026-79064","month":"2026-08","title":"Chromium: CVE-2026-79064 Use after free in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79064"},{"cve":"CVE-2026-79065","month":"2026-08","title":"Chromium: CVE-2026-79065 Improper input validation in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79065"},{"cve":"CVE-2026-79066","month":"2026-08","title":"Chromium: CVE-2026-79066 Improper input validation in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79066"},{"cve":"CVE-2026-79067","month":"2026-08","title":"Chromium: CVE-2026-79067 Missing authorization in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79067"},{"cve":"CVE-2026-79068","month":"2026-08","title":"Chromium: CVE-2026-79068 Improper resource exposure in StreamsAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79068"},{"cve":"CVE-2026-79069","month":"2026-08","title":"Chromium: CVE-2026-79069 Memory corruption in Tint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79069"},{"cve":"CVE-2026-79070","month":"2026-08","title":"Chromium: CVE-2026-79070 Incorrect reference resolution in Cache","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79070"},{"cve":"CVE-2026-79071","month":"2026-08","title":"Chromium: CVE-2026-79071 Race condition in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79071"},{"cve":"CVE-2026-79072","month":"2026-08","title":"Chromium: CVE-2026-79072 Improper state validation in Performance","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79072"},{"cve":"CVE-2026-79073","month":"2026-08","title":"Chromium: CVE-2026-79073 Improper state validation in Parser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79073"},{"cve":"CVE-2026-79074","month":"2026-08","title":"Chromium: CVE-2026-79074 Information leak in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79074"},{"cve":"CVE-2026-79075","month":"2026-08","title":"Chromium: CVE-2026-79075 Information leak in Geolocation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79075"},{"cve":"CVE-2026-79076","month":"2026-08","title":"Chromium: CVE-2026-79076 Improper input validation in Sync","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79076"},{"cve":"CVE-2026-79077","month":"2026-08","title":"Chromium: CVE-2026-79077 Incorrect authorization in WebProtect","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79077"},{"cve":"CVE-2026-79078","month":"2026-08","title":"Chromium: CVE-2026-79078 Use after free in FedCM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79078"},{"cve":"CVE-2026-79082","month":"2026-08","title":"Chromium: CVE-2026-79082 Incorrect authorization in Transactions Platform","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79082"},{"cve":"CVE-2026-79083","month":"2026-08","title":"Chromium: CVE-2026-79083 Improper enforcement of behavioral workflow in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79083"},{"cve":"CVE-2026-79084","month":"2026-08","title":"Chromium: CVE-2026-79084 Inadequate encryption strength in Notifications","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79084"},{"cve":"CVE-2026-79085","month":"2026-08","title":"Chromium: CVE-2026-79085 Missing authorization in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79085"},{"cve":"CVE-2026-79087","month":"2026-08","title":"Chromium: CVE-2026-79087 Injection in Chrome Tabs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79087"},{"cve":"CVE-2026-79088","month":"2026-08","title":"Chromium: CVE-2026-79088 Incorrect authorization in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79088"},{"cve":"CVE-2026-79089","month":"2026-08","title":"Chromium: CVE-2026-79089 Race condition in Transactions Platform","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79089"},{"cve":"CVE-2026-79090","month":"2026-08","title":"Chromium: CVE-2026-79090 Improper privilege management in Actor","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79090"},{"cve":"CVE-2026-79091","month":"2026-08","title":"Chromium: CVE-2026-79091 Use after free in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79091"},{"cve":"CVE-2026-79093","month":"2026-08","title":"Chromium: CVE-2026-79093 Incorrect authorization in Paint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79093"},{"cve":"CVE-2026-79094","month":"2026-08","title":"Chromium: CVE-2026-79094 Race condition in Workers","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79094"},{"cve":"CVE-2026-79095","month":"2026-08","title":"Chromium: CVE-2026-79095 Information leak in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79095"},{"cve":"CVE-2026-79097","month":"2026-08","title":"Chromium: CVE-2026-79097 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79097"},{"cve":"CVE-2026-79098","month":"2026-08","title":"Chromium: CVE-2026-79098 UI misrepresentation in PermissionElement","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79098"},{"cve":"CVE-2026-79099","month":"2026-08","title":"Chromium: CVE-2026-79099 Missing authorization in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79099"},{"cve":"CVE-2026-79103","month":"2026-08","title":"Chromium: CVE-2026-79103 Incorrect reference resolution in Speech","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79103"},{"cve":"CVE-2026-79104","month":"2026-08","title":"Chromium: CVE-2026-79104 Missing authorization in Sensor","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79104"},{"cve":"CVE-2026-79106","month":"2026-08","title":"Chromium: CVE-2026-79106 Improper input validation in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79106"},{"cve":"CVE-2026-79107","month":"2026-08","title":"Chromium: CVE-2026-79107 Incorrect authorization in TabGroups","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79107"},{"cve":"CVE-2026-79108","month":"2026-08","title":"Chromium: CVE-2026-79108 UI misrepresentation in Web Authentication (Passkeys & Security Keys)","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79108"},{"cve":"CVE-2026-79109","month":"2026-08","title":"Chromium: CVE-2026-79109 Improper input validation in Printing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79109"},{"cve":"CVE-2026-79110","month":"2026-08","title":"Chromium: CVE-2026-79110 Missing authorization in Preload","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79110"},{"cve":"CVE-2026-79111","month":"2026-08","title":"Chromium: CVE-2026-79111 Improper input validation in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79111"},{"cve":"CVE-2026-79112","month":"2026-08","title":"Chromium: CVE-2026-79112 Out of bounds read in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79112"},{"cve":"CVE-2026-79116","month":"2026-08","title":"Chromium: CVE-2026-79116 Missing authorization in Viz","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79116"},{"cve":"CVE-2026-79118","month":"2026-08","title":"Chromium: CVE-2026-79118 Uninitialized resource in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79118"},{"cve":"CVE-2026-79119","month":"2026-08","title":"Chromium: CVE-2026-79119 Use after free in PDF","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79119"},{"cve":"CVE-2026-79120","month":"2026-08","title":"Chromium: CVE-2026-79120 Uninitialized resource in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79120"},{"cve":"CVE-2026-79121","month":"2026-08","title":"Chromium: CVE-2026-79121 Improper input validation in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79121"},{"cve":"CVE-2026-79122","month":"2026-08","title":"Chromium: CVE-2026-79122 Information leak in SignIn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79122"},{"cve":"CVE-2026-79123","month":"2026-08","title":"Chromium: CVE-2026-79123 Improper input validation in NTP Footer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79123"},{"cve":"CVE-2026-79124","month":"2026-08","title":"Chromium: CVE-2026-79124 Information leak in Intents","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79124"},{"cve":"CVE-2026-79125","month":"2026-08","title":"Chromium: CVE-2026-79125 Information leak in XR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79125"},{"cve":"CVE-2026-79126","month":"2026-08","title":"Chromium: CVE-2026-79126 Incorrect provision of specified functionality in Proxy","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79126"},{"cve":"CVE-2026-79127","month":"2026-08","title":"Chromium: CVE-2026-79127 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79127"},{"cve":"CVE-2026-79128","month":"2026-08","title":"Chromium: CVE-2026-79128 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79128"},{"cve":"CVE-2026-79130","month":"2026-08","title":"Chromium: CVE-2026-79130 Buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79130"},{"cve":"CVE-2026-79131","month":"2026-08","title":"Chromium: CVE-2026-79131 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79131"},{"cve":"CVE-2026-79133","month":"2026-08","title":"Chromium: CVE-2026-79133 Incorrect authorization in Forms","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79133"},{"cve":"CVE-2026-79134","month":"2026-08","title":"Chromium: CVE-2026-79134 Incorrect authorization in GetUserMedia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79134"},{"cve":"CVE-2026-79136","month":"2026-08","title":"Chromium: CVE-2026-79136 Incorrect authorization in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79136"},{"cve":"CVE-2026-79137","month":"2026-08","title":"Chromium: CVE-2026-79137 Incorrect authorization in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79137"},{"cve":"CVE-2026-79138","month":"2026-08","title":"Chromium: CVE-2026-79138 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79138"},{"cve":"CVE-2026-79139","month":"2026-08","title":"Chromium: CVE-2026-79139 Improper input validation in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79139"},{"cve":"CVE-2026-79140","month":"2026-08","title":"Chromium: CVE-2026-79140 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79140"},{"cve":"CVE-2026-79141","month":"2026-08","title":"Chromium: CVE-2026-79141 Incorrect authorization in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79141"},{"cve":"CVE-2026-79142","month":"2026-08","title":"Chromium: CVE-2026-79142 Buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79142"},{"cve":"CVE-2026-79143","month":"2026-08","title":"Chromium: CVE-2026-79143 Incorrect authorization in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79143"},{"cve":"CVE-2026-79144","month":"2026-08","title":"Chromium: CVE-2026-79144 Information leak in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79144"},{"cve":"CVE-2026-79147","month":"2026-08","title":"Chromium: CVE-2026-79147 Information leak in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79147"},{"cve":"CVE-2026-79148","month":"2026-08","title":"Chromium: CVE-2026-79148 Off-by-one error in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79148"},{"cve":"CVE-2026-79149","month":"2026-08","title":"Chromium: CVE-2026-79149 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79149"},{"cve":"CVE-2026-79150","month":"2026-08","title":"Chromium: CVE-2026-79150 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79150"},{"cve":"CVE-2026-79151","month":"2026-08","title":"Chromium: CVE-2026-79151 Improper input validation in Safebrowsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79151"},{"cve":"CVE-2026-79154","month":"2026-08","title":"Chromium: CVE-2026-79154 Missing authorization in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79154"},{"cve":"CVE-2026-79155","month":"2026-08","title":"Chromium: CVE-2026-79155 Race condition in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79155"},{"cve":"CVE-2026-79173","month":"2026-08","title":"Chromium: CVE-2026-79173 UI misrepresentation in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79173"},{"cve":"CVE-2026-79174","month":"2026-08","title":"Chromium: CVE-2026-79174 Incorrect authorization in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79174"},{"cve":"CVE-2026-79175","month":"2026-08","title":"Chromium: CVE-2026-79175 Type confusion in Accessibility","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79175"},{"cve":"CVE-2026-79176","month":"2026-08","title":"Chromium: CVE-2026-79176 UI misrepresentation in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79176"},{"cve":"CVE-2026-79177","month":"2026-08","title":"Chromium: CVE-2026-79177 Incorrect authorization in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79177"},{"cve":"CVE-2026-79178","month":"2026-08","title":"Chromium: CVE-2026-79178 Incorrect authorization in Web Authentication (Passkeys & Security Keys)","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79178"},{"cve":"CVE-2026-79179","month":"2026-08","title":"Chromium: CVE-2026-79179 Incorrect authorization in DOM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79179"},{"cve":"CVE-2026-79181","month":"2026-08","title":"Chromium: CVE-2026-79181 Observable discrepancy in Glic","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79181"},{"cve":"CVE-2026-79182","month":"2026-08","title":"Chromium: CVE-2026-79182 Improper input validation in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79182"},{"cve":"CVE-2026-79183","month":"2026-08","title":"Chromium: CVE-2026-79183 Use after free in Accessibility","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79183"},{"cve":"CVE-2026-79184","month":"2026-08","title":"Chromium: CVE-2026-79184 Missing authorization in Preload","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79184"},{"cve":"CVE-2026-79185","month":"2026-08","title":"Chromium: CVE-2026-79185 Information leak in DOM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79185"},{"cve":"CVE-2026-79186","month":"2026-08","title":"Chromium: CVE-2026-79186 Incorrect authorization in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79186"},{"cve":"CVE-2026-79187","month":"2026-08","title":"Chromium: CVE-2026-79187 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79187"},{"cve":"CVE-2026-79188","month":"2026-08","title":"Chromium: CVE-2026-79188 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79188"},{"cve":"CVE-2026-79189","month":"2026-08","title":"Chromium: CVE-2026-79189 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79189"},{"cve":"CVE-2026-79190","month":"2026-08","title":"Chromium: CVE-2026-79190 Incorrect authorization in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79190"},{"cve":"CVE-2026-79191","month":"2026-08","title":"Chromium: CVE-2026-79191 Incorrect authorization in SiteIsolation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79191"},{"cve":"CVE-2026-79192","month":"2026-08","title":"Chromium: CVE-2026-79192 Improper input validation in Variations","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79192"},{"cve":"CVE-2026-79193","month":"2026-08","title":"Chromium: CVE-2026-79193 Information leak in Canvas","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79193"},{"cve":"CVE-2026-79194","month":"2026-08","title":"Chromium: CVE-2026-79194 Use after free in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79194"},{"cve":"CVE-2026-79195","month":"2026-08","title":"Chromium: CVE-2026-79195 Use after free in Script","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79195"},{"cve":"CVE-2026-79196","month":"2026-08","title":"Chromium: CVE-2026-79196 Race condition in Editing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79196"},{"cve":"CVE-2026-79197","month":"2026-08","title":"Chromium: CVE-2026-79197 Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79197"},{"cve":"CVE-2026-79198","month":"2026-08","title":"Chromium: CVE-2026-79198 Use after free in Platform","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79198"},{"cve":"CVE-2026-79199","month":"2026-08","title":"Chromium: CVE-2026-79199 Incorrect authorization in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79199"},{"cve":"CVE-2026-79200","month":"2026-08","title":"Chromium: CVE-2026-79200 Use after free in Aura","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79200"},{"cve":"CVE-2026-79201","month":"2026-08","title":"Chromium: CVE-2026-79201 Improper access control in Workers","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79201"},{"cve":"CVE-2026-79202","month":"2026-08","title":"Chromium: CVE-2026-79202 Use after free in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79202"},{"cve":"CVE-2026-79203","month":"2026-08","title":"Chromium: CVE-2026-79203 Improper input validation in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79203"},{"cve":"CVE-2026-79204","month":"2026-08","title":"Chromium: CVE-2026-79204 UI misrepresentation in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79204"},{"cve":"CVE-2026-79205","month":"2026-08","title":"Chromium: CVE-2026-79205 Incorrect authorization in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79205"},{"cve":"CVE-2026-79206","month":"2026-08","title":"Chromium: CVE-2026-79206 Out of bounds read in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79206"},{"cve":"CVE-2026-79208","month":"2026-08","title":"Chromium: CVE-2026-79208 Missing authorization in HTTP2","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79208"},{"cve":"CVE-2026-79209","month":"2026-08","title":"Chromium: CVE-2026-79209 Type confusion in Animation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79209"},{"cve":"CVE-2026-79211","month":"2026-08","title":"Chromium: CVE-2026-79211 Incorrect authorization in USB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79211"},{"cve":"CVE-2026-79212","month":"2026-08","title":"Chromium: CVE-2026-79212 Missing authorization in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79212"},{"cve":"CVE-2026-79214","month":"2026-08","title":"Chromium: CVE-2026-79214 Improper input validation in Preload","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79214"},{"cve":"CVE-2026-79215","month":"2026-08","title":"Chromium: CVE-2026-79215 Integer overflow in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79215"},{"cve":"CVE-2026-79216","month":"2026-08","title":"Chromium: CVE-2026-79216 Buffer overflow in Blink","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79216"},{"cve":"CVE-2026-79218","month":"2026-08","title":"Chromium: CVE-2026-79218 Incorrect authorization in Sandbox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79218"},{"cve":"CVE-2026-79219","month":"2026-08","title":"Chromium: CVE-2026-79219 Use after free in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79219"},{"cve":"CVE-2026-79220","month":"2026-08","title":"Chromium: CVE-2026-79220 Information leak in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79220"},{"cve":"CVE-2026-79221","month":"2026-08","title":"Chromium: CVE-2026-79221 Uninitialized resource in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79221"},{"cve":"CVE-2026-79223","month":"2026-08","title":"Chromium: CVE-2026-79223 Integer overflow in Chromium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79223"},{"cve":"CVE-2026-79224","month":"2026-08","title":"Chromium: CVE-2026-79224 Use after free in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79224"},{"cve":"CVE-2026-79225","month":"2026-08","title":"Chromium: CVE-2026-79225 Incorrect authorization in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79225"},{"cve":"CVE-2026-79226","month":"2026-08","title":"Chromium: CVE-2026-79226 Improper privilege management in Regional Capabilities","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79226"},{"cve":"CVE-2026-79227","month":"2026-08","title":"Chromium: CVE-2026-79227 Type confusion in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79227"},{"cve":"CVE-2026-79228","month":"2026-08","title":"Chromium: CVE-2026-79228 Incorrect authorization in SiteIsolation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79228"},{"cve":"CVE-2026-79229","month":"2026-08","title":"Chromium: CVE-2026-79229 Uninitialized resource in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79229"},{"cve":"CVE-2026-79230","month":"2026-08","title":"Chromium: CVE-2026-79230 Improper input validation in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79230"},{"cve":"CVE-2026-79231","month":"2026-08","title":"Chromium: CVE-2026-79231 Buffer overflow in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79231"},{"cve":"CVE-2026-79232","month":"2026-08","title":"Chromium: CVE-2026-79232 Use after free in Aura","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79232"},{"cve":"CVE-2026-79234","month":"2026-08","title":"Chromium: CVE-2026-79234 Injection in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79234"},{"cve":"CVE-2026-79235","month":"2026-08","title":"Chromium: CVE-2026-79235 Use after free in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79235"},{"cve":"CVE-2026-79236","month":"2026-08","title":"Chromium: CVE-2026-79236 Type confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79236"},{"cve":"CVE-2026-79237","month":"2026-08","title":"Chromium: CVE-2026-79237 Incorrect authorization in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79237"},{"cve":"CVE-2026-79238","month":"2026-08","title":"Chromium: CVE-2026-79238 Incorrect authorization in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79238"},{"cve":"CVE-2026-79239","month":"2026-08","title":"Chromium: CVE-2026-79239 Out of bounds read in Tint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79239"},{"cve":"CVE-2026-79240","month":"2026-08","title":"Chromium: CVE-2026-79240 Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79240"},{"cve":"CVE-2026-79242","month":"2026-08","title":"Chromium: CVE-2026-79242 Observable discrepancy in HTML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79242"},{"cve":"CVE-2026-79243","month":"2026-08","title":"Chromium: CVE-2026-79243 Improper input validation in ReadingList","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79243"},{"cve":"CVE-2026-79244","month":"2026-08","title":"Chromium: CVE-2026-79244 Use after free in Animation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79244"},{"cve":"CVE-2026-79245","month":"2026-08","title":"Chromium: CVE-2026-79245 Use after free in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79245"},{"cve":"CVE-2026-79246","month":"2026-08","title":"Chromium: CVE-2026-79246 Information leak in DataTransfer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79246"},{"cve":"CVE-2026-79247","month":"2026-08","title":"Chromium: CVE-2026-79247 Use after free in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79247"},{"cve":"CVE-2026-79248","month":"2026-08","title":"Chromium: CVE-2026-79248 Incorrect authorization in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79248"},{"cve":"CVE-2026-79249","month":"2026-08","title":"Chromium: CVE-2026-79249 Code injection in Bisection","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79249"},{"cve":"CVE-2026-79250","month":"2026-08","title":"Chromium: CVE-2026-79250 UI misrepresentation in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79250"},{"cve":"CVE-2026-79251","month":"2026-08","title":"Chromium: CVE-2026-79251 Improper input validation in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79251"},{"cve":"CVE-2026-79252","month":"2026-08","title":"Chromium: CVE-2026-79252 Information leak in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79252"},{"cve":"CVE-2026-79253","month":"2026-08","title":"Chromium: CVE-2026-79253 Improper input validation in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79253"},{"cve":"CVE-2026-79255","month":"2026-08","title":"Chromium: CVE-2026-79255 Improper input validation in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79255"},{"cve":"CVE-2026-79257","month":"2026-08","title":"Chromium: CVE-2026-79257 Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79257"},{"cve":"CVE-2026-79258","month":"2026-08","title":"Chromium: CVE-2026-79258 Incorrect authorization in WebXR","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79258"},{"cve":"CVE-2026-79259","month":"2026-08","title":"Chromium: CVE-2026-79259 Improper input validation in Safebrowsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79259"},{"cve":"CVE-2026-79260","month":"2026-08","title":"Chromium: CVE-2026-79260 Improper input validation in Cookies","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79260"},{"cve":"CVE-2026-79261","month":"2026-08","title":"Chromium: CVE-2026-79261 Incorrect authorization in Controls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79261"},{"cve":"CVE-2026-79262","month":"2026-08","title":"Chromium: CVE-2026-79262 Incorrect authorization in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79262"},{"cve":"CVE-2026-79263","month":"2026-08","title":"Chromium: CVE-2026-79263 Race condition in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79263"},{"cve":"CVE-2026-79264","month":"2026-08","title":"Chromium: CVE-2026-79264 Incorrect reference resolution in Preload","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79264"},{"cve":"CVE-2026-79265","month":"2026-08","title":"Chromium: CVE-2026-79265 Incomplete cleanup in GetUserMedia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79265"},{"cve":"CVE-2026-79266","month":"2026-08","title":"Chromium: CVE-2026-79266 Use after free in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79266"},{"cve":"CVE-2026-79267","month":"2026-08","title":"Chromium: CVE-2026-79267 Race condition in Workers","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79267"},{"cve":"CVE-2026-79269","month":"2026-08","title":"Chromium: CVE-2026-79269 Uninitialized resource in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79269"},{"cve":"CVE-2026-79270","month":"2026-08","title":"Chromium: CVE-2026-79270 Uninitialized resource in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79270"},{"cve":"CVE-2026-79271","month":"2026-08","title":"Chromium: CVE-2026-79271 Information leak in DOM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79271"},{"cve":"CVE-2026-79272","month":"2026-08","title":"Chromium: CVE-2026-79272 Improper input validation in FindInPage","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79272"},{"cve":"CVE-2026-79274","month":"2026-08","title":"Chromium: CVE-2026-79274 Information leak in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79274"},{"cve":"CVE-2026-79275","month":"2026-08","title":"Chromium: CVE-2026-79275 Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79275"},{"cve":"CVE-2026-79276","month":"2026-08","title":"Chromium: CVE-2026-79276 Improper privilege management in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79276"},{"cve":"CVE-2026-79283","month":"2026-08","title":"Chromium: CVE-2026-79283 UI misrepresentation in Geometry","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79283"},{"cve":"CVE-2026-79284","month":"2026-08","title":"Chromium: CVE-2026-79284 UI misrepresentation in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79284"},{"cve":"CVE-2026-79285","month":"2026-08","title":"Chromium: CVE-2026-79285 Uninitialized resource in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79285"},{"cve":"CVE-2026-79287","month":"2026-08","title":"Chromium: CVE-2026-79287 Observable discrepancy in Forms","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79287"},{"cve":"CVE-2026-79289","month":"2026-08","title":"Chromium: CVE-2026-79289 Improper control of a resource through its lifetime in Workers","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79289"},{"cve":"CVE-2026-79290","month":"2026-08","title":"Chromium: CVE-2026-79290 Use after free in Aura","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79290"},{"cve":"CVE-2026-79291","month":"2026-08","title":"Chromium: CVE-2026-79291 Information leak in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79291"},{"cve":"CVE-2026-79292","month":"2026-08","title":"Chromium: CVE-2026-79292 Integer overflow in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79292"},{"cve":"CVE-2026-79293","month":"2026-08","title":"Chromium: CVE-2026-79293 Information leak in Animation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79293"},{"cve":"CVE-2026-14456","month":"2026-08","title":"Unbounded Memory Growth in QUIC Server Incoming Channel Queue","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14456"},{"cve":"CVE-2026-52491","month":"2026-08","title":"An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52491"},{"cve":"CVE-2026-52492","month":"2026-08","title":"An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-52492"},{"cve":"CVE-2026-54876","month":"2026-08","title":"Client-Side Memory Leak in OCSP Response Checking","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54876"},{"cve":"CVE-2026-82250","month":"2026-08","title":"gitoxide gix-packetline before 0.21.5 Denial of Service","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82250"},{"cve":"CVE-2026-82417","month":"2026-08","title":"qs.stringify throws TypeError on objects with a non-callable constructor.isBuffer property","family":"Other","component":"Mariner","cna":"harborist","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-248"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82417"},{"cve":"CVE-2026-74585","month":"2026-08","title":"thunderbolt: Bound the DROM dual link port number before indexing sw->ports","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74585"},{"cve":"CVE-2026-74648","month":"2026-08","title":"staging: rtl8723bs: validate monitor transmit frame lengths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74648"},{"cve":"CVE-2026-74649","month":"2026-08","title":"staging: rtl8723bs: fix missing shared-key auth challenge length check","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74649"},{"cve":"CVE-2026-74651","month":"2026-08","title":"staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74651"},{"cve":"CVE-2026-74679","month":"2026-08","title":"usb: gadget: f_ncm: Use unsigned int for ndp_index","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74679"},{"cve":"CVE-2026-74729","month":"2026-08","title":"soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74729"},{"cve":"CVE-2026-12570","month":"2026-08","title":"Denial of Service via HDF5 Shape Bomb in keras.models.load_model() in keras-team/keras","family":"Other","component":"Mariner","cna":"@huntr_ai","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12570"},{"cve":"CVE-2026-68451","month":"2026-08","title":"s390/zcrypt: Validate length for CCA ECC private key requests","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68451"},{"cve":"CVE-2026-68453","month":"2026-08","title":"s390/zcrypt: Fix buffer over-read in cca_cipher2protkey","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68453"},{"cve":"CVE-2026-68454","month":"2026-08","title":"KVM: s390: pci: Fix handling of AIF enable without AISB","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68454"},{"cve":"CVE-2025-1218","month":"2026-09","title":"Various packet overreads in mysqlnd_writeprotocol.c","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Low","cvss":3.4,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-1218"},{"cve":"CVE-2025-14181","month":"2026-09","title":"Integer overflow to buffer overflow in soap HTTP parsing","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H/E:P","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-14181"},{"cve":"CVE-2026-0799","month":"2026-09","title":"OOBR and OOBW in libpcap before 1.10.7","family":"Other","component":"Mariner","cna":"Tcpdump","label":"(none)","labels":[],"severity":"Important","cvss":8.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H","cwe":["CWE-129"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0799"},{"cve":"CVE-2026-100070","month":"2026-09","title":"netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100070"},{"cve":"CVE-2026-100071","month":"2026-09","title":"net: hsr: free learned nodes on device setup failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100071"},{"cve":"CVE-2026-100072","month":"2026-09","title":"ACPI: platform: Use acpi_bus_get_primary_device()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100072"},{"cve":"CVE-2026-100074","month":"2026-09","title":"bpf: Mark bpf_refcount field as unique","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100074"},{"cve":"CVE-2026-100075","month":"2026-09","title":"RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100075"},{"cve":"CVE-2026-100077","month":"2026-09","title":"drm/msm: Recover HW before retire hung submit","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100077"},{"cve":"CVE-2026-100078","month":"2026-09","title":"wifi: iwlwifi: mei: pass correct argument to function","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100078"},{"cve":"CVE-2026-100079","month":"2026-09","title":"usb: typec: ucsi: unregister debugfs entries on teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100079"},{"cve":"CVE-2026-100419","month":"2026-09","title":"gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100419"},{"cve":"CVE-2026-101276","month":"2026-09","title":"iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads, so a blocked worker dereferences a freed iperf_stream; fixed in 3.22.","family":"Other","component":"Mariner","cna":"Anthropic","label":"(none)","labels":[],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-101276"},{"cve":"CVE-2026-101902","month":"2026-09","title":"Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-1321"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-101902"},{"cve":"CVE-2026-101904","month":"2026-09","title":"Axios: Header Injection via Inherited headers After Minimal Interceptor","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-74"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-101904"},{"cve":"CVE-2026-101917","month":"2026-09","title":"PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-101917"},{"cve":"CVE-2026-101918","month":"2026-09","title":"PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-248"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-101918"},{"cve":"CVE-2026-102010","month":"2026-09","title":"Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cwe":["CWE-825"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102010"},{"cve":"CVE-2026-102253","month":"2026-09","title":"iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102253"},{"cve":"CVE-2026-102265","month":"2026-09","title":"PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102265"},{"cve":"CVE-2026-102266","month":"2026-09","title":"PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102266"},{"cve":"CVE-2026-102267","month":"2026-09","title":"PyJWT: PyJWKClient follows redirects when fetching JWKS","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102267"},{"cve":"CVE-2026-102268","month":"2026-09","title":"PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102268"},{"cve":"CVE-2026-102269","month":"2026-09","title":"PyJWT: Non-canonical signature segments enable raw-token revocation bypass","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-180"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102269"},{"cve":"CVE-2026-102270","month":"2026-09","title":"PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-1333"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102270"},{"cve":"CVE-2026-102271","month":"2026-09","title":"PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102271"},{"cve":"CVE-2026-102272","month":"2026-09","title":"PyJWT BOM Bypass","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102272"},{"cve":"CVE-2026-102273","month":"2026-09","title":"PyJWT accepts public JWK containers as HMAC secrets","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102273"},{"cve":"CVE-2026-102274","month":"2026-09","title":"PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-755"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102274"},{"cve":"CVE-2026-102275","month":"2026-09","title":"PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U","cwe":["CWE-345"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102275"},{"cve":"CVE-2026-102276","month":"2026-09","title":"brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102276"},{"cve":"CVE-2026-102277","month":"2026-09","title":"brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102277"},{"cve":"CVE-2026-102278","month":"2026-09","title":"brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102278"},{"cve":"CVE-2026-102555","month":"2026-09","title":"Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102555"},{"cve":"CVE-2026-102556","month":"2026-09","title":"Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102556"},{"cve":"CVE-2026-102557","month":"2026-09","title":"Libsoup: libsoup: heap buffer overflow during websocket message reassembly","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102557"},{"cve":"CVE-2026-102558","month":"2026-09","title":"Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102558"},{"cve":"CVE-2026-102559","month":"2026-09","title":"Libsoup: libsoup: heap buffer overflow during websocket client-frame masking","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102559"},{"cve":"CVE-2026-102560","month":"2026-09","title":"Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102560"},{"cve":"CVE-2026-102598","month":"2026-09","title":"Werkzeug safe_join() allows Windows special device names","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-67"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102598"},{"cve":"CVE-2026-102623","month":"2026-09","title":"Kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volume","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102623"},{"cve":"CVE-2026-102633","month":"2026-09","title":"libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102633"},{"cve":"CVE-2026-102925","month":"2026-09","title":"virtualenv bash and fish activation scripts execute commands embedded in paths","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102925"},{"cve":"CVE-2026-102930","month":"2026-09","title":"virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-494"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102930"},{"cve":"CVE-2026-102937","month":"2026-09","title":"virtualenv: Command injection via --prompt in activate.bat (batch activator)","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102937"},{"cve":"CVE-2026-102938","month":"2026-09","title":"virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-93"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102938"},{"cve":"CVE-2026-102991","month":"2026-09","title":"Mako: Path traversal via drive-letter URI on Windows in TemplateLookup","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102991"},{"cve":"CVE-2026-102992","month":"2026-09","title":"piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-1321"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102992"},{"cve":"CVE-2026-103001","month":"2026-09","title":"PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U","cwe":["CWE-471"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103001"},{"cve":"CVE-2026-103111","month":"2026-09","title":"PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103111"},{"cve":"CVE-2026-103242","month":"2026-09","title":"Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103242"},{"cve":"CVE-2026-103399","month":"2026-09","title":"Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103399"},{"cve":"CVE-2026-11573","month":"2026-09","title":"Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)","family":"Other","component":"Mariner","cna":"Qt","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11573"},{"cve":"CVE-2026-12345","month":"2026-09","title":"Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12345"},{"cve":"CVE-2026-13608","month":"2026-09","title":"OpenLDAP SASL authentication bypass","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13608"},{"cve":"CVE-2026-14957","month":"2026-09","title":"FIPS mode assertion failure via malicious CERT payload","family":"Open Source Software","component":"Mariner","cna":"libreswan","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14957"},{"cve":"CVE-2026-15390","month":"2026-09","title":"Out-of-bounds write in Das U-Boot","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15390"},{"cve":"CVE-2026-15442","month":"2026-09","title":"Heap use-after-free on read during bidirectional (D)TLS shutdown","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-15442"},{"cve":"CVE-2026-17545","month":"2026-09","title":"PHP on Windows: Reserved Device Names Are Not Rejected Before File/Stream I/O which can cause DoS","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-67"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-17545"},{"cve":"CVE-2026-18090","month":"2026-09","title":"Gdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle block","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18090"},{"cve":"CVE-2026-18149","month":"2026-09","title":"undici vulnerable to Denial of Service via orphaned RetryHandler response body","family":"Other","component":"Mariner","cna":"openjs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-772"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18149"},{"cve":"CVE-2026-18238","month":"2026-09","title":"OOBR in rpcap client in libpcap before 1.10.7","family":"Other","component":"Mariner","cna":"Tcpdump","label":"(none)","labels":[],"severity":"Moderate","cvss":5.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cwe":["CWE-1288"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18238"},{"cve":"CVE-2026-18313","month":"2026-09","title":"rpcapd memory leak in libpcap before 1.10.7","family":"Other","component":"Mariner","cna":"Tcpdump","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18313"},{"cve":"CVE-2026-18329","month":"2026-09","title":"NGINX ngx_http_js_module vulnerability","family":"Other","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Moderate","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","cwe":["CWE-636"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18329"},{"cve":"CVE-2026-18540","month":"2026-09","title":"undici vulnerable to downstream response splitting via retry interceptor","family":"Open Source Software","component":"Mariner","cna":"openjs","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18540"},{"cve":"CVE-2026-18743","month":"2026-09","title":"Popt-devel: popt-static: short realloc in poptconfigfiletostring","family":"Open Source Software","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-131"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18743"},{"cve":"CVE-2026-18924","month":"2026-09","title":"HTTP/2 server push UAF","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-18924"},{"cve":"CVE-2026-19444","month":"2026-09","title":"Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes","family":"Other","component":"Mariner","cna":"kubernetes","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19444"},{"cve":"CVE-2026-19445","month":"2026-09","title":"Use-after-free of a server-side SSLContext when sni_callback switches contexts","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19445"},{"cve":"CVE-2026-19499","month":"2026-09","title":"Buffer overflow in strfmon and strfmon_l right-justification padding","family":"Other","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19499"},{"cve":"CVE-2026-19542","month":"2026-09","title":"Stack-based out-of-bounds write in tdelete during tree rebalancing","family":"Other","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Moderate","cvss":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19542"},{"cve":"CVE-2026-19553","month":"2026-09","title":"SSLContext.wrap_bio() missing validation of server_hostname parameter","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-297"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19553"},{"cve":"CVE-2026-19662","month":"2026-09","title":"qpcache NOQNAME proof use-after-free crashes recursive resolver","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19662"},{"cve":"CVE-2026-19666","month":"2026-09","title":"Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19666"},{"cve":"CVE-2026-19667","month":"2026-09","title":"Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19667"},{"cve":"CVE-2026-19668","month":"2026-09","title":"Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19668"},{"cve":"CVE-2026-19774","month":"2026-09","title":"BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability","family":"Other","component":"Mariner","cna":"zdi","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19774"},{"cve":"CVE-2026-19888","month":"2026-09","title":"NULL pointer dereference in SCRAM client-final-message parsing in PgBouncer","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19888"},{"cve":"CVE-2026-19931","month":"2026-09","title":"Negotiate ambient user conn reuse","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19931"},{"cve":"CVE-2026-19941","month":"2026-09","title":"checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-345"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19941"},{"cve":"CVE-2026-31911","month":"2026-09","title":"abort() in libpcap before 1.10.7 on an invalid BPF opcode","family":"Other","component":"Mariner","cna":"Tcpdump","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31911"},{"cve":"CVE-2026-31912","month":"2026-09","title":"OOBR in libpcap before 1.10.7","family":"Other","component":"Mariner","cna":"Tcpdump","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-1285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-31912"},{"cve":"CVE-2026-33630","month":"2026-09","title":"c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33630"},{"cve":"CVE-2026-35189","month":"2026-09","title":"Excessive Memory Allocation in Relative CRLDP Processing","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35189"},{"cve":"CVE-2026-35191","month":"2026-09","title":"QUIC Unvalidated Amplification Credit may be Over Accounted","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-440"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35191"},{"cve":"CVE-2026-42772","month":"2026-09","title":"Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42772"},{"cve":"CVE-2026-42784","month":"2026-09","title":"Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42784"},{"cve":"CVE-2026-44950","month":"2026-09","title":"fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Important","cvss":9.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44950"},{"cve":"CVE-2026-53493","month":"2026-09","title":"Containerd has image-pull DoS via crafted OCI index graph amplification","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53493"},{"cve":"CVE-2026-53495","month":"2026-09","title":"containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53495"},{"cve":"CVE-2026-53940","month":"2026-09","title":"Conda: Entry-point path traversal in noarch:python install (arbitrary file write) \u2014 canonical Python implementation","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-53940"},{"cve":"CVE-2026-54872","month":"2026-09","title":"Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-208"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54872"},{"cve":"CVE-2026-54873","month":"2026-09","title":"QUIC STREAM Fragment Metadata DoS","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54873"},{"cve":"CVE-2026-54875","month":"2026-09","title":"Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-208"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54875"},{"cve":"CVE-2026-55556","month":"2026-09","title":"Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55556"},{"cve":"CVE-2026-55951","month":"2026-09","title":"httpc memory exhaustion via unbounded response header accumulation","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55951"},{"cve":"CVE-2026-56855","month":"2026-09","title":"Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56855"},{"cve":"CVE-2026-59679","month":"2026-09","title":"fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Important","cvss":9.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59679"},{"cve":"CVE-2026-59696","month":"2026-09","title":"uri_string does not bound the port component of a URI before integer conversion","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59696"},{"cve":"CVE-2026-6103","month":"2026-09","title":"Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Low","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6103"},{"cve":"CVE-2026-61674","month":"2026-09","title":"Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61674"},{"cve":"CVE-2026-6244","month":"2026-09","title":"division by zero in libpcap before 1.10.7","family":"Other","component":"Mariner","cna":"Tcpdump","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-369"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6244"},{"cve":"CVE-2026-63209","month":"2026-09","title":"Integer Overflow or Wraparound and Out-of-bounds Write in compress","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63209"},{"cve":"CVE-2026-6554","month":"2026-09","title":"infinte loop in libpcap before 1.10.7","family":"Other","component":"Mariner","cna":"Tcpdump","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6554"},{"cve":"CVE-2026-65634","month":"2026-09","title":"Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65634"},{"cve":"CVE-2026-66067","month":"2026-09","title":"RabbitMQ: Stream protocol skips per vhost per user connection limits","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66067"},{"cve":"CVE-2026-66068","month":"2026-09","title":"RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-532"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66068"},{"cve":"CVE-2026-66069","month":"2026-09","title":"RabbitMQ: Monitoring-tag DELETE of auth-attempt metrics","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66069"},{"cve":"CVE-2026-66070","month":"2026-09","title":"RabbitMQ: CORS * reflects Origin with Allow-Credentials","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-942"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66070"},{"cve":"CVE-2026-66071","month":"2026-09","title":"RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66071"},{"cve":"CVE-2026-66072","month":"2026-09","title":"RabbitMQ: Atom table exhaustion via stream `chunk_selector`","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66072"},{"cve":"CVE-2026-66073","month":"2026-09","title":"RabbitMQ: Atom table exhaustion via management API node field","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66073"},{"cve":"CVE-2026-66074","month":"2026-09","title":"RabbitMQ: ReDoS via management API ?name= filter","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-1333"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66074"},{"cve":"CVE-2026-66075","month":"2026-09","title":"RabbitMQ: Monitoring-tag user can restart federation links","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66075"},{"cve":"CVE-2026-66077","month":"2026-09","title":"RabbitMQ: Stored XSS via TLS peer-certificate DN in management UI","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66077"},{"cve":"CVE-2026-66079","month":"2026-09","title":"RabbitMQ: Pre-auth AMQP 1.0 array32 zero-width element DoS","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66079"},{"cve":"CVE-2026-66357","month":"2026-09","title":"inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66357"},{"cve":"CVE-2026-6668","month":"2026-09","title":"Integer overflow causes an infinite loop in packet buffer growth in PgBouncer","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6668"},{"cve":"CVE-2026-6669","month":"2026-09","title":"Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncer","family":"Other","component":"Mariner","cna":"PostgreSQL","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6669"},{"cve":"CVE-2026-66835","month":"2026-09","title":"httpd mod_auth directory protection bypassed by a doubled slash in the request path","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-50"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66835"},{"cve":"CVE-2026-67219","month":"2026-09","title":"RabbitMQ: Consistent-hash exchange unbounded weight","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67219"},{"cve":"CVE-2026-67221","month":"2026-09","title":"RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwords","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-312"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67221"},{"cve":"CVE-2026-67222","month":"2026-09","title":"RabbitMQ: list_to_atom on auth_mechanism URI tokens in amqp_client","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67222"},{"cve":"CVE-2026-67223","month":"2026-09","title":"RabbitMQ: LDAP DN injection via unescaped substitution","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-90"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67223"},{"cve":"CVE-2026-67224","month":"2026-09","title":"RabbitMQ: Admin path-traversal write via trace name","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67224"},{"cve":"CVE-2026-67225","month":"2026-09","title":"RabbitMQ: Stream-protocol frame length never validated against frame_max","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67225"},{"cve":"CVE-2026-67226","month":"2026-09","title":"RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67226"},{"cve":"CVE-2026-67227","month":"2026-09","title":"RabbitMQ: Atom exhaustion: to_atom on global-parameter :name","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67227"},{"cve":"CVE-2026-67228","month":"2026-09","title":"RabbitMQ: Atom exhaustion: to_atom on runtime-parameter component","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67228"},{"cve":"CVE-2026-67229","month":"2026-09","title":"RabbitMQ: Admin-only atom exhaustion: atomize_keys on vhost metadata","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67229"},{"cve":"CVE-2026-67230","month":"2026-09","title":"RabbitMQ: Web-STOMP unbounded pre-auth accumulation","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67230"},{"cve":"CVE-2026-67231","month":"2026-09","title":"RabbitMQ: Trust-store whitelist by Issuer+Serial only","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67231"},{"cve":"CVE-2026-67232","month":"2026-09","title":"RabbitMQ: Web-MQTT decompression bomb","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-409"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67232"},{"cve":"CVE-2026-67233","month":"2026-09","title":"RabbitMQ: Monitoring-tag user can DELETE shovels","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67233"},{"cve":"CVE-2026-67235","month":"2026-09","title":"RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated size","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67235"},{"cve":"CVE-2026-67239","month":"2026-09","title":"RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67239"},{"cve":"CVE-2026-67405","month":"2026-09","title":"RabbitMQ: CSWSH on Web-STOMP / Web-MQTT (no Origin validation)","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-1385"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67405"},{"cve":"CVE-2026-67406","month":"2026-09","title":"RabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback \u2014 Plaintext Credentials Exposed in Crash Dumps and sys:get_status","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67406"},{"cve":"CVE-2026-67407","month":"2026-09","title":"RabbitMQ: Incomplete fix for CVE-2026-44838: `escape_regex_char/1` does not escape `-`, leaving room for an MQTT topic permission bypass","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67407"},{"cve":"CVE-2026-67410","month":"2026-09","title":"RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67410"},{"cve":"CVE-2026-67411","month":"2026-09","title":"RabbitMQ: Web MQTT with PROXY Protocol enabled: a loopback-only user permission bypass","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67411"},{"cve":"CVE-2026-67412","month":"2026-09","title":"RabbitMQ: Federation upstream skips vhost authorization allowing cross-vhost message access","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67412"},{"cve":"CVE-2026-67413","month":"2026-09","title":"RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-1333"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67413"},{"cve":"CVE-2026-67415","month":"2026-09","title":"RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67415"},{"cve":"CVE-2026-67419","month":"2026-09","title":"RabbitMQ: Consecutive topic wildcards cause combinatorial routing work","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67419"},{"cve":"CVE-2026-68956","month":"2026-09","title":"SSH daemon allocates unbounded idle session channels, bypassing max_channels","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68956"},{"cve":"CVE-2026-69184","month":"2026-09","title":"c-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chains","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69184"},{"cve":"CVE-2026-69186","month":"2026-09","title":"c-ares: Memory-amplification denial of service via unvalidated DNS header record counts","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69186"},{"cve":"CVE-2026-69664","month":"2026-09","title":"httpd parks a request worker indefinitely on a malformed chunk size sent after the headers","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-772"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69664"},{"cve":"CVE-2026-70409","month":"2026-09","title":"eldap does not bound the port component of a referral URL before integer conversion","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70409"},{"cve":"CVE-2026-71219","month":"2026-09","title":"Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71219"},{"cve":"CVE-2026-71220","month":"2026-09","title":"Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71220"},{"cve":"CVE-2026-71221","month":"2026-09","title":"Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71221"},{"cve":"CVE-2026-71222","month":"2026-09","title":"Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71222"},{"cve":"CVE-2026-71224","month":"2026-09","title":"Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71224"},{"cve":"CVE-2026-71380","month":"2026-09","title":"httpd applies no timeout while receiving a request body, parking a worker on a stalled client","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-772"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71380"},{"cve":"CVE-2026-71562","month":"2026-09","title":"httpc does not bound server-supplied numeric header values before integer conversion","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71562"},{"cve":"CVE-2026-71971","month":"2026-09","title":"U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71971"},{"cve":"CVE-2026-71972","month":"2026-09","title":"U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71972"},{"cve":"CVE-2026-71973","month":"2026-09","title":"U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71973"},{"cve":"CVE-2026-72897","month":"2026-09","title":"Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72897"},{"cve":"CVE-2026-73064","month":"2026-09","title":"In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.","family":"Open Source Software","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-394"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73064"},{"cve":"CVE-2026-73270","month":"2026-09","title":"httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-178"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73270"},{"cve":"CVE-2026-73276","month":"2026-09","title":"inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73276"},{"cve":"CVE-2026-73812","month":"2026-09","title":"inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73812"},{"cve":"CVE-2026-74220","month":"2026-09","title":"U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-195"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74220"},{"cve":"CVE-2026-74221","month":"2026-09","title":"U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-195"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74221"},{"cve":"CVE-2026-74835","month":"2026-09","title":"inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74835"},{"cve":"CVE-2026-74994","month":"2026-09","title":"inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74994"},{"cve":"CVE-2026-75538","month":"2026-09","title":"A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer","family":"Open Source Software","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-75538"},{"cve":"CVE-2026-75804","month":"2026-09","title":"QUIC Connection-Level Flow Control is Not Enforced for Streams","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-75804"},{"cve":"CVE-2026-75805","month":"2026-09","title":"NULL Pointer Dereference in CMP Client Revocation Response Handling","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-75805"},{"cve":"CVE-2026-75806","month":"2026-09","title":"Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-75806"},{"cve":"CVE-2026-76163","month":"2026-09","title":"named aborts on a TKEY query when the user configuration has no global options statement","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76163"},{"cve":"CVE-2026-76642","month":"2026-09","title":"util-linux libmount Privilege Escalation via Failed Mount Helper","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76642"},{"cve":"CVE-2026-77117","month":"2026-09","title":"SHIFT_JISX0213 decoding may hang on crafted input","family":"Other","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77117"},{"cve":"CVE-2026-77159","month":"2026-09","title":"Libvirt: unsafe chown in qemutpmemulatorpreparehost() allows arbitrary file ownership change via symlink","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U","cwe":["CWE-61"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77159"},{"cve":"CVE-2026-77405","month":"2026-09","title":"RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-326"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77405"},{"cve":"CVE-2026-77406","month":"2026-09","title":"RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-195"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77406"},{"cve":"CVE-2026-77408","month":"2026-09","title":"RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77408"},{"cve":"CVE-2026-77409","month":"2026-09","title":"RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77409"},{"cve":"CVE-2026-77696","month":"2026-09","title":"Timing Side-Channel in SM2 Signature Generation","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-208"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77696"},{"cve":"CVE-2026-77860","month":"2026-09","title":"'serve-expired' can bypass Unbound 'wait-limit'","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"(none)","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-675"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77860"},{"cve":"CVE-2026-78030","month":"2026-09","title":"DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-470"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78030"},{"cve":"CVE-2026-78124","month":"2026-09","title":"strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78124"},{"cve":"CVE-2026-78127","month":"2026-09","title":"libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78127"},{"cve":"CVE-2026-78129","month":"2026-09","title":"strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78129"},{"cve":"CVE-2026-78130","month":"2026-09","title":"strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78130"},{"cve":"CVE-2026-78131","month":"2026-09","title":"strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78131"},{"cve":"CVE-2026-78132","month":"2026-09","title":"strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for\u00a0ietfAttrSyntax.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78132"},{"cve":"CVE-2026-78133","month":"2026-09","title":"libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78133"},{"cve":"CVE-2026-78134","month":"2026-09","title":"strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78134"},{"cve":"CVE-2026-78135","month":"2026-09","title":"libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because\u00a0CREATE_CHILD_SA requests are mishandled, there can be an authentication bypass.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-841"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78135"},{"cve":"CVE-2026-78222","month":"2026-09","title":"NGINX ngx_http_js_module vulnerability","family":"Other","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78222"},{"cve":"CVE-2026-78227","month":"2026-09","title":"Use-after-free in DoQ stream output buffer on reset re-transmission","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78227"},{"cve":"CVE-2026-78253","month":"2026-09","title":"Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt","family":"Other","component":"Mariner","cna":"Qt","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78253"},{"cve":"CVE-2026-78254","month":"2026-09","title":"Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78254"},{"cve":"CVE-2026-78301","month":"2026-09","title":"Out-of-zone database nodes can become authoritative zone cuts","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Moderate","cvss":5.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N","cwe":["CWE-349"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78301"},{"cve":"CVE-2026-78408","month":"2026-09","title":"Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H/E:U","cwe":["CWE-775"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78408"},{"cve":"CVE-2026-78410","month":"2026-09","title":"Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78410"},{"cve":"CVE-2026-78662","month":"2026-09","title":"Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78662"},{"cve":"CVE-2026-78689","month":"2026-09","title":"NGINX ngx_http_js_module vulnerablility","family":"Other","component":"Mariner","cna":"f5","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78689"},{"cve":"CVE-2026-78807","month":"2026-09","title":"An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78807"},{"cve":"CVE-2026-79616","month":"2026-09","title":"Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick","family":"Other","component":"Mariner","cna":"Qt","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79616"},{"cve":"CVE-2026-80225","month":"2026-09","title":"Possible degradation of service from continuous queries on the same TCP/DoT connection","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80225"},{"cve":"CVE-2026-80229","month":"2026-09","title":"OpenSSL provider use-after-free","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80229"},{"cve":"CVE-2026-80230","month":"2026-09","title":"OpenSSL pinning bypass","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80230"},{"cve":"CVE-2026-80255","month":"2026-09","title":"secure cookie attribute bypass with tab","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80255"},{"cve":"CVE-2026-80274","month":"2026-09","title":"Validating resolver can abort while caching a mismatched NOQNAME proof","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80274"},{"cve":"CVE-2026-80489","month":"2026-09","title":"EUC_JISX0213 decoding may hang on crafted input","family":"Other","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80489"},{"cve":"CVE-2026-80726","month":"2026-09","title":"KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80726"},{"cve":"CVE-2026-80728","month":"2026-09","title":"Revert \"drm/amdgpu: fix aperture mapping leak\"","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80728"},{"cve":"CVE-2026-80730","month":"2026-09","title":"ring-buffer: Fix crash passing ERR_PTR to kthread_stop()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80730"},{"cve":"CVE-2026-80731","month":"2026-09","title":"net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80731"},{"cve":"CVE-2026-80732","month":"2026-09","title":"ata: pata_sl82c105: fix bridge revision use-after-free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80732"},{"cve":"CVE-2026-80733","month":"2026-09","title":"net: remove WARN_ON_ONCE() from sk_mc_loop()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80733"},{"cve":"CVE-2026-80737","month":"2026-09","title":"serial: amba-pl011: synchronize DMA teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80737"},{"cve":"CVE-2026-80738","month":"2026-09","title":"bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80738"},{"cve":"CVE-2026-80742","month":"2026-09","title":"af_packet: Don't send zero-byte data in tpacket_snd().","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80742"},{"cve":"CVE-2026-80743","month":"2026-09","title":"ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80743"},{"cve":"CVE-2026-80744","month":"2026-09","title":"netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80744"},{"cve":"CVE-2026-80747","month":"2026-09","title":"drm/amdkfd: Add bounds check for CRAT subtype length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80747"},{"cve":"CVE-2026-80752","month":"2026-09","title":"Input: psxpad-spi - set driver data before use","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80752"},{"cve":"CVE-2026-80755","month":"2026-09","title":"selinux: reject a permission value exceeding the class permission count","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80755"},{"cve":"CVE-2026-80756","month":"2026-09","title":"selinux: do not cancel a policy conversion that never started","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80756"},{"cve":"CVE-2026-80757","month":"2026-09","title":"selinux: reject a class permission count below its inherited common","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80757"},{"cve":"CVE-2026-80761","month":"2026-09","title":"Bluetooth: ISO: zero the sockaddr before returning it in getname","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80761"},{"cve":"CVE-2026-80762","month":"2026-09","title":"Bluetooth: hci_sync: Fix accept list UAF during suspend","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80762"},{"cve":"CVE-2026-80763","month":"2026-09","title":"Bluetooth: hci_event: validate LE Set CIG Parameters response","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80763"},{"cve":"CVE-2026-80764","month":"2026-09","title":"Bluetooth: hci_event: fix LE list UAF on reset","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80764"},{"cve":"CVE-2026-80765","month":"2026-09","title":"HID: hyperv: validate initial device info bounds","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80765"},{"cve":"CVE-2026-80766","month":"2026-09","title":"HID: uclogic: fix use-after-free of inrange_timer on remove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80766"},{"cve":"CVE-2026-80767","month":"2026-09","title":"HID: sensor: custom: Fix use-after-free in enable_sensor","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80767"},{"cve":"CVE-2026-80781","month":"2026-09","title":"HID: core: fix OOB read of field->usage in hid_set_field()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80781"},{"cve":"CVE-2026-80782","month":"2026-09","title":"HID: magicmouse: do not keep a stale msc->input if no input is claimed","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80782"},{"cve":"CVE-2026-80783","month":"2026-09","title":"HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80783"},{"cve":"CVE-2026-80784","month":"2026-09","title":"mptcp: pm: fix memory leak from alloc-during-teardown race","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80784"},{"cve":"CVE-2026-80785","month":"2026-09","title":"fbdev: serialize mode sysfs access with lock_fb_info()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80785"},{"cve":"CVE-2026-80786","month":"2026-09","title":"fbdev: Wrap user-invoked calls to fb_set_var() in helper","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80786"},{"cve":"CVE-2026-80788","month":"2026-09","title":"nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80788"},{"cve":"CVE-2026-80789","month":"2026-09","title":"nvmet-tcp: bound SGL data length before allocating command buffers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80789"},{"cve":"CVE-2026-80792","month":"2026-09","title":"ipv6: fix use-after-free in ip6_finish_output2()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80792"},{"cve":"CVE-2026-80793","month":"2026-09","title":"ipv4: reject undersized MTUs in ip_do_fragment()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80793"},{"cve":"CVE-2026-80795","month":"2026-09","title":"nfc: nci: fix out-of-bounds write in nci_target_auto_activated()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80795"},{"cve":"CVE-2026-80805","month":"2026-09","title":"xfs: validate attr entry pointer before field access","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80805"},{"cve":"CVE-2026-80806","month":"2026-09","title":"ext4: don't enable DAX on new encrypted files","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80806"},{"cve":"CVE-2026-80808","month":"2026-09","title":"ext4: stop retrying saturated xattr cache entries","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80808"},{"cve":"CVE-2026-80812","month":"2026-09","title":"ALSA: dummy: Check card index validity at probe","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80812"},{"cve":"CVE-2026-80814","month":"2026-09","title":"rndis_host: add overflow check in rndis_rx_fixup()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80814"},{"cve":"CVE-2026-80819","month":"2026-09","title":"Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80819"},{"cve":"CVE-2026-80822","month":"2026-09","title":"mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80822"},{"cve":"CVE-2026-80824","month":"2026-09","title":"usb: usbfs: fix use-after-free of usb_device in usbdev_release()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80824"},{"cve":"CVE-2026-80826","month":"2026-09","title":"USB: c67x00: fix use-after-free in c67x00_add_iso_urb()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80826"},{"cve":"CVE-2026-80827","month":"2026-09","title":"USB: serial: option: fix slab OOB read in interrupt URB callback","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.8,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80827"},{"cve":"CVE-2026-80828","month":"2026-09","title":"ALSA: usb-audio: Complete cleanup after system-resume errors","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80828"},{"cve":"CVE-2026-80829","month":"2026-09","title":"ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80829"},{"cve":"CVE-2026-80830","month":"2026-09","title":"usb: core: Add lock to usb_wakeup_notification()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80830"},{"cve":"CVE-2026-80831","month":"2026-09","title":"crypto: mxs-dcp - fix source scatterlist length access","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80831"},{"cve":"CVE-2026-80836","month":"2026-09","title":"crypto: virtio - bound the akcipher result length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80836"},{"cve":"CVE-2026-80837","month":"2026-09","title":"netfilter: nf_tables: don't queue packet path object notifications","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80837"},{"cve":"CVE-2026-80840","month":"2026-09","title":"ipv6: seg6: clear IPv4 control block on IPIP decapsulation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80840"},{"cve":"CVE-2026-80841","month":"2026-09","title":"net/packet: defer vmalloc TX_RING free until skbs finish","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80841"},{"cve":"CVE-2026-80842","month":"2026-09","title":"net: bridge: mcast: fix use-after-free of a master VLAN's multicast context","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80842"},{"cve":"CVE-2026-80843","month":"2026-09","title":"xfrm: fix xfrm_state_construct() auth-trunc leak","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80843"},{"cve":"CVE-2026-80844","month":"2026-09","title":"xfrm: ah6: validate routing header segments_left","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80844"},{"cve":"CVE-2026-80847","month":"2026-09","title":"tcp: clamp route advmss to TCP_MIN_MSS","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80847"},{"cve":"CVE-2026-80852","month":"2026-09","title":"tls: device: fix out-of-bounds write in tls_append_frag()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80852"},{"cve":"CVE-2026-80855","month":"2026-09","title":"fuse: fix invalidate lock leak on open O_TRUNC DAX failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80855"},{"cve":"CVE-2026-80856","month":"2026-09","title":"fuse: fix invalidate lock leak on setattr writeback failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80856"},{"cve":"CVE-2026-80861","month":"2026-09","title":"usb: xhci: bail out of setup if the controller is inaccessible","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80861"},{"cve":"CVE-2026-80863","month":"2026-09","title":"RDMA/rxe: Fix OOB in free_rd_atomic_resources()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80863"},{"cve":"CVE-2026-80864","month":"2026-09","title":"RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80864"},{"cve":"CVE-2026-80866","month":"2026-09","title":"tipc: avoid busy looping in tipc_exit_net()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80866"},{"cve":"CVE-2026-80883","month":"2026-09","title":"drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80883"},{"cve":"CVE-2026-80884","month":"2026-09","title":"ntb: Store original DMA address for future release","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80884"},{"cve":"CVE-2026-80887","month":"2026-09","title":"drm/vmwgfx: use check_add_overflow for shader size+offset bound","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80887"},{"cve":"CVE-2026-80888","month":"2026-09","title":"drm/vmwgfx: drop dma_buf reference on foreign-fd prime import","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80888"},{"cve":"CVE-2026-80890","month":"2026-09","title":"sctp: reject stale cookies with mismatched verification tags","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80890"},{"cve":"CVE-2026-80893","month":"2026-09","title":"mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80893"},{"cve":"CVE-2026-80901","month":"2026-09","title":"ipvs: fix the checksum validations","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80901"},{"cve":"CVE-2026-80902","month":"2026-09","title":"dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80902"},{"cve":"CVE-2026-80904","month":"2026-09","title":"net/tls: Fail tls_sw_splice_read() after a failed async decrypt","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80904"},{"cve":"CVE-2026-80905","month":"2026-09","title":"net: tap: fix wrong transport_header when sending VLAN-tagged frame","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80905"},{"cve":"CVE-2026-80906","month":"2026-09","title":"net: packet: fix wrong transport_header when sending VLAN-tagged frame","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80906"},{"cve":"CVE-2026-80907","month":"2026-09","title":"drm/amdgpu: Fix UVD dpb min size calculation for H264","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80907"},{"cve":"CVE-2026-80908","month":"2026-09","title":"drm/amdgpu: Reject UVD message with dimensions above 4096","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80908"},{"cve":"CVE-2026-80909","month":"2026-09","title":"drm/amdgpu: Reject UVD message with invalid number of h265 refs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80909"},{"cve":"CVE-2026-80911","month":"2026-09","title":"ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80911"},{"cve":"CVE-2026-80912","month":"2026-09","title":"selinux: reject an unclaimed class value in security_get_classes()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80912"},{"cve":"CVE-2026-80913","month":"2026-09","title":"selinux: require every boolean value to be defined","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80913"},{"cve":"CVE-2026-80914","month":"2026-09","title":"Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80914"},{"cve":"CVE-2026-80917","month":"2026-09","title":"PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80917"},{"cve":"CVE-2026-80918","month":"2026-09","title":"HID: core: fix number/pointer type confusion on long items","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80918"},{"cve":"CVE-2026-80920","month":"2026-09","title":"io_uring: defer eventfd signaling when queued from a wakeup handler","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80920"},{"cve":"CVE-2026-80923","month":"2026-09","title":"xhci: dbgtty: Fix unregister on tty_register_driver() failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80923"},{"cve":"CVE-2026-80925","month":"2026-09","title":"vlan: fix skb_under_panic and races when toggling HW VLAN offload","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80925"},{"cve":"CVE-2026-80931","month":"2026-09","title":"w1: ds28e17: reject an oversize length on an I2C block read","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80931"},{"cve":"CVE-2026-80947","month":"2026-09","title":"wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80947"},{"cve":"CVE-2026-80948","month":"2026-09","title":"wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.6,"vector":"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80948"},{"cve":"CVE-2026-80949","month":"2026-09","title":"wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80949"},{"cve":"CVE-2026-80952","month":"2026-09","title":"i3c: master: Fix info leak and UAF in device unregister path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80952"},{"cve":"CVE-2026-80977","month":"2026-09","title":"net: skbuff: don't touch shared zerocopy state in skb_tx_error()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80977"},{"cve":"CVE-2026-80979","month":"2026-09","title":"net/smc: unregister the connection before draining the rx tasklet","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80979"},{"cve":"CVE-2026-80980","month":"2026-09","title":"net/smc: stop killed, freed and out_of_sync sharing a byte","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80980"},{"cve":"CVE-2026-80982","month":"2026-09","title":"net/smc: fix use-after-free in smc_rx_pipe_buf_release()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80982"},{"cve":"CVE-2026-80983","month":"2026-09","title":"net/smc: fix socket refcount leak in smc_switch_conns()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80983"},{"cve":"CVE-2026-80991","month":"2026-09","title":"net: ravb: serialize PTP clock teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80991"},{"cve":"CVE-2026-80994","month":"2026-09","title":"net: openvswitch: fix flow mask use-after-free on flow deletion","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80994"},{"cve":"CVE-2026-80996","month":"2026-09","title":"net: l2tp: do not propagate multicast notification errors","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80996"},{"cve":"CVE-2026-80999","month":"2026-09","title":"net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80999"},{"cve":"CVE-2026-81002","month":"2026-09","title":"xdp: fix zero-copy frame layout","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81002"},{"cve":"CVE-2026-81005","month":"2026-09","title":"ipmi: si: Fix NULL pointer dereference after failed registration","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81005"},{"cve":"CVE-2026-81563","month":"2026-09","title":"SVCB AliasMode additional-data error leaks qpcache references","family":"Other","component":"Mariner","cna":"isc","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81563"},{"cve":"CVE-2026-81627","month":"2026-09","title":"Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81627"},{"cve":"CVE-2026-81634","month":"2026-09","title":"Possible heap buffer overflow during DNSSEC canonicalization","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81634"},{"cve":"CVE-2026-81642","month":"2026-09","title":"Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81642"},{"cve":"CVE-2026-81870","month":"2026-09","title":"OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81870"},{"cve":"CVE-2026-81871","month":"2026-09","title":"OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81871"},{"cve":"CVE-2026-81872","month":"2026-09","title":"OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81872"},{"cve":"CVE-2026-82049","month":"2026-09","title":"tarfile extraction filters allow file modification and content disclosure via hard link to symlink","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82049"},{"cve":"CVE-2026-82412","month":"2026-09","title":"ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82412"},{"cve":"CVE-2026-82560","month":"2026-09","title":"Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82560"},{"cve":"CVE-2026-82717","month":"2026-09","title":"CNAME synthesis could lead to heap corruption","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82717"},{"cve":"CVE-2026-82720","month":"2026-09","title":"Use-after-free in DoH stream cleanup code path","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82720"},{"cve":"CVE-2026-83621","month":"2026-09","title":"ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83621"},{"cve":"CVE-2026-84233","month":"2026-09","title":"Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84233"},{"cve":"CVE-2026-84304","month":"2026-09","title":"gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84304"},{"cve":"CVE-2026-84445","month":"2026-09","title":"gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-129"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84445"},{"cve":"CVE-2026-84782","month":"2026-09","title":"DTLS Retransmits Handshake Messages From a Stale Buffer Offset","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84782"},{"cve":"CVE-2026-84784","month":"2026-09","title":"QUIC: Unbounded RETIRE_CONNECTION_ID Backlog","family":"Other","component":"Mariner","cna":"openssl","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84784"},{"cve":"CVE-2026-84838","month":"2026-09","title":"Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84838"},{"cve":"CVE-2026-84990","month":"2026-09","title":"ntopng: Missing Authorization on System Configuration Backup Download and Listing","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84990"},{"cve":"CVE-2026-85013","month":"2026-09","title":"Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85013"},{"cve":"CVE-2026-85091","month":"2026-09","title":"zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85091"},{"cve":"CVE-2026-85197","month":"2026-09","title":"Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85197"},{"cve":"CVE-2026-85501","month":"2026-09","title":"Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC","family":"Other","component":"Mariner","cna":"NLnet Labs","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85501"},{"cve":"CVE-2026-85504","month":"2026-09","title":"FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85504"},{"cve":"CVE-2026-85505","month":"2026-09","title":"ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 (which has different affected versions).","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85505"},{"cve":"CVE-2026-85506","month":"2026-09","title":"ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info).","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85506"},{"cve":"CVE-2026-85507","month":"2026-09","title":"ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info).","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85507"},{"cve":"CVE-2026-85508","month":"2026-09","title":"ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info).","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85508"},{"cve":"CVE-2026-85509","month":"2026-09","title":"FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85509"},{"cve":"CVE-2026-85534","month":"2026-09","title":"Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85534"},{"cve":"CVE-2026-85769","month":"2026-09","title":"Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85769"},{"cve":"CVE-2026-86003","month":"2026-09","title":"CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-441"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86003"},{"cve":"CVE-2026-86090","month":"2026-09","title":"ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86090"},{"cve":"CVE-2026-86091","month":"2026-09","title":"ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86091"},{"cve":"CVE-2026-86098","month":"2026-09","title":"ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86098"},{"cve":"CVE-2026-86137","month":"2026-09","title":"In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86137"},{"cve":"CVE-2026-86138","month":"2026-09","title":"In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86138"},{"cve":"CVE-2026-86140","month":"2026-09","title":"In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86140"},{"cve":"CVE-2026-86142","month":"2026-09","title":"In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86142"},{"cve":"CVE-2026-86143","month":"2026-09","title":"In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-192"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86143"},{"cve":"CVE-2026-86144","month":"2026-09","title":"In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for example, the XML_PARSE_NONET flag, if (without it) a custom resource loader accesses the internet and triggers XML external entity injection, SSRF, or a denial of service (e.g., for an attacker-controlled internet resource that is intentionally slow).","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L","cwe":["CWE-669"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86144"},{"cve":"CVE-2026-86145","month":"2026-09","title":"PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","cwe":["CWE-424"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86145"},{"cve":"CVE-2026-8674","month":"2026-09","title":"Assertion failure in the DNS stub resolver with a long search domain","family":"Other","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-8674"},{"cve":"CVE-2026-86805","month":"2026-09","title":"AT_SECURE programs may load attacker-controlled code via $ORIGIN","family":"Other","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86805"},{"cve":"CVE-2026-87564","month":"2026-09","title":"Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)","family":"Other","component":"Mariner","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87564"},{"cve":"CVE-2026-87587","month":"2026-09","title":"Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","family":"Other","component":"Mariner","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87587"},{"cve":"CVE-2026-87601","month":"2026-09","title":"Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)","family":"Other","component":"Mariner","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87601"},{"cve":"CVE-2026-87612","month":"2026-09","title":"Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)","family":"Other","component":"Mariner","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87612"},{"cve":"CVE-2026-87625","month":"2026-09","title":"Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)","family":"Other","component":"Mariner","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87625"},{"cve":"CVE-2026-87766","month":"2026-09","title":"Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87766"},{"cve":"CVE-2026-87875","month":"2026-09","title":"Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87875"},{"cve":"CVE-2026-87876","month":"2026-09","title":"Cups: openprinting cups: remaining case-insensitive username matching in scheduler side paths (cve-2026-27447 follow-up)","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":3.0,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N/E:U","cwe":["CWE-178"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87876"},{"cve":"CVE-2026-87910","month":"2026-09","title":"tarfile hardlink fallback ignores custom extraction filter rejection via None","family":"Other","component":"Mariner","cna":"PSF","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87910"},{"cve":"CVE-2026-88372","month":"2026-09","title":"libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88372"},{"cve":"CVE-2026-88383","month":"2026-09","title":"libical 4.0.6 contains an incompatible function pointer in icalparameter_string_to_kind(). When parsing iCalendar data containing a parameterized property, the function passes icalparameter_compare_kind_map() to bsearch() through an incompatible comparator function pointer type. bsearch() invokes the callback through the mismatched type, resulting in undefined behavior and process termination, leading to denial of service.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88383"},{"cve":"CVE-2026-88386","month":"2026-09","title":"libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int * and perform a 4-byte store. This results in undefined behavior leading to denial of service.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88386"},{"cve":"CVE-2026-88806","month":"2026-09","title":"libX11 XkbGetMap Reply Heap-based Buffer Overflow","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88806"},{"cve":"CVE-2026-88807","month":"2026-09","title":"libXrender RenderQueryPictFormats Reply Heap-based Buffer Overflow","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88807"},{"cve":"CVE-2026-88815","month":"2026-09","title":"DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Moderate","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88815"},{"cve":"CVE-2026-88816","month":"2026-09","title":"DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName","family":"Other","component":"Mariner","cna":"CPANSec","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88816"},{"cve":"CVE-2026-88831","month":"2026-09","title":"Busybox: busybox: httpd silently fails open when ip deny rules contain invalid cidr prefix lengths","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-636"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88831"},{"cve":"CVE-2026-88832","month":"2026-09","title":"Busybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflow","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88832"},{"cve":"CVE-2026-88835","month":"2026-09","title":"Busybox: busybox: dpkg read_package_field() steps past nul terminator, causing out-of-bounds read on malformed .deb packages","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88835"},{"cve":"CVE-2026-88839","month":"2026-09","title":"Busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88839"},{"cve":"CVE-2026-89092","month":"2026-09","title":"Stack overflow in nscd due to unbounded alloca use","family":"Other","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89092"},{"cve":"CVE-2026-89102","month":"2026-09","title":"OCSP stapling v2 multi accepts non-CA chain certificates as issuers","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89102"},{"cve":"CVE-2026-89133","month":"2026-09","title":"NameConstraints not enforced across unconstrained intermediate CA","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89133"},{"cve":"CVE-2026-89135","month":"2026-09","title":"Failed X509_verify_cert leaves unverified CA in shared CertManager","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89135"},{"cve":"CVE-2026-89136","month":"2026-09","title":"Client accepts unsolicited RawPublicKey server certificate type","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89136"},{"cve":"CVE-2026-89156","month":"2026-09","title":"PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89156"},{"cve":"CVE-2026-89157","month":"2026-09","title":"PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L/E:U","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89157"},{"cve":"CVE-2026-89158","month":"2026-09","title":"PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L/E:U","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89158"},{"cve":"CVE-2026-89160","month":"2026-09","title":"PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89160"},{"cve":"CVE-2026-89329","month":"2026-09","title":"Device-mapper-multipath: local denial of service via blocking ipc send operations","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-1322"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89329"},{"cve":"CVE-2026-89422","month":"2026-09","title":"TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension","family":"Other","component":"Mariner","cna":"EEF","label":"(none)","labels":[],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-322"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89422"},{"cve":"CVE-2026-89448","month":"2026-09","title":"iommu/vt-d: Force requesting ACS when tboot is enabled","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89448"},{"cve":"CVE-2026-89461","month":"2026-09","title":"power: supply: max17040: synchronize work cancellation on suspend","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89461"},{"cve":"CVE-2026-89462","month":"2026-09","title":"power: supply: max17040: propagate register read errors","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.9,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89462"},{"cve":"CVE-2026-89469","month":"2026-09","title":"power: supply: lp8727: fix use-after-free in lp8727_release_irq()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89469"},{"cve":"CVE-2026-89473","month":"2026-09","title":"power: supply: bq25890: Fix power_supply reference leak","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89473"},{"cve":"CVE-2026-89476","month":"2026-09","title":"sctp: fix stream->outcnt underflow on duplicate RECONF responses","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89476"},{"cve":"CVE-2026-89477","month":"2026-09","title":"sctp: fix NULL deref on untransmitted RECONF completion","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89477"},{"cve":"CVE-2026-89479","month":"2026-09","title":"sctp: stop processing a packet once its association is deleted","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89479"},{"cve":"CVE-2026-89481","month":"2026-09","title":"nvme-tcp: fix host memory disclosure on R2T for a read command","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89481"},{"cve":"CVE-2026-89482","month":"2026-09","title":"nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89482"},{"cve":"CVE-2026-89487","month":"2026-09","title":"openvswitch: only skb_tx_error() a packet we are about to drop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89487"},{"cve":"CVE-2026-89510","month":"2026-09","title":"RDMA/cxgb4: Cancel reg_work before freeing device on remove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89510"},{"cve":"CVE-2026-89526","month":"2026-09","title":"svcrdma: Validate Read chunk positions before reconstruction","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89526"},{"cve":"CVE-2026-89528","month":"2026-09","title":"svcrdma: Reject Read lists that exceed the page budget","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89528"},{"cve":"CVE-2026-89531","month":"2026-09","title":"svcrdma: Reject connection when transport allocation fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89531"},{"cve":"CVE-2026-89532","month":"2026-09","title":"svcrdma: Fix pcl_for_each_segment for empty chunks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89532"},{"cve":"CVE-2026-89537","month":"2026-09","title":"SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89537"},{"cve":"CVE-2026-89538","month":"2026-09","title":"SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89538"},{"cve":"CVE-2026-89539","month":"2026-09","title":"SUNRPC: reject duplicate CREDS_VALUE options","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89539"},{"cve":"CVE-2026-89540","month":"2026-09","title":"sunrpc: init gssp_lock before publishing proc entry","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89540"},{"cve":"CVE-2026-89542","month":"2026-09","title":"SUNRPC: harden gss_krb5_unwrap_v2 against short tokens","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89542"},{"cve":"CVE-2026-89544","month":"2026-09","title":"SUNRPC: fix gssx_dec_option_array error path bugs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89544"},{"cve":"CVE-2026-89545","month":"2026-09","title":"sunrpc: defer rq_argp and rq_resp free until after RCU grace period","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89545"},{"cve":"CVE-2026-89547","month":"2026-09","title":"SUNRPC: Check svc pool percpu counter allocation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89547"},{"cve":"CVE-2026-89548","month":"2026-09","title":"SUNRPC: always drain cache_cleaner before destroying a cache_detail","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89548"},{"cve":"CVE-2026-89550","month":"2026-09","title":"SUNRPC: svcauth_gss: enforce krb5 token minimum length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89550"},{"cve":"CVE-2026-89551","month":"2026-09","title":"SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89551"},{"cve":"CVE-2026-89562","month":"2026-09","title":"ip6_gre: fix hardware header length for NBMA tunnels","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89562"},{"cve":"CVE-2026-89564","month":"2026-09","title":"ip: orphan prefetched skbs before multicast forwarding","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89564"},{"cve":"CVE-2026-89565","month":"2026-09","title":"ipip: fix skb leak in collect_md mode when metadata_dst allocation fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89565"},{"cve":"CVE-2026-89567","month":"2026-09","title":"jbd2: bound shrinker scans by examined checkpoint buffers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89567"},{"cve":"CVE-2026-89569","month":"2026-09","title":"Bluetooth: RFCOMM: serialize security confirmation handling","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89569"},{"cve":"CVE-2026-89573","month":"2026-09","title":"dm array: reject an array block whose value size is not the caller's","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89573"},{"cve":"CVE-2026-89582","month":"2026-09","title":"bnx2x: fix double free in bnx2x_init_firmware() error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.8,"vector":"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89582"},{"cve":"CVE-2026-89596","month":"2026-09","title":"forcedeth: fix off-by-one when saving/restoring non-PCI config space","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89596"},{"cve":"CVE-2026-89597","month":"2026-09","title":"fbdev: uvesafb: unregister connector callback on init failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89597"},{"cve":"CVE-2026-89598","month":"2026-09","title":"fbdev: ssd1307fb: defer I2C transfers from damage callbacks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89598"},{"cve":"CVE-2026-89604","month":"2026-09","title":"efivarfs: Rate limit statfs() handler","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89604"},{"cve":"CVE-2026-89610","month":"2026-09","title":"ntfs: verify run length exceeding volume boundary","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89610"},{"cve":"CVE-2026-89611","month":"2026-09","title":"ntfs: validate non-resident attribute offsets","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89611"},{"cve":"CVE-2026-89625","month":"2026-09","title":"HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89625"},{"cve":"CVE-2026-89627","month":"2026-09","title":"HID: roccat: free buffered reports when destroying device","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89627"},{"cve":"CVE-2026-89628","month":"2026-09","title":"HID: picolcd: clamp eeprom debugfs read to bytes actually received","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.9,"vector":"CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89628"},{"cve":"CVE-2026-89631","month":"2026-09","title":"smb: client: reject a tree connect response whose byte count is too small","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89631"},{"cve":"CVE-2026-89632","month":"2026-09","title":"smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89632"},{"cve":"CVE-2026-89638","month":"2026-09","title":"smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89638"},{"cve":"CVE-2026-89642","month":"2026-09","title":"cifs: call pagecache_isize_extended() in cifs_setsize() when extending","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89642"},{"cve":"CVE-2026-89643","month":"2026-09","title":"audit: avoid dropping live tree ref on fsnotify rule autoremove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89643"},{"cve":"CVE-2026-89645","month":"2026-09","title":"btrfs: drop recovered reloc root refs on recovery failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89645"},{"cve":"CVE-2026-89647","month":"2026-09","title":"ceph: do not repeat ceph_trim_dentries() if no progress possible","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89647"},{"cve":"CVE-2026-89648","month":"2026-09","title":"ceph: cap delegated inode count in ceph_parse_deleg_inos()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89648"},{"cve":"CVE-2026-89649","month":"2026-09","title":"ceph: bound xattr value length in __build_xattrs()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89649"},{"cve":"CVE-2026-89650","month":"2026-09","title":"ceph: bound num_export_targets array for mds info v2/v3","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89650"},{"cve":"CVE-2026-89653","month":"2026-09","title":"ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89653"},{"cve":"CVE-2026-89656","month":"2026-09","title":"libceph: reject buckets with mismatched CRUSH ids","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89656"},{"cve":"CVE-2026-89657","month":"2026-09","title":"libceph: validate OSD extent maps before cursor advance","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89657"},{"cve":"CVE-2026-89659","month":"2026-09","title":"NFSD: Prevent client use-after-free during delegation revoke","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89659"},{"cve":"CVE-2026-89662","month":"2026-09","title":"NFSD: Prevent lock owner use-after-free during client teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89662"},{"cve":"CVE-2026-89669","month":"2026-09","title":"nfsd: initialize copy-notify stateid before publishing it","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89669"},{"cve":"CVE-2026-89671","month":"2026-09","title":"nfsd: gate nfs3 setacl by argp->mask","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89671"},{"cve":"CVE-2026-89685","month":"2026-09","title":"nfsd: fix clock domain mismatch in clients_still_reclaiming()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89685"},{"cve":"CVE-2026-89686","month":"2026-09","title":"nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89686"},{"cve":"CVE-2026-89694","month":"2026-09","title":"nfsd: check client ownership when cancelling a copy-notify stateid","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89694"},{"cve":"CVE-2026-89699","month":"2026-09","title":"nfsd: validate symlink target length in NFSv4 CREATE","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89699"},{"cve":"CVE-2026-89708","month":"2026-09","title":"nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89708"},{"cve":"CVE-2026-89709","month":"2026-09","title":"lockd, nfsd: RCU-protect nlmsvc_ops dispatch","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89709"},{"cve":"CVE-2026-89726","month":"2026-09","title":"lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89726"},{"cve":"CVE-2026-89729","month":"2026-09","title":"HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89729"},{"cve":"CVE-2026-89740","month":"2026-09","title":"serial: imx: serialize imx_uart_ports[] lifetime","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89740"},{"cve":"CVE-2026-89741","month":"2026-09","title":"Revert \"media: v4l2-dev: fix error handling in __video_register_device()\"","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89741"},{"cve":"CVE-2026-89742","month":"2026-09","title":"rapidio: mport_cdev: fix use-after-free in dma_req_free()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89742"},{"cve":"CVE-2026-89746","month":"2026-09","title":"tracing: Fix use-after-free with same-name named triggers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89746"},{"cve":"CVE-2026-89750","month":"2026-09","title":"tracing/user_events: Clear copied tracing state before fork duplication","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89750"},{"cve":"CVE-2026-89753","month":"2026-09","title":"mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89753"},{"cve":"CVE-2026-89755","month":"2026-09","title":"mm/migrate_device: clear stale mapping after freeing swapcache","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89755"},{"cve":"CVE-2026-89756","month":"2026-09","title":"mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89756"},{"cve":"CVE-2026-89757","month":"2026-09","title":"mm/mglru: fix and remove redundant unevictable folio handling","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89757"},{"cve":"CVE-2026-89762","month":"2026-09","title":"apparmor: fix cred UAF caused by begin_current_label_crit_section()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89762"},{"cve":"CVE-2026-89768","month":"2026-09","title":"fs: fix user path of nested backing files","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89768"},{"cve":"CVE-2026-89777","month":"2026-09","title":"vfio/pci: clear vdev->msi_perm after freeing it on init failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89777"},{"cve":"CVE-2026-89778","month":"2026-09","title":"isofs: fix out-of-bounds page array access on empty zisofs block","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89778"},{"cve":"CVE-2026-89779","month":"2026-09","title":"fs/ntfs3: validate ef->size covers the record's name and value","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89779"},{"cve":"CVE-2026-89781","month":"2026-09","title":"fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89781"},{"cve":"CVE-2026-89783","month":"2026-09","title":"xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89783"},{"cve":"CVE-2026-89784","month":"2026-09","title":"SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89784"},{"cve":"CVE-2026-89785","month":"2026-09","title":"fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89785"},{"cve":"CVE-2026-89786","month":"2026-09","title":"ext4: fix out-of-bounds read in ext4_read_inline_dir()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89786"},{"cve":"CVE-2026-89787","month":"2026-09","title":"ext4: check dir entry fits before reading the hash trailer in ext4_search_dir()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89787"},{"cve":"CVE-2026-89788","month":"2026-09","title":"ksmbd: fix tree connection use-after-free in smb2_tree_connect()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89788"},{"cve":"CVE-2026-89789","month":"2026-09","title":"gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89789"},{"cve":"CVE-2026-89793","month":"2026-09","title":"ublk: clear VM_MAYWRITE on read-only ublk char device mmap","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89793"},{"cve":"CVE-2026-89795","month":"2026-09","title":"PCI: Allow per function PCI slots to fix slot reset on s390","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89795"},{"cve":"CVE-2026-89796","month":"2026-09","title":"mm/damon/core: avoid infinite kdamond_merge_regions() internal loop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89796"},{"cve":"CVE-2026-89797","month":"2026-09","title":"power: supply: ab8500_fg: fix use-after-free on remove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89797"},{"cve":"CVE-2026-89799","month":"2026-09","title":"bpf: Disable preemption in bpf_get_stackid","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89799"},{"cve":"CVE-2026-89800","month":"2026-09","title":"drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89800"},{"cve":"CVE-2026-89801","month":"2026-09","title":"drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89801"},{"cve":"CVE-2026-89802","month":"2026-09","title":"drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89802"},{"cve":"CVE-2026-89806","month":"2026-09","title":"drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89806"},{"cve":"CVE-2026-89809","month":"2026-09","title":"drm/amdkfd: fix scope of mqd_mgr dereference in pqm_debugfs_mqds","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89809"},{"cve":"CVE-2026-89810","month":"2026-09","title":"drm/amdkfd: Fix error path at svm_migrate_copy_to_ram","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89810"},{"cve":"CVE-2026-89811","month":"2026-09","title":"drm/amdkfd: Add TLB flush after MES queue eviction/suspension","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89811"},{"cve":"CVE-2026-89812","month":"2026-09","title":"drm/amdgpu: force complete the MES ring fences on reset","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89812"},{"cve":"CVE-2026-89813","month":"2026-09","title":"drm/amdgpu: force complete the KIQ ring fences on reset","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89813"},{"cve":"CVE-2026-89816","month":"2026-09","title":"drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89816"},{"cve":"CVE-2026-89817","month":"2026-09","title":"drm/gud: NUL-terminate TV mode names read from the device","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89817"},{"cve":"CVE-2026-89818","month":"2026-09","title":"drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89818"},{"cve":"CVE-2026-89821","month":"2026-09","title":"drm/amd/display: avoid divide-by-zero in __is_lut_linear()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89821"},{"cve":"CVE-2026-89822","month":"2026-09","title":"drm/i915: Guard against NULL driver_data in i915_pci_probe()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89822"},{"cve":"CVE-2026-89823","month":"2026-09","title":"drm: fix race between partial drm_dev_register() failure and ioctl","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89823"},{"cve":"CVE-2026-89833","month":"2026-09","title":"f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89833"},{"cve":"CVE-2026-89837","month":"2026-09","title":"f2fs: fix dentry folio leak in find_in_level","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89837"},{"cve":"CVE-2026-89839","month":"2026-09","title":"f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89839"},{"cve":"CVE-2026-89840","month":"2026-09","title":"f2fs: validate MOVE_RANGE destination size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89840"},{"cve":"CVE-2026-89842","month":"2026-09","title":"scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89842"},{"cve":"CVE-2026-89843","month":"2026-09","title":"scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89843"},{"cve":"CVE-2026-89844","month":"2026-09","title":"scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89844"},{"cve":"CVE-2026-89845","month":"2026-09","title":"scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89845"},{"cve":"CVE-2026-89847","month":"2026-09","title":"scsi: qla2xxx: Avoid double completion in async IOCB timeout","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89847"},{"cve":"CVE-2026-89849","month":"2026-09","title":"scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89849"},{"cve":"CVE-2026-89850","month":"2026-09","title":"scsi: qla2xxx: Don't query firmware state while chip is down","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89850"},{"cve":"CVE-2026-89852","month":"2026-09","title":"scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89852"},{"cve":"CVE-2026-89853","month":"2026-09","title":"scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89853"},{"cve":"CVE-2026-89854","month":"2026-09","title":"scsi: qla2xxx: Fix cs84xx use-after-free on host teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89854"},{"cve":"CVE-2026-89856","month":"2026-09","title":"scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89856"},{"cve":"CVE-2026-89858","month":"2026-09","title":"scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89858"},{"cve":"CVE-2026-89859","month":"2026-09","title":"scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89859"},{"cve":"CVE-2026-89860","month":"2026-09","title":"scsi: qla2xxx: Initialize NVMe abort_work once at submission","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89860"},{"cve":"CVE-2026-89861","month":"2026-09","title":"scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89861"},{"cve":"CVE-2026-89862","month":"2026-09","title":"scsi: qla2xxx: Fix BSG job leak on validate flash image error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89862"},{"cve":"CVE-2026-89863","month":"2026-09","title":"scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89863"},{"cve":"CVE-2026-89864","month":"2026-09","title":"scsi: qla2xxx: Bound i2c->length in I2C bsg handlers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89864"},{"cve":"CVE-2026-89865","month":"2026-09","title":"scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89865"},{"cve":"CVE-2026-89870","month":"2026-09","title":"media: zoran: Avoid freeing a registered video_device twice","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89870"},{"cve":"CVE-2026-89871","month":"2026-09","title":"media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89871"},{"cve":"CVE-2026-89872","month":"2026-09","title":"media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89872"},{"cve":"CVE-2026-89874","month":"2026-09","title":"media: v4l2-async: avoid deleting unlinked ASC entry on link error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89874"},{"cve":"CVE-2026-89878","month":"2026-09","title":"media: s2255: check firmware size before reading trailing marker","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89878"},{"cve":"CVE-2026-89879","month":"2026-09","title":"media: s2255: bound JPEG frame size before copying into the buffer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89879"},{"cve":"CVE-2026-89881","month":"2026-09","title":"media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89881"},{"cve":"CVE-2026-89883","month":"2026-09","title":"media: rc: sunxi-cir: Unregister rc device on probe failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89883"},{"cve":"CVE-2026-89884","month":"2026-09","title":"media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89884"},{"cve":"CVE-2026-89887","month":"2026-09","title":"media: i2c: ov7740: fix use-after-destroy in remove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89887"},{"cve":"CVE-2026-89888","month":"2026-09","title":"media: i2c: ov02a10: fix endpoint parsing use-after-free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89888"},{"cve":"CVE-2026-89890","month":"2026-09","title":"media: go7007: defer the ALSA v4l2 put until card release","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89890"},{"cve":"CVE-2026-89891","month":"2026-09","title":"media: em28xx: fix use-after-free of dev_next->devlist on disconnect","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89891"},{"cve":"CVE-2026-89892","month":"2026-09","title":"media: em28xx: defer audio-only extension registration","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89892"},{"cve":"CVE-2026-89893","month":"2026-09","title":"media: cx23885: cancel NetUP CI work before teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89893"},{"cve":"CVE-2026-89894","month":"2026-09","title":"media: cx231xx: reject geometry changes while the VBI queue is busy","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89894"},{"cve":"CVE-2026-89896","month":"2026-09","title":"media: cedrus: fix memory leak in cedrus_init_ctrls()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89896"},{"cve":"CVE-2026-89897","month":"2026-09","title":"media: cec: Serialize exclusive follower delivery","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89897"},{"cve":"CVE-2026-89899","month":"2026-09","title":"media: cec: disable delayed work before freeing an interrupted transmit","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89899"},{"cve":"CVE-2026-89900","month":"2026-09","title":"media: cec: core: Fix kmemleak due to missed rc_free_device() call","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89900"},{"cve":"CVE-2026-89901","month":"2026-09","title":"media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89901"},{"cve":"CVE-2026-89902","month":"2026-09","title":"LoongArch: Avoid preempt count underflow without probe","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89902"},{"cve":"CVE-2026-89906","month":"2026-09","title":"LoongArch: BPF: Refactor jump offset calculation in tail call","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89906"},{"cve":"CVE-2026-89913","month":"2026-09","title":"KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89913"},{"cve":"CVE-2026-89920","month":"2026-09","title":"KVM: s390: Fix memory corruption by not reinjecting CK machine checks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89920"},{"cve":"CVE-2026-89922","month":"2026-09","title":"KVM: s390: Take srcu when importing watchpoint data","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89922"},{"cve":"CVE-2026-89923","month":"2026-09","title":"KVM: s390: Free guest debug data on vcpu destroy","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89923"},{"cve":"CVE-2026-89924","month":"2026-09","title":"KVM: s390: Fix old_data leak in guest debug error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89924"},{"cve":"CVE-2026-89927","month":"2026-09","title":"KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89927"},{"cve":"CVE-2026-89929","month":"2026-09","title":"KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89929"},{"cve":"CVE-2026-89930","month":"2026-09","title":"KVM: nVMX: Service local TLB flushes on failed nested VM-Enter","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89930"},{"cve":"CVE-2026-89932","month":"2026-09","title":"KVM: nVMX: Always flush vpid02 on first use","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89932"},{"cve":"CVE-2026-89933","month":"2026-09","title":"iio: pressure: dps310: fix NULL pointer dereference on ACPI probe","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89933"},{"cve":"CVE-2026-89934","month":"2026-09","title":"iio: light: ltrf216a: fix runtime PM reference leak in error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89934"},{"cve":"CVE-2026-89937","month":"2026-09","title":"iio: chemical: sgp30: Handle IAQ thread creation failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89937"},{"cve":"CVE-2026-89938","month":"2026-09","title":"iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89938"},{"cve":"CVE-2026-89939","month":"2026-09","title":"iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89939"},{"cve":"CVE-2026-89945","month":"2026-09","title":"ASoC: cs35l34: drain threaded IRQ before runtime suspend","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89945"},{"cve":"CVE-2026-89946","month":"2026-09","title":"ASoC: cs35l33: drain threaded IRQ before runtime suspend","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89946"},{"cve":"CVE-2026-89947","month":"2026-09","title":"clk: meson: align gxbb_32k_clk_sel number of parents with actual count","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89947"},{"cve":"CVE-2026-89948","month":"2026-09","title":"batman-adv: bla: fix freeing of claims on meshif deletion","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89948"},{"cve":"CVE-2026-89952","month":"2026-09","title":"mtd: rawnand: validate ONFI extended parameter page sections","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89952"},{"cve":"CVE-2026-89953","month":"2026-09","title":"mtd: mtdoops: free page bitmap when the backing MTD is removed","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89953"},{"cve":"CVE-2026-89955","month":"2026-09","title":"s390/vfio-ap: Fix NULL deref in status_show() during queue probe","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89955"},{"cve":"CVE-2026-89956","month":"2026-09","title":"s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89956"},{"cve":"CVE-2026-89959","month":"2026-09","title":"s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89959"},{"cve":"CVE-2026-89960","month":"2026-09","title":"s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89960"},{"cve":"CVE-2026-89961","month":"2026-09","title":"powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89961"},{"cve":"CVE-2026-89962","month":"2026-09","title":"powerpc/kexec_file: Prevent kexec range truncation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89962"},{"cve":"CVE-2026-89965","month":"2026-09","title":"nvdimm/btt: reject an arena whose nfree is below the lane count","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89965"},{"cve":"CVE-2026-89968","month":"2026-09","title":"nvmet-tcp: reject unsolicited H2CData PDUs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89968"},{"cve":"CVE-2026-89969","month":"2026-09","title":"nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89969"},{"cve":"CVE-2026-89970","month":"2026-09","title":"nvmet-auth: Synchronize timeout work during SQ teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89970"},{"cve":"CVE-2026-89972","month":"2026-09","title":"nvme: add missing SRCU grace period in error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89972"},{"cve":"CVE-2026-89975","month":"2026-09","title":"nvme-fabrics: fix DHCHAP secret leak on parse failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89975"},{"cve":"CVE-2026-89982","month":"2026-09","title":"i2c: mux: Fix channel node leak on adapter add failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89982"},{"cve":"CVE-2026-89984","month":"2026-09","title":"perf/x86/intel: Fix kernel address leakages in LBR stack","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89984"},{"cve":"CVE-2026-89987","month":"2026-09","title":"mm/huge_memory: transfer the pmd dirty bit to the folio on zap","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89987"},{"cve":"CVE-2026-89988","month":"2026-09","title":"kprobes: Protect kprobe_blacklist with RCU","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89988"},{"cve":"CVE-2026-89989","month":"2026-09","title":"ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89989"},{"cve":"CVE-2026-89992","month":"2026-09","title":"cpuidle: dt_idle_genpd: kfree() the original name allocation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89992"},{"cve":"CVE-2026-89993","month":"2026-09","title":"dmaengine: dw-edma: Initialize IRQ data before requesting IRQs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89993"},{"cve":"CVE-2026-89995","month":"2026-09","title":"dma-direct: return struct page from dma_direct_alloc_from_pool()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89995"},{"cve":"CVE-2026-89999","month":"2026-09","title":"HID: wacom: validate report length in wacom_intuos_pro2_bt_irq","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89999"},{"cve":"CVE-2026-90000","month":"2026-09","title":"HID: rmi: fix OOB access with undersized RMI reports","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90000"},{"cve":"CVE-2026-90002","month":"2026-09","title":"ftrace: Take trace_array reference before accessing its ftrace_ops","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90002"},{"cve":"CVE-2026-90007","month":"2026-09","title":"scsi: pm8001: Use rollback index when freeing MSI-X vectors","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90007"},{"cve":"CVE-2026-90011","month":"2026-09","title":"scsi: target: iscsi: Reserve a terminator byte for the login payload","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90011"},{"cve":"CVE-2026-90013","month":"2026-09","title":"tracing: Take trace_array reference when opening options file","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90013"},{"cve":"CVE-2026-90015","month":"2026-09","title":"xhci: fix lost bounce buffers on TDs spanning several ring segments","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90015"},{"cve":"CVE-2026-90016","month":"2026-09","title":"staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90016"},{"cve":"CVE-2026-90017","month":"2026-09","title":"staging: rtl8723bs: fix OOB read in rtw_action_frame_parse()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90017"},{"cve":"CVE-2026-90018","month":"2026-09","title":"staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90018"},{"cve":"CVE-2026-90019","month":"2026-09","title":"usb: gadget: fix null pointer dereference in usb_put_function_instance()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90019"},{"cve":"CVE-2026-90020","month":"2026-09","title":"USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90020"},{"cve":"CVE-2026-90022","month":"2026-09","title":"usb: gadget: f_midi2: fix use-after-free in string attribute show path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90022"},{"cve":"CVE-2026-90023","month":"2026-09","title":"usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90023"},{"cve":"CVE-2026-90024","month":"2026-09","title":"usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90024"},{"cve":"CVE-2026-90025","month":"2026-09","title":"usb: typec: ucsi: displayport: Fix OOB altmode array index","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90025"},{"cve":"CVE-2026-90027","month":"2026-09","title":"usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90027"},{"cve":"CVE-2026-90030","month":"2026-09","title":"usb: dwc3: clear forceRM when issuing EndTransfer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90030"},{"cve":"CVE-2026-90031","month":"2026-09","title":"usb-storage: ene_ub6250: fix race between scan work and probe","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90031"},{"cve":"CVE-2026-90032","month":"2026-09","title":"media: usbtv: keep device alive while ALSA card exists","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90032"},{"cve":"CVE-2026-90033","month":"2026-09","title":"ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90033"},{"cve":"CVE-2026-90035","month":"2026-09","title":"drm/amd/display: fix division by zero in get_estimated_bw()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90035"},{"cve":"CVE-2026-90036","month":"2026-09","title":"NFSD: Prevent client use-after-free during blocked-lock reaping","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90036"},{"cve":"CVE-2026-90037","month":"2026-09","title":"NFSD: Prevent client use-after-free during close_lru reaping","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90037"},{"cve":"CVE-2026-90041","month":"2026-09","title":"HID: sony: clean up device list on probe failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90041"},{"cve":"CVE-2026-90042","month":"2026-09","title":"ceph: properly decrypt filenames in vmalloc() buffers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90042"},{"cve":"CVE-2026-90045","month":"2026-09","title":"USB: gadget: ffs: fix mm lifetime handling","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90045"},{"cve":"CVE-2026-90048","month":"2026-09","title":"fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90048"},{"cve":"CVE-2026-90049","month":"2026-09","title":"net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90049"},{"cve":"CVE-2026-90056","month":"2026-09","title":"net: fec: only stop PTP if it was initialized","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90056"},{"cve":"CVE-2026-90062","month":"2026-09","title":"netfilter: nf_tables: move hardware offload step after building the chain blob","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90062"},{"cve":"CVE-2026-90066","month":"2026-09","title":"samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90066"},{"cve":"CVE-2026-90067","month":"2026-09","title":"libceph: validate banner payload length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90067"},{"cve":"CVE-2026-90071","month":"2026-09","title":"net/sched: sch_teql: restore skb->dev on the slave failure path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90071"},{"cve":"CVE-2026-90073","month":"2026-09","title":"net/sched: hhf: clamp quantum before hhf_change() to avoid overflow","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90073"},{"cve":"CVE-2026-90074","month":"2026-09","title":"net/sched: fq_pie: clamp default quantum to avoid signed overflow","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90074"},{"cve":"CVE-2026-90075","month":"2026-09","title":"net/sched: fq_codel: clamp default quantum and mtu","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90075"},{"cve":"CVE-2026-90078","month":"2026-09","title":"net/sched: act_skbmod: fix length calculations and avoid invalid header warnings","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90078"},{"cve":"CVE-2026-90081","month":"2026-09","title":"net/rds: use wq_has_sleeper() in rds_cong_map_updated()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90081"},{"cve":"CVE-2026-90083","month":"2026-09","title":"net/sched: act_ife: Only operate on Ethernet frames","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90083"},{"cve":"CVE-2026-90088","month":"2026-09","title":"Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90088"},{"cve":"CVE-2026-90091","month":"2026-09","title":"Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90091"},{"cve":"CVE-2026-90092","month":"2026-09","title":"Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90092"},{"cve":"CVE-2026-90098","month":"2026-09","title":"net: sparx5: fix sleep in atomic context in MAC table access","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90098"},{"cve":"CVE-2026-90102","month":"2026-09","title":"NFSv4/pnfs: key the data server cache on the NFS version","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90102"},{"cve":"CVE-2026-90104","month":"2026-09","title":"NFSv4.1: zero referring call lists before decoding","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90104"},{"cve":"CVE-2026-90106","month":"2026-09","title":"net: bridge: arp/nd proxy: fix reading neigh ha","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90106"},{"cve":"CVE-2026-90107","month":"2026-09","title":"net/smc: free pending qentry in smc_llc_flow_stop() before memset","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90107"},{"cve":"CVE-2026-90108","month":"2026-09","title":"net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90108"},{"cve":"CVE-2026-90109","month":"2026-09","title":"net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90109"},{"cve":"CVE-2026-90119","month":"2026-09","title":"ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90119"},{"cve":"CVE-2026-90124","month":"2026-09","title":"irqchip/renesas-rzg2l: Fix loss of interrupt","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90124"},{"cve":"CVE-2026-90126","month":"2026-09","title":"rtc: pcf8563: fix clock provider leak on unbind","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90126"},{"cve":"CVE-2026-90130","month":"2026-09","title":"vdpa_sim: fix cleanup after worker creation failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90130"},{"cve":"CVE-2026-90140","month":"2026-09","title":"cuse: wait for pending RCU callbacks on module exit","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90140"},{"cve":"CVE-2026-90141","month":"2026-09","title":"ipvs: fix integer overflow in ftp helper port/address parsing","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90141"},{"cve":"CVE-2026-90143","month":"2026-09","title":"net: kcm: Hold RCU read lock while running BPF parser","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90143"},{"cve":"CVE-2026-90148","month":"2026-09","title":"NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90148"},{"cve":"CVE-2026-90150","month":"2026-09","title":"pnfs/blocklayout: Fix device leaks on parse failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90150"},{"cve":"CVE-2026-90154","month":"2026-09","title":"ksmbd: scope session state changes to bound connections","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90154"},{"cve":"CVE-2026-90156","month":"2026-09","title":"ksmbd: safely discard unregistered deferred locks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90156"},{"cve":"CVE-2026-90161","month":"2026-09","title":"erofs: fix interlaced ztailpacking pclusters","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90161"},{"cve":"CVE-2026-90162","month":"2026-09","title":"ksmbd: defer publishing granted locks to prevent UAF/double-free race","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90162"},{"cve":"CVE-2026-90166","month":"2026-09","title":"smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90166"},{"cve":"CVE-2026-90169","month":"2026-09","title":"ksmbd: free preauth sessions on connection teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90169"},{"cve":"CVE-2026-90170","month":"2026-09","title":"ksmbd: validate ipc response length before dereferencing its fields","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90170"},{"cve":"CVE-2026-90175","month":"2026-09","title":"smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90175"},{"cve":"CVE-2026-90182","month":"2026-09","title":"blk-iocost: clear delay state when freeing policy data","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90182"},{"cve":"CVE-2026-90184","month":"2026-09","title":"null_blk: serialize configfs attribute updates with device setup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90184"},{"cve":"CVE-2026-90188","month":"2026-09","title":"null_blk: free global tag_set on init error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90188"},{"cve":"CVE-2026-90189","month":"2026-09","title":"null_blk: register configfs subsystem after creating default devices","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90189"},{"cve":"CVE-2026-90202","month":"2026-09","title":"scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90202"},{"cve":"CVE-2026-90204","month":"2026-09","title":"ocfs2: validate DIO orphan slot during inode read","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90204"},{"cve":"CVE-2026-90205","month":"2026-09","title":"ocfs2: validate orphan slot during inode read","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90205"},{"cve":"CVE-2026-90206","month":"2026-09","title":"nvmet: fix max_qid race between configfs and controller allocation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90206"},{"cve":"CVE-2026-90208","month":"2026-09","title":"clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90208"},{"cve":"CVE-2026-90213","month":"2026-09","title":"firewire: core: fix memory leak in error path of build_tree()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90213"},{"cve":"CVE-2026-90218","month":"2026-09","title":"RDMA/cma: Fix WARNING in res_to_rt","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90218"},{"cve":"CVE-2026-90222","month":"2026-09","title":"nfc: pn533: hold a reference to the request skb during send_frame","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90222"},{"cve":"CVE-2026-90226","month":"2026-09","title":"nfc: llcp: avoid userspace overflow on invalid optlen","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90226"},{"cve":"CVE-2026-90227","month":"2026-09","title":"nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90227"},{"cve":"CVE-2026-90229","month":"2026-09","title":"nvme-apple: Destroy the admin queue on removal","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90229"},{"cve":"CVE-2026-90230","month":"2026-09","title":"nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90230"},{"cve":"CVE-2026-90235","month":"2026-09","title":"sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90235"},{"cve":"CVE-2026-90237","month":"2026-09","title":"netfilter: nft_ct: move custom expectation support to helper","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90237"},{"cve":"CVE-2026-90245","month":"2026-09","title":"fbdev: kyro: Validate overlay viewport coordinates","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90245"},{"cve":"CVE-2026-90250","month":"2026-09","title":"bpf, cgroup: Fix storage null-ptr-deref after replacing prog","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90250"},{"cve":"CVE-2026-90251","month":"2026-09","title":"Bluetooth: MSFT: validate evt_prefix_len against the response length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90251"},{"cve":"CVE-2026-90253","month":"2026-09","title":"Bluetooth: MGMT: free the mesh send cancel command when it is cancelled","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90253"},{"cve":"CVE-2026-90255","month":"2026-09","title":"Bluetooth: hci_conn: fix the SCO setup context lifetime","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90255"},{"cve":"CVE-2026-90263","month":"2026-09","title":"btrfs: check if root is readonly when setting posix acl","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90263"},{"cve":"CVE-2026-90264","month":"2026-09","title":"btrfs: always wait for ordered extents to avoid OE races","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90264"},{"cve":"CVE-2026-90265","month":"2026-09","title":"btrfs: defrag: fix deadlock between defrag and delalloc space reservation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90265"},{"cve":"CVE-2026-90274","month":"2026-09","title":"coresight: etm4x: fix underflow for usage of (nrseqstate - 1)","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90274"},{"cve":"CVE-2026-90279","month":"2026-09","title":"md/raid5: round bitmap stripes with sector division","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90279"},{"cve":"CVE-2026-90280","month":"2026-09","title":"phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90280"},{"cve":"CVE-2026-90281","month":"2026-09","title":"phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90281"},{"cve":"CVE-2026-90282","month":"2026-09","title":"phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90282"},{"cve":"CVE-2026-90284","month":"2026-09","title":"firmware_loader: do not queue completed sysfs fallback requests","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90284"},{"cve":"CVE-2026-90285","month":"2026-09","title":"scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90285"},{"cve":"CVE-2026-90291","month":"2026-09","title":"module/dups: Fix use-after-free in kmod_dup_req lifetime handling","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90291"},{"cve":"CVE-2026-90292","month":"2026-09","title":"RDMA/siw: Fix use-after-free in siw_accept()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90292"},{"cve":"CVE-2026-90295","month":"2026-09","title":"cpufreq: imx6q: fix out-of-bounds write when probed more than once","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90295"},{"cve":"CVE-2026-90297","month":"2026-09","title":"drm/sun4i: crtc: Propagate layer initialization error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90297"},{"cve":"CVE-2026-90298","month":"2026-09","title":"drm/sun4i: tcon: Drop TCON TOP device reference","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90298"},{"cve":"CVE-2026-90300","month":"2026-09","title":"bpf: Clear buf on error in __bpf_get_task_stack","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90300"},{"cve":"CVE-2026-90301","month":"2026-09","title":"ocfs2: o2hb: quiesce negotiate handlers and timeout work","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90301"},{"cve":"CVE-2026-90302","month":"2026-09","title":"ocfs2: synchronize heartbeat callbacks with o2net teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90302"},{"cve":"CVE-2026-90307","month":"2026-09","title":"RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90307"},{"cve":"CVE-2026-90308","month":"2026-09","title":"RDMA/erdma: Hold QP references for AE and CM processing","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90308"},{"cve":"CVE-2026-90309","month":"2026-09","title":"RDMA/erdma: Hold CQ references when processing EQ events","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90309"},{"cve":"CVE-2026-90313","month":"2026-09","title":"bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90313"},{"cve":"CVE-2026-90314","month":"2026-09","title":"remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90314"},{"cve":"CVE-2026-90318","month":"2026-09","title":"fat: release buffer head after rebuilding parent","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90318"},{"cve":"CVE-2026-90319","month":"2026-09","title":"rapidio: clear mport->net when rio_add_net() fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90319"},{"cve":"CVE-2026-90321","month":"2026-09","title":"ocfs2: validate inline xattrs during inode block validation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90321"},{"cve":"CVE-2026-90327","month":"2026-09","title":"phonet: pep: do not write beyond optlen in getsockopt","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90327"},{"cve":"CVE-2026-90329","month":"2026-09","title":"HID: synchronize input before cleaning up a failed probe","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90329"},{"cve":"CVE-2026-90330","month":"2026-09","title":"HID: logitech-hidpp: Fix FF device cleanup on init failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90330"},{"cve":"CVE-2026-90333","month":"2026-09","title":"dm-integrity: replace forgeable discard filler with a keyed sector marker","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90333"},{"cve":"CVE-2026-90334","month":"2026-09","title":"tty: clear cdev pointer after cdev_add() failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90334"},{"cve":"CVE-2026-90346","month":"2026-09","title":"wifi: nl80211: clean up color-change beacon data on errors","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90346"},{"cve":"CVE-2026-90347","month":"2026-09","title":"arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90347"},{"cve":"CVE-2026-90352","month":"2026-09","title":"wifi: mt76: mt7915: release hif2 reference on probe IRQ failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90352"},{"cve":"CVE-2026-90362","month":"2026-09","title":"drm/msm/dsi: Drop dev_pm_opp_set_rate(0)","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90362"},{"cve":"CVE-2026-90364","month":"2026-09","title":"ACPI: processor: Unregister cpufreq notifier on init failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90364"},{"cve":"CVE-2026-90366","month":"2026-09","title":"wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90366"},{"cve":"CVE-2026-90368","month":"2026-09","title":"wifi: mt76: mt7915: unwind state on add_interface failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90368"},{"cve":"CVE-2026-90370","month":"2026-09","title":"wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90370"},{"cve":"CVE-2026-90374","month":"2026-09","title":"wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[]","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90374"},{"cve":"CVE-2026-90379","month":"2026-09","title":"wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90379"},{"cve":"CVE-2026-90383","month":"2026-09","title":"misc: sgi-gru: remove interrupt-context page-table walks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90383"},{"cve":"CVE-2026-90387","month":"2026-09","title":"swiotlb: Preserve allocation virtual address for dynamic pools","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90387"},{"cve":"CVE-2026-90388","month":"2026-09","title":"iommu/dma: Check atomic pool allocation result directly","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90388"},{"cve":"CVE-2026-90389","month":"2026-09","title":"md: scope memalloc_noio to allocation critical sections","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90389"},{"cve":"CVE-2026-90391","month":"2026-09","title":"lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90391"},{"cve":"CVE-2026-90394","month":"2026-09","title":"power: supply: sc2731_charger: cancel work on remove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90394"},{"cve":"CVE-2026-90395","month":"2026-09","title":"power: supply: isp1704_charger: cancel work on remove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90395"},{"cve":"CVE-2026-90397","month":"2026-09","title":"firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90397"},{"cve":"CVE-2026-90411","month":"2026-09","title":"nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90411"},{"cve":"CVE-2026-90413","month":"2026-09","title":"IB/isert: reject login PDUs declaring more data than was received","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90413"},{"cve":"CVE-2026-90415","month":"2026-09","title":"RDMA/cxgb4: free STAG index when TPT entry write fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90415"},{"cve":"CVE-2026-90417","month":"2026-09","title":"RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90417"},{"cve":"CVE-2026-90418","month":"2026-09","title":"nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90418"},{"cve":"CVE-2026-90419","month":"2026-09","title":"nilfs2: prevent out-of-bounds read in super root block parsing","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90419"},{"cve":"CVE-2026-90781","month":"2026-09","title":"alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse()","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-193"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90781"},{"cve":"CVE-2026-90801","month":"2026-09","title":"GNU Binutils ld cache.c cache_bwrite buffer overflow","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Low","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","cwe":["CWE-120"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90801"},{"cve":"CVE-2026-90831","month":"2026-09","title":"GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Low","cvss":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","cwe":["CWE-119"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90831"},{"cve":"CVE-2026-91765","month":"2026-09","title":"SOAP: Unbounded Recursion in Server-Side cleanup_xml_node","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91765"},{"cve":"CVE-2026-91766","month":"2026-09","title":"Cross-origin credential leak in HTTP stream wrapper redirects","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91766"},{"cve":"CVE-2026-91767","month":"2026-09","title":"Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91767"},{"cve":"CVE-2026-91768","month":"2026-09","title":"IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-1023"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91768"},{"cve":"CVE-2026-91769","month":"2026-09","title":"TLS Hostname Verification Falls Back to CN After SAN Mismatch","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-297"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91769"},{"cve":"CVE-2026-91779","month":"2026-09","title":"GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91779"},{"cve":"CVE-2026-91780","month":"2026-09","title":"GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91780"},{"cve":"CVE-2026-91781","month":"2026-09","title":"GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91781"},{"cve":"CVE-2026-91986","month":"2026-09","title":"gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Low","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cwe":["CWE-74"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91986"},{"cve":"CVE-2026-92382","month":"2026-09","title":"Usbredir: usbredir: unbounded iso_packet_desc[] index in usbredirhost_iso_packet() leads to heap out-of-bounds write","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92382"},{"cve":"CVE-2026-92476","month":"2026-09","title":"crypto: keembay - Initialize completion before requesting IRQ","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92476"},{"cve":"CVE-2026-92477","month":"2026-09","title":"scsi: ufs: debugfs: Reserve space for a string terminator","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92477"},{"cve":"CVE-2026-92484","month":"2026-09","title":"cxl/region: Fix use-after-free in find_pos_and_ways() error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92484"},{"cve":"CVE-2026-92489","month":"2026-09","title":"xfrm: Fix skb double-free in xfrm_dev_direct_output()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92489"},{"cve":"CVE-2026-92493","month":"2026-09","title":"cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92493"},{"cve":"CVE-2026-92494","month":"2026-09","title":"ext4: fix buffer_head leak in ext4_init_orphan_info","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92494"},{"cve":"CVE-2026-92495","month":"2026-09","title":"RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92495"},{"cve":"CVE-2026-92496","month":"2026-09","title":"wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92496"},{"cve":"CVE-2026-92503","month":"2026-09","title":"ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92503"},{"cve":"CVE-2026-92506","month":"2026-09","title":"firmware: arm_scmi: Fix requested device removal race","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92506"},{"cve":"CVE-2026-92508","month":"2026-09","title":"RDMA/core: Fix potential use after free in ib_free_cq()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92508"},{"cve":"CVE-2026-92509","month":"2026-09","title":"RDMA/core: Fix potential use after free in counter_release()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92509"},{"cve":"CVE-2026-92510","month":"2026-09","title":"RDMA/core: Fix potential use after free in ib_destroy_srq_user()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92510"},{"cve":"CVE-2026-92514","month":"2026-09","title":"RDMA/erdma: Fix CEQ tasklet use-after-free on removal","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92514"},{"cve":"CVE-2026-92519","month":"2026-09","title":"riscv, bpf: Fix memory leak in bpf_jit_free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92519"},{"cve":"CVE-2026-92520","month":"2026-09","title":"bpf: Zero queue and stack outputs on lock failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92520"},{"cve":"CVE-2026-92522","month":"2026-09","title":"ACPI: processor: validate MADT IOAPIC entry bounds","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92522"},{"cve":"CVE-2026-92523","month":"2026-09","title":"RDMA/nldev: validate dynamic counter attribute length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92523"},{"cve":"CVE-2026-92842","month":"2026-09","title":"OOB read / info leak in convert.* stream filters when line-break-chars contains NUL","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92842"},{"cve":"CVE-2026-92987","month":"2026-09","title":"roxmltree through 0.21.1 Denial of Service via Quadratic Parsing","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92987"},{"cve":"CVE-2026-93042","month":"2026-09","title":"dmaengine: dw-edma: Terminate all descriptors without callbacks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93042"},{"cve":"CVE-2026-93047","month":"2026-09","title":"drm/v3d: Associate BOs with every job that accesses them","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93047"},{"cve":"CVE-2026-93048","month":"2026-09","title":"mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93048"},{"cve":"CVE-2026-93050","month":"2026-09","title":"ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93050"},{"cve":"CVE-2026-93051","month":"2026-09","title":"misc: ad525x_dpot: use driver core groups for sysfs files","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93051"},{"cve":"CVE-2026-93052","month":"2026-09","title":"misc: bcm-vk: Use acquire/release for msgq_inited","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93052"},{"cve":"CVE-2026-93054","month":"2026-09","title":"uio: Fix stale info pointer in failed registration path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93054"},{"cve":"CVE-2026-93055","month":"2026-09","title":"UDF symlink pathComponent header OOB read","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93055"},{"cve":"CVE-2026-93058","month":"2026-09","title":"drm/msm: Only fini scheduler after successful init","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93058"},{"cve":"CVE-2026-93062","month":"2026-09","title":"wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93062"},{"cve":"CVE-2026-93063","month":"2026-09","title":"wifi: iwlwifi: mei: check SAP message length before reading it","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93063"},{"cve":"CVE-2026-93064","month":"2026-09","title":"wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93064"},{"cve":"CVE-2026-93067","month":"2026-09","title":"drm/bridge: tc358767: clamp the reported AUX read size to the request","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93067"},{"cve":"CVE-2026-93072","month":"2026-09","title":"irqchip/renesas-irqc: Fix generic interrupt chip leak on remove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93072"},{"cve":"CVE-2026-93073","month":"2026-09","title":"dax: read holder_ops once in dax_holder_notify_failure()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93073"},{"cve":"CVE-2026-93086","month":"2026-09","title":"firmware: arm_scmi: Avoid IDR updates while cleaning channels","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93086"},{"cve":"CVE-2026-93090","month":"2026-09","title":"firmware: arm_scmi: Clean up channels on setup failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93090"},{"cve":"CVE-2026-93091","month":"2026-09","title":"firmware: arm_scmi: Quiesce notifications before teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93091"},{"cve":"CVE-2026-93092","month":"2026-09","title":"firmware: arm_scmi: Unregister device notifier before IDR teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93092"},{"cve":"CVE-2026-93097","month":"2026-09","title":"cxl/mbox: Break poison list loop on an empty payload","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93097"},{"cve":"CVE-2026-93099","month":"2026-09","title":"fs/resctrl: Fix UAF from worker threads when domains are removed","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93099"},{"cve":"CVE-2026-93103","month":"2026-09","title":"RDMA/hfi1: Preserve unit 0 on allocation failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93103"},{"cve":"CVE-2026-93104","month":"2026-09","title":"RDMA/rvt: Return NULL after port allocation failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93104"},{"cve":"CVE-2026-93105","month":"2026-09","title":"esp: do not unref managed frag pages in esp_ssg_unref()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93105"},{"cve":"CVE-2026-93108","month":"2026-09","title":"RDMA/ipoib: Drain RCU callbacks during module teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93108"},{"cve":"CVE-2026-93114","month":"2026-09","title":"platform/surface: acpi-notify: Check ACPI companion before use","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93114"},{"cve":"CVE-2026-93116","month":"2026-09","title":"platform/x86: asus-wmi: fix resource leaks on probe failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93116"},{"cve":"CVE-2026-93117","month":"2026-09","title":"usb: fix UAF when probe runs concurrent to dyn ID removal","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93117"},{"cve":"CVE-2026-93118","month":"2026-09","title":"usb: gadget: aspeed_udc: check endpoint DMA allocation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93118"},{"cve":"CVE-2026-93123","month":"2026-09","title":"serial: qcom-geni: do not advance stale DMA completions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93123"},{"cve":"CVE-2026-93125","month":"2026-09","title":"bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93125"},{"cve":"CVE-2026-93129","month":"2026-09","title":"platform/x86: dell-wmi-base: Fix handling of ultra performance key","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93129"},{"cve":"CVE-2026-93137","month":"2026-09","title":"bpf: Fix use-after-free on mm_struct in bpf_find_vma()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93137"},{"cve":"CVE-2026-93141","month":"2026-09","title":"usb: gadget: r8a66597: avoid double free of ep0_req in probe error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93141"},{"cve":"CVE-2026-93142","month":"2026-09","title":"thermal/drivers/rcar: Fix error checking in probe()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93142"},{"cve":"CVE-2026-93144","month":"2026-09","title":"bpf: Reject writes through untrusted BTF pointers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93144"},{"cve":"CVE-2026-93145","month":"2026-09","title":"clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93145"},{"cve":"CVE-2026-93149","month":"2026-09","title":"wifi: mac80211_hwsim: avoid NULL skb in stop queue drain","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93149"},{"cve":"CVE-2026-93150","month":"2026-09","title":"cgroup/cpuset: Make nr_deadline_tasks an atomic_t","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93150"},{"cve":"CVE-2026-93151","month":"2026-09","title":"nvmet-rdma: fix response resource leak on queue teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93151"},{"cve":"CVE-2026-93156","month":"2026-09","title":"crypto: rk3288 - fail ahash requests on HASH idle timeout","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93156"},{"cve":"CVE-2026-93160","month":"2026-09","title":"crypto: atmel-ecc - reject hardware ECDH without a public key","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93160"},{"cve":"CVE-2026-93177","month":"2026-09","title":"drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93177"},{"cve":"CVE-2026-93178","month":"2026-09","title":"drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93178"},{"cve":"CVE-2026-93179","month":"2026-09","title":"drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93179"},{"cve":"CVE-2026-93183","month":"2026-09","title":"drm/lima: call drm_mm_init() with a valid allocation range","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93183"},{"cve":"CVE-2026-93185","month":"2026-09","title":"ASoC: rt700-sdw: always drain jack work on remove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93185"},{"cve":"CVE-2026-93186","month":"2026-09","title":"cxl/mbox: Clamp mailbox output allocation to the payload size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93186"},{"cve":"CVE-2026-93188","month":"2026-09","title":"HID: roccat: bound device-supplied profile index","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93188"},{"cve":"CVE-2026-93191","month":"2026-09","title":"smack: fix incorrect task context in smack_msg_queue_msgrcv","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93191"},{"cve":"CVE-2026-93192","month":"2026-09","title":"drm/v3d: Clear queue->active_job when v3d_fence_create() fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93192"},{"cve":"CVE-2026-93200","month":"2026-09","title":"i3c: master: Fix use-after-free of master->this","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93200"},{"cve":"CVE-2026-93202","month":"2026-09","title":"i3c: master: Fix recursive locking during device registration","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93202"},{"cve":"CVE-2026-93203","month":"2026-09","title":"batman-adv: bla: avoid CRC corruption due to parallel claim add","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93203"},{"cve":"CVE-2026-93205","month":"2026-09","title":"iommu/arm-smmu-v3: Manage teardown with devm","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93205"},{"cve":"CVE-2026-93207","month":"2026-09","title":"SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93207"},{"cve":"CVE-2026-93209","month":"2026-09","title":"Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93209"},{"cve":"CVE-2026-93213","month":"2026-09","title":"of: fix out-of-bounds read in of_alias_scan() stem parser","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93213"},{"cve":"CVE-2026-93219","month":"2026-09","title":"clocksource/drivers/timer-sun4i: Advertise a real minimum delta","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93219"},{"cve":"CVE-2026-93221","month":"2026-09","title":"nfsd: convert nfsd_net boolean flags to unsigned long flags word","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93221"},{"cve":"CVE-2026-93222","month":"2026-09","title":"signal: avoid shared siginfo namespace rewrites","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93222"},{"cve":"CVE-2026-93226","month":"2026-09","title":"ipv6: use RCU iterator to dump route exceptions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93226"},{"cve":"CVE-2026-93228","month":"2026-09","title":"svcrdma: Reject Write/Reply chunks with segcount 0","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93228"},{"cve":"CVE-2026-93231","month":"2026-09","title":"lockd: fix swapped arguments in nlmsvc_match_ip()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93231"},{"cve":"CVE-2026-93239","month":"2026-09","title":"arm64: mm: Fix the lockless page-table walk in show_pte()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93239"},{"cve":"CVE-2026-93240","month":"2026-09","title":"memcg: make the v1 soft limit knob inert","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93240"},{"cve":"CVE-2026-93242","month":"2026-09","title":"scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93242"},{"cve":"CVE-2026-93243","month":"2026-09","title":"mm/secretmem: properly account locked pages","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93243"},{"cve":"CVE-2026-93245","month":"2026-09","title":"apparmor: policy_int make sure list heads are initialized before fail path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93245"},{"cve":"CVE-2026-93247","month":"2026-09","title":"Bluetooth: mgmt: fix 'hdev->discovery.uuids' NULL dereference","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93247"},{"cve":"CVE-2026-93250","month":"2026-09","title":"vxlan: mdb: Fix use-after-free in vxlan_mdb_flush()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93250"},{"cve":"CVE-2026-93251","month":"2026-09","title":"ACPI: bus: Introduce acpi_bus_get_primary_device()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93251"},{"cve":"CVE-2026-93256","month":"2026-09","title":"arm64: hibernate: mask DAIF before restoring hibernated kernel","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93256"},{"cve":"CVE-2026-93262","month":"2026-09","title":"md/raid5-ppl: fix use-after-free in ppl_do_flush()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93262"},{"cve":"CVE-2026-93264","month":"2026-09","title":"RDMA/efa: Fix PBL chunk length computation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93264"},{"cve":"CVE-2026-93268","month":"2026-09","title":"ext4: skip extra isize expansion during mount to prevent deadlock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93268"},{"cve":"CVE-2026-93269","month":"2026-09","title":"ext4: fix circular lock dependency in ext4_ext_migrate","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93269"},{"cve":"CVE-2026-93274","month":"2026-09","title":"pinctrl: bcm2835: Don't remove an unregistered GPIO chip","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93274"},{"cve":"CVE-2026-93280","month":"2026-09","title":"greybus: audio: bound the topology section sizes against the fetched size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93280"},{"cve":"CVE-2026-93283","month":"2026-09","title":"i3c: master: Fix device_register() error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93283"},{"cve":"CVE-2026-93286","month":"2026-09","title":"net: appletalk: fix NULL pointer dereference in aarp_send_ddp()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93286"},{"cve":"CVE-2026-93287","month":"2026-09","title":"i2c: smbus: reject oversized block transfers in the common path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93287"},{"cve":"CVE-2026-93288","month":"2026-09","title":"netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93288"},{"cve":"CVE-2026-93304","month":"2026-09","title":"(D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-696"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93304"},{"cve":"CVE-2026-93433","month":"2026-09","title":"Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93433"},{"cve":"CVE-2026-93450","month":"2026-09","title":"go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshal","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93450"},{"cve":"CVE-2026-93541","month":"2026-09","title":"Out-of-bounds read in libXi's XQueryDeviceState()","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93541"},{"cve":"CVE-2026-93542","month":"2026-09","title":"Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes()","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93542"},{"cve":"CVE-2026-93543","month":"2026-09","title":"Out-of-bounds read in libXi's XI2 class parser","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93543"},{"cve":"CVE-2026-93544","month":"2026-09","title":"Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93544"},{"cve":"CVE-2026-93545","month":"2026-09","title":"Out-of-bounds read in libXi's XListInputDevices()","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93545"},{"cve":"CVE-2026-93599","month":"2026-09","title":"rustls-webpki before 0.103.13 Panic via empty BIT STRING","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93599"},{"cve":"CVE-2026-93600","month":"2026-09","title":"rustls webpki Name Constraints URI Validation Bypass","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Low","cvss":2.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93600"},{"cve":"CVE-2026-93601","month":"2026-09","title":"rustls webpki 0.101.0 before 0.103.12 Name Constraint Bypass","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Low","cvss":2.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93601"},{"cve":"CVE-2026-93602","month":"2026-09","title":"rustls-webpki before 0.103.10 CRL Revocation Check Bypass","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-299"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93602"},{"cve":"CVE-2026-93682","month":"2026-09","title":"Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header","family":"Other","component":"Mariner","cna":"php","label":"(none)","labels":[],"severity":"Moderate","cvss":5.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93682"},{"cve":"CVE-2026-93781","month":"2026-09","title":"scsi: core: Do not block on tag allocation in scsi_eh_lock_door()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93781"},{"cve":"CVE-2026-93783","month":"2026-09","title":"Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93783"},{"cve":"CVE-2026-93784","month":"2026-09","title":"wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93784"},{"cve":"CVE-2026-93785","month":"2026-09","title":"cifs: validate idmap key payload length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93785"},{"cve":"CVE-2026-93787","month":"2026-09","title":"smb: client: bound dirent name against end of SMB response in cifs_filldir","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93787"},{"cve":"CVE-2026-93788","month":"2026-09","title":"wifi: iwlwifi: acpi: validate WGDS table revision index","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93788"},{"cve":"CVE-2026-93789","month":"2026-09","title":"wifi: iwlwifi: bound aligned TLV advance in FW parser","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93789"},{"cve":"CVE-2026-93790","month":"2026-09","title":"wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93790"},{"cve":"CVE-2026-93791","month":"2026-09","title":"wifi: iwlwifi: mvm: add a check on the tid coming from the firmware","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93791"},{"cve":"CVE-2026-93792","month":"2026-09","title":"wifi: iwlwifi: mvm: fix a possible underflow","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93792"},{"cve":"CVE-2026-93793","month":"2026-09","title":"wifi: iwlwifi: mvm: validate TX_CMD response layout","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93793"},{"cve":"CVE-2026-93794","month":"2026-09","title":"smb/client: flush dirty data before punching a hole","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93794"},{"cve":"CVE-2026-93795","month":"2026-09","title":"blk-cgroup: fix leaks and online flag on radix_tree_insert failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93795"},{"cve":"CVE-2026-93796","month":"2026-09","title":"wifi: iwlwifi: pcie: null RX pointers after free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93796"},{"cve":"CVE-2026-93797","month":"2026-09","title":"wifi: iwlwifi: mvm: fix an off-by-1 boundary check","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93797"},{"cve":"CVE-2026-93798","month":"2026-09","title":"btrfs: fix reloc root cleanup in merge_reloc_roots()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93798"},{"cve":"CVE-2026-93799","month":"2026-09","title":"wifi: iwlwifi: mvm: validate sta_id in BA window status notif","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93799"},{"cve":"CVE-2026-93800","month":"2026-09","title":"btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93800"},{"cve":"CVE-2026-93801","month":"2026-09","title":"smb/client: zero-initialize stack-allocated cifs_open_info_data","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93801"},{"cve":"CVE-2026-93802","month":"2026-09","title":"wifi: rsi: validate beacon length before fixed buffer copy","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93802"},{"cve":"CVE-2026-93803","month":"2026-09","title":"wifi: libipw: fix key index receive bound checks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93803"},{"cve":"CVE-2026-93804","month":"2026-09","title":"wifi: mac80211: ibss: wait for in-flight TX on disconnect","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93804"},{"cve":"CVE-2026-93805","month":"2026-09","title":"wifi: cfg80211: validate rx/tx MLME callback frame lengths before access","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93805"},{"cve":"CVE-2026-93806","month":"2026-09","title":"wifi: cfg80211: validate assoc response length before status and IE access","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93806"},{"cve":"CVE-2026-93807","month":"2026-09","title":"wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93807"},{"cve":"CVE-2026-93813","month":"2026-09","title":"btrfs: tree-checker: validate INODE_REF's namelen","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93813"},{"cve":"CVE-2026-93817","month":"2026-09","title":"perf: Fix addr_filter_ranges lifetime","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93817"},{"cve":"CVE-2026-93820","month":"2026-09","title":"PCI: rockchip: Protect root bus removal with rescan lock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93820"},{"cve":"CVE-2026-93821","month":"2026-09","title":"PCI: altera: Protect root bus removal with rescan lock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93821"},{"cve":"CVE-2026-93822","month":"2026-09","title":"PCI: iproc: Protect root bus removal with rescan lock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93822"},{"cve":"CVE-2026-93823","month":"2026-09","title":"drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93823"},{"cve":"CVE-2026-93824","month":"2026-09","title":"tls: reject the combination of TLS and sockmap","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93824"},{"cve":"CVE-2026-93825","month":"2026-09","title":"spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93825"},{"cve":"CVE-2026-93826","month":"2026-09","title":"HID: hidpp: fix potential UAF in hidpp_connect_event()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93826"},{"cve":"CVE-2026-93829","month":"2026-09","title":"smb: client: fix races in cifsd thread creation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93829"},{"cve":"CVE-2026-93830","month":"2026-09","title":"net: stmmac: xgmac2: disable RBUE in default RX interrupt mask","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93830"},{"cve":"CVE-2026-93834","month":"2026-09","title":"Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93834"},{"cve":"CVE-2026-93990","month":"2026-09","title":"Expat through 2.8.4 Malformed UTF-16 Acceptance via Unchecked Surrogate","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-176"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93990"},{"cve":"CVE-2026-94281","month":"2026-09","title":"Out-of-bounds read in libXi's XListInputDevices() class parsing","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94281"},{"cve":"CVE-2026-94282","month":"2026-09","title":"Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Moderate","cvss":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94282"},{"cve":"CVE-2026-94283","month":"2026-09","title":"Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94283"},{"cve":"CVE-2026-94284","month":"2026-09","title":"Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94284"},{"cve":"CVE-2026-94285","month":"2026-09","title":"Out-of-bounds read in libX11's byte-oriented codeset parser","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:U","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94285"},{"cve":"CVE-2026-94286","month":"2026-09","title":"Out-of-bounds read in libXtst's RECORD reply parser","family":"Other","component":"Mariner","cna":"suse","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94286"},{"cve":"CVE-2026-94417","month":"2026-09","title":"CRL check skipped when OCSP enabled and certificate has no OCSP URL","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-299"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94417"},{"cve":"CVE-2026-94418","month":"2026-09","title":"Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94418"},{"cve":"CVE-2026-94419","month":"2026-09","title":"Client session cache reference poisoning allows resumption with wrong server","family":"Other","component":"Mariner","cna":"wolfSSL","label":"(none)","labels":[],"severity":"Low","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94419"},{"cve":"CVE-2026-94640","month":"2026-09","title":"Rpcbind: unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94640"},{"cve":"CVE-2026-95508","month":"2026-09","title":"Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95508"},{"cve":"CVE-2026-95519","month":"2026-09","title":"Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95519"},{"cve":"CVE-2026-95520","month":"2026-09","title":"Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95520"},{"cve":"CVE-2026-95521","month":"2026-09","title":"Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95521"},{"cve":"CVE-2026-95619","month":"2026-09","title":"Gcc: libstdc++ integer overflow in `new` operator","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95619"},{"cve":"CVE-2026-95818","month":"2026-09","title":"AT_SECURE program buffer overflow via $ORIGIN processing","family":"Other","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Low","cvss":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95818"},{"cve":"CVE-2026-96269","month":"2026-09","title":"GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user settings are required to trigger it.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-829"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96269"},{"cve":"CVE-2026-96442","month":"2026-09","title":"Emacs: emacs: arbitrary code execution in flymake mode","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96442"},{"cve":"CVE-2026-96512","month":"2026-09","title":"Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96512"},{"cve":"CVE-2026-96674","month":"2026-09","title":"alsa-lib through 1.2.16.1 Integer Overflow via Topology File","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96674"},{"cve":"CVE-2026-96675","month":"2026-09","title":"alsa-lib through 1.2.16.1 Denial of Service via pcm_multi","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-129"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96675"},{"cve":"CVE-2026-96889","month":"2026-09","title":"Librsvg: use-after-free when xml includes have duplicated entities","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96889"},{"cve":"CVE-2026-97058","month":"2026-09","title":"sprintf-js through 1.1.3 Denial of Service via Unbounded Precision","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97058"},{"cve":"CVE-2026-97399","month":"2026-09","title":"One-byte overread in strncasecmp on Power8","family":"Other","component":"Mariner","cna":"glibc","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97399"},{"cve":"CVE-2026-97408","month":"2026-09","title":"Bluetooth: L2CAP: validate connectionless PSM length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97408"},{"cve":"CVE-2026-97409","month":"2026-09","title":"nvme-fc: Do not cancel requests in io target before it is initialized","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97409"},{"cve":"CVE-2026-97415","month":"2026-09","title":"btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97415"},{"cve":"CVE-2026-97416","month":"2026-09","title":"btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97416"},{"cve":"CVE-2026-97417","month":"2026-09","title":"netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97417"},{"cve":"CVE-2026-97419","month":"2026-09","title":"hsr: broadcast netlink notifications in the device's net namespace","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97419"},{"cve":"CVE-2026-97420","month":"2026-09","title":"bpf: NUL-terminate replaced sysctl value","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97420"},{"cve":"CVE-2026-97421","month":"2026-09","title":"RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97421"},{"cve":"CVE-2026-97422","month":"2026-09","title":"drm/amdkfd: fix SMI event cross-process information leak","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97422"},{"cve":"CVE-2026-97424","month":"2026-09","title":"drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97424"},{"cve":"CVE-2026-97425","month":"2026-09","title":"drm/amdgpu: fix buffer overflow during vBIOS update","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97425"},{"cve":"CVE-2026-97427","month":"2026-09","title":"drm/amd/pm: bound pp_dpm_set_pp_table() memcpy","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97427"},{"cve":"CVE-2026-97428","month":"2026-09","title":"drm/amdgpu: harden FRU PIA parsing with bounded helpers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97428"},{"cve":"CVE-2026-97429","month":"2026-09","title":"drm/amdkfd: fix UAF race in destroy_queue_cpsch","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97429"},{"cve":"CVE-2026-97430","month":"2026-09","title":"xhci: Prevent queuing new commands if xhci is inaccessible","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97430"},{"cve":"CVE-2026-97432","month":"2026-09","title":"wifi: iwlwifi: mvm: fix P2P-Device binding handling","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97432"},{"cve":"CVE-2026-97435","month":"2026-09","title":"net: dsa: sja1105: flower: reject cross-chip redirect","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97435"},{"cve":"CVE-2026-97440","month":"2026-09","title":"net: qrtr: fix node refcount leak on ctrl packet alloc failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97440"},{"cve":"CVE-2026-97441","month":"2026-09","title":"ata: ahci: fail probe if BAR too small for claimed ports","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97441"},{"cve":"CVE-2026-97444","month":"2026-09","title":"ACPICA: add boundary checks in two places","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97444"},{"cve":"CVE-2026-97445","month":"2026-09","title":"ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97445"},{"cve":"CVE-2026-97446","month":"2026-09","title":"ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97446"},{"cve":"CVE-2026-97448","month":"2026-09","title":"ACPICA: Add validation for node in acpi_ns_build_normalized_path()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97448"},{"cve":"CVE-2026-97449","month":"2026-09","title":"ACPICA: Add package limit checks in parser functions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97449"},{"cve":"CVE-2026-97450","month":"2026-09","title":"ACPICA: validate handler object type in two places","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97450"},{"cve":"CVE-2026-97451","month":"2026-09","title":"ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97451"},{"cve":"CVE-2026-97452","month":"2026-09","title":"ACPICA: Prevent adding invalid references","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97452"},{"cve":"CVE-2026-97453","month":"2026-09","title":"ACPICA: validate byte_count in acpi_ps_get_next_package_length()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97453"},{"cve":"CVE-2026-97454","month":"2026-09","title":"ACPICA: add boundary checks in acpi_ps_get_next_field()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97454"},{"cve":"CVE-2026-97455","month":"2026-09","title":"ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97455"},{"cve":"CVE-2026-97456","month":"2026-09","title":"ACPICA: Fix condition check in acpi_ps_parse_loop()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97456"},{"cve":"CVE-2026-97472","month":"2026-09","title":"ipv6: addrconf: fix temp address generation after prefix deprecation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97472"},{"cve":"CVE-2026-97473","month":"2026-09","title":"powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97473"},{"cve":"CVE-2026-97474","month":"2026-09","title":"wifi: iwlwifi: mld: purge async notifications upon nic error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97474"},{"cve":"CVE-2026-97476","month":"2026-09","title":"rds: filter RDS_INFO_* getsockopt by caller's netns","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97476"},{"cve":"CVE-2026-97477","month":"2026-09","title":"RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97477"},{"cve":"CVE-2026-97479","month":"2026-09","title":"driver core: Avoid warning when removing a device while its supplier is unbinding","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97479"},{"cve":"CVE-2026-97480","month":"2026-09","title":"tty: serial: 8250: protect against NULL uart->port.dev in register","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97480"},{"cve":"CVE-2026-97481","month":"2026-09","title":"serial: 8250: fix possible ISR soft lockup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97481"},{"cve":"CVE-2026-97483","month":"2026-09","title":"usb: core: hcd: fix possible deadlock in rh control transfers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97483"},{"cve":"CVE-2026-97484","month":"2026-09","title":"usbip: vhci_hcd: fix NULL deref in status_show_vhci","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97484"},{"cve":"CVE-2026-97491","month":"2026-09","title":"net/rds: Don't sleep inside rds_ib_conn_path_shutdown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97491"},{"cve":"CVE-2026-97492","month":"2026-09","title":"wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97492"},{"cve":"CVE-2026-97493","month":"2026-09","title":"drm/amdgpu: Bound GPIO I2C table entry count from VBIOS","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97493"},{"cve":"CVE-2026-97494","month":"2026-09","title":"drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97494"},{"cve":"CVE-2026-97495","month":"2026-09","title":"drm/amdkfd: Check bounds on allocate_doorbell","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97495"},{"cve":"CVE-2026-97496","month":"2026-09","title":"drm/amdkfd: Fix OOB memory exposure in get_wave_state()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97496"},{"cve":"CVE-2026-97497","month":"2026-09","title":"drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97497"},{"cve":"CVE-2026-97498","month":"2026-09","title":"drm/amdgpu/userq: pin mqd and fw object bo to avoid eviction","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97498"},{"cve":"CVE-2026-97503","month":"2026-09","title":"genirq/proc: Size interrupt directory names for 10-digit interrupt numbers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97503"},{"cve":"CVE-2026-97505","month":"2026-09","title":"PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97505"},{"cve":"CVE-2026-97511","month":"2026-09","title":"wifi: mac80211: avoid out-of-bounds access in monitor","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97511"},{"cve":"CVE-2026-97512","month":"2026-09","title":"spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97512"},{"cve":"CVE-2026-97516","month":"2026-09","title":"wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97516"},{"cve":"CVE-2026-97517","month":"2026-09","title":"wifi: nl80211: reject beacons with bad HE operation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97517"},{"cve":"CVE-2026-97518","month":"2026-09","title":"wifi: cfg80211: reject duplicate wiphy cipher suite entries","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97518"},{"cve":"CVE-2026-97522","month":"2026-09","title":"mptcp: fix bad accounting in __mptcp_subflow_push_pending()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97522"},{"cve":"CVE-2026-97523","month":"2026-09","title":"mptcp: close race between scheduler and state change","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97523"},{"cve":"CVE-2026-97524","month":"2026-09","title":"mptcp: avoid unneeded actions on subflow reset","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97524"},{"cve":"CVE-2026-97527","month":"2026-09","title":"scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97527"},{"cve":"CVE-2026-97528","month":"2026-09","title":"scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97528"},{"cve":"CVE-2026-97529","month":"2026-09","title":"scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[]","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97529"},{"cve":"CVE-2026-97530","month":"2026-09","title":"scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97530"},{"cve":"CVE-2026-97531","month":"2026-09","title":"scsi: qla2xxx: Skip vport under deletion in report ID acquisition","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97531"},{"cve":"CVE-2026-97532","month":"2026-09","title":"scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97532"},{"cve":"CVE-2026-97534","month":"2026-09","title":"f2fs: accurately adjust free_sections during free_segment_range","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97534"},{"cve":"CVE-2026-97535","month":"2026-09","title":"scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97535"},{"cve":"CVE-2026-97536","month":"2026-09","title":"scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97536"},{"cve":"CVE-2026-97537","month":"2026-09","title":"scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97537"},{"cve":"CVE-2026-97539","month":"2026-09","title":"usb: xusbatm: don't rely on id table pointer arithmetic","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97539"},{"cve":"CVE-2026-97540","month":"2026-09","title":"net: usb: pegasus: don't rely on id table pointer arithmetic","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97540"},{"cve":"CVE-2026-97541","month":"2026-09","title":"wifi: ath9k_htc: don't store usb_device_id","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97541"},{"cve":"CVE-2026-97542","month":"2026-09","title":"xfs: bail out on bitmap errors in xrep_agfl_fill","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97542"},{"cve":"CVE-2026-97554","month":"2026-09","title":"smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97554"},{"cve":"CVE-2026-97555","month":"2026-09","title":"smb: client: fix heap overflow in DACL owner/group rewrite","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97555"},{"cve":"CVE-2026-97556","month":"2026-09","title":"smb: client: avoid leaking refcount when cifs_sb_tlink() fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97556"},{"cve":"CVE-2026-97557","month":"2026-09","title":"smb: client: avoid leaking refcount in cifs_queue_oplock_break()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97557"},{"cve":"CVE-2026-97558","month":"2026-09","title":"smb: client: fix cifsFileInfo reference leak in deferred close","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97558"},{"cve":"CVE-2026-97559","month":"2026-09","title":"smb: client: fail DACL rewrite when the new DACL exceeds 64K","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97559"},{"cve":"CVE-2026-97560","month":"2026-09","title":"smb: client: fix one-byte OOB read in smb2_parse_native_symlink()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97560"},{"cve":"CVE-2026-97561","month":"2026-09","title":"smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97561"},{"cve":"CVE-2026-97562","month":"2026-09","title":"smb: client: pin DFS superblock in iterator callback","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97562"},{"cve":"CVE-2026-97563","month":"2026-09","title":"smb: client: reject out-of-bounds DataOffset in CIFSSMBRead()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97563"},{"cve":"CVE-2026-97564","month":"2026-09","title":"smb: client: reject userspace cifs.idmap descriptions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97564"},{"cve":"CVE-2026-97565","month":"2026-09","title":"smb: client: reject short READ responses in CIFSSMBRead()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97565"},{"cve":"CVE-2026-97566","month":"2026-09","title":"mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97566"},{"cve":"CVE-2026-97567","month":"2026-09","title":"mptcp: prevent race between disconnect() and rtx","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97567"},{"cve":"CVE-2026-97568","month":"2026-09","title":"mptcp: syncookies: remember the request backup flag","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97568"},{"cve":"CVE-2026-97572","month":"2026-09","title":"bnxt_en: Propagate RX ring init failures in bnxt_init_nic()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97572"},{"cve":"CVE-2026-97573","month":"2026-09","title":"bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97573"},{"cve":"CVE-2026-97575","month":"2026-09","title":"media: v4l2-ctrls: validate AV1 tile counts","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97575"},{"cve":"CVE-2026-97576","month":"2026-09","title":"media: v4l2-ctrls: validate HEVC tile counts","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97576"},{"cve":"CVE-2026-97578","month":"2026-09","title":"media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97578"},{"cve":"CVE-2026-97581","month":"2026-09","title":"media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97581"},{"cve":"CVE-2026-97582","month":"2026-09","title":"hwmon: (gpio-fan) Fix use-after-free in alarm work","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97582"},{"cve":"CVE-2026-97587","month":"2026-09","title":"perf: RISC-V: store available counter mask as bitmap","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97587"},{"cve":"CVE-2026-97592","month":"2026-09","title":"s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97592"},{"cve":"CVE-2026-97594","month":"2026-09","title":"landlock: Fix use-after-free of the source's parent directory","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97594"},{"cve":"CVE-2026-97595","month":"2026-09","title":"mac802154: fix use-after-free of sdata via queued RX frames","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97595"},{"cve":"CVE-2026-97596","month":"2026-09","title":"ipvs: reject invalid states in connection template sync records","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97596"},{"cve":"CVE-2026-97597","month":"2026-09","title":"ipv6: flowlabel: cap duplicate leases per socket","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97597"},{"cve":"CVE-2026-97598","month":"2026-09","title":"ipv4: fib: bound automatic table ID allocation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97598"},{"cve":"CVE-2026-97599","month":"2026-09","title":"ieee802154: hwsim: serialize pib updates to fix double-free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97599"},{"cve":"CVE-2026-97600","month":"2026-09","title":"ieee802154: cc2520: fix FIFOP work use-after-free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97600"},{"cve":"CVE-2026-97601","month":"2026-09","title":"ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97601"},{"cve":"CVE-2026-97602","month":"2026-09","title":"inet: frags: invalidate queues before flushing them","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97602"},{"cve":"CVE-2026-97604","month":"2026-09","title":"fbdev: vfb: defer cleanup until the last reference","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97604"},{"cve":"CVE-2026-97605","month":"2026-09","title":"erofs: preserve LZMA decoders on resize failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97605"},{"cve":"CVE-2026-97607","month":"2026-09","title":"vdpa: ifcvf: Put device on unsupported feature error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97607"},{"cve":"CVE-2026-97608","month":"2026-09","title":"netfilter: nf_log: unregister loggers before per-net teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97608"},{"cve":"CVE-2026-97609","month":"2026-09","title":"netfilter: cttimeout: prevent UAF during module unload","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97609"},{"cve":"CVE-2026-97611","month":"2026-09","title":"net: openvswitch: fix use-after-free of the flow table mask array","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97611"},{"cve":"CVE-2026-97612","month":"2026-09","title":"net: mpls: clear inner_protocol when the last label is popped","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97612"},{"cve":"CVE-2026-97613","month":"2026-09","title":"net: mana: Reserve extra CQ slot for the fence completion CQE","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97613"},{"cve":"CVE-2026-97615","month":"2026-09","title":"net: bridge: use option bits for CFM/MRP frame handlers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97615"},{"cve":"CVE-2026-97616","month":"2026-09","title":"net/sched: act_api: release all action references on NEWACTION failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97616"},{"cve":"CVE-2026-97619","month":"2026-09","title":"io_uring/rw: end write accounting from ->ki_complete","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97619"},{"cve":"CVE-2026-97687","month":"2026-09","title":"urllib3: HTTPS proxy TLS configuration may be ignored or overridden","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97687"},{"cve":"CVE-2026-97689","month":"2026-09","title":"urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97689"},{"cve":"CVE-2026-97899","month":"2026-09","title":"drm/i915: Fix memory leak in query_perf_config_list()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97899"},{"cve":"CVE-2026-97900","month":"2026-09","title":"drm/drm_exec: fix up contended obj when num_objects is 0","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97900"},{"cve":"CVE-2026-97901","month":"2026-09","title":"genetlink: pin family module during policy dump","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97901"},{"cve":"CVE-2026-97904","month":"2026-09","title":"cpufreq: initialize policy rwsem before sysfs publication","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97904"},{"cve":"CVE-2026-97905","month":"2026-09","title":"cpufreq: zero-initialize policy cpumask before sysfs publication","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97905"},{"cve":"CVE-2026-97906","month":"2026-09","title":"bootconfig: Fix integer overflow in initrd size check","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97906"},{"cve":"CVE-2026-97907","month":"2026-09","title":"Bluetooth: btrtl: Don't leak return code when parsing firmware format v2","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97907"},{"cve":"CVE-2026-97908","month":"2026-09","title":"Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97908"},{"cve":"CVE-2026-97909","month":"2026-09","title":"ASoC: sti: initialize IRQ lock before requesting IRQ","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97909"},{"cve":"CVE-2026-97910","month":"2026-09","title":"ASoC: sprd: validate compress buffer sizes against fixed allocations","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97910"},{"cve":"CVE-2026-97915","month":"2026-09","title":"accel/ivpu: Limit firmware log name prints to field size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97915"},{"cve":"CVE-2026-97916","month":"2026-09","title":"accel/ivpu: Validate firmware log buffer metadata","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97916"},{"cve":"CVE-2026-97917","month":"2026-09","title":"accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97917"},{"cve":"CVE-2026-97918","month":"2026-09","title":"tracing: Undo the registration when enabling the histogram trigger fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97918"},{"cve":"CVE-2026-97919","month":"2026-09","title":"tracing: Take the reference before publishing the named histogram trigger","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97919"},{"cve":"CVE-2026-97920","month":"2026-09","title":"tracing: Keep the entry count when the histogram stats allocation fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97920"},{"cve":"CVE-2026-97921","month":"2026-09","title":"tracing: Free histogram the field rejected for a bad modifier","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97921"},{"cve":"CVE-2026-97922","month":"2026-09","title":"tracing: Free histogram var refs regardless of how often they are referenced","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97922"},{"cve":"CVE-2026-97923","month":"2026-09","title":"tracing: Free histogram the var ref when its initialization fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97923"},{"cve":"CVE-2026-97924","month":"2026-09","title":"tracing/user_events: Don't destroy fields when event removal fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97924"},{"cve":"CVE-2026-97925","month":"2026-09","title":"tick/broadcast: Plug clockevents replacement race","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97925"},{"cve":"CVE-2026-97926","month":"2026-09","title":"ufs: validate cylinder group metadata before caching it","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97926"},{"cve":"CVE-2026-97927","month":"2026-09","title":"ufs: create the root dentry after loading cylinder metadata","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97927"},{"cve":"CVE-2026-97929","month":"2026-09","title":"ALSA: usbusx2y: validate URB actual_length in interrupt callback","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97929"},{"cve":"CVE-2026-97930","month":"2026-09","title":"ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.6,"vector":"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97930"},{"cve":"CVE-2026-97931","month":"2026-09","title":"ALSA: us122l: Prevent write upgrades for read mappings","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97931"},{"cve":"CVE-2026-97933","month":"2026-09","title":"tracing: Take trace_array reference when opening a tracer options file","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97933"},{"cve":"CVE-2026-97934","month":"2026-09","title":"tracing: Fix memory corruption from a \"STACKTRACE\" histogram key","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97934"},{"cve":"CVE-2026-97935","month":"2026-09","title":"tracing: Set the trace clock before registering the histogram trigger","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97935"},{"cve":"CVE-2026-97936","month":"2026-09","title":"tracing: Fix memory corruption from the histogram stacktrace modifier","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97936"},{"cve":"CVE-2026-97938","month":"2026-09","title":"reboot: fix cad_pid use-after-free race","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97938"},{"cve":"CVE-2026-97939","month":"2026-09","title":"ipmr: account multicast table and route memory","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97939"},{"cve":"CVE-2026-97940","month":"2026-09","title":"ipv6: fix fib6 walker UAF on seq stop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97940"},{"cve":"CVE-2026-97945","month":"2026-09","title":"x86/mm: Fix user-space data loss with MADV_FREE and THP","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97945"},{"cve":"CVE-2026-97948","month":"2026-09","title":"powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97948"},{"cve":"CVE-2026-97949","month":"2026-09","title":"configfs: unhash the dentry before dropping the item in rmdir","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97949"},{"cve":"CVE-2026-97950","month":"2026-09","title":"configfs: pin the symlink target's dirent instead of chasing ->ci_dentry","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97950"},{"cve":"CVE-2026-97952","month":"2026-09","title":"sunvdc: unmap LDC cookies when the descriptor send fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97952"},{"cve":"CVE-2026-97953","month":"2026-09","title":"net: stmmac: fix TX descriptor availability check for TSO traffic","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97953"},{"cve":"CVE-2026-97954","month":"2026-09","title":"net/rds: fix tcp stream corruption with large pages","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97954"},{"cve":"CVE-2026-97957","month":"2026-09","title":"net: hinic: fix mailbox segment buffer overflow","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97957"},{"cve":"CVE-2026-97958","month":"2026-09","title":"net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain().","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97958"},{"cve":"CVE-2026-97959","month":"2026-09","title":"net/sched: cls_route: free emptied bucket on filter move","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97959"},{"cve":"CVE-2026-97960","month":"2026-09","title":"perf/x86/intel: Prevent drain_pebs() reentry","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97960"},{"cve":"CVE-2026-97961","month":"2026-09","title":"perf/core: Allow list_del during perf_event_overflow()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97961"},{"cve":"CVE-2026-97962","month":"2026-09","title":"net/mlx5e: Move representor vnic reporter to eswitch devlink port","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97962"},{"cve":"CVE-2026-97963","month":"2026-09","title":"net: stmmac: initialize ptp_lock at probe time","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97963"},{"cve":"CVE-2026-97964","month":"2026-09","title":"ppp_synctty: ensure a writeable skb header","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97964"},{"cve":"CVE-2026-97965","month":"2026-09","title":"vxlan: initialize _md in vxlan_xmit_one()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97965"},{"cve":"CVE-2026-97966","month":"2026-09","title":"octeontx2-pf: reset HTB scheduler topology before freeing queues","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97966"},{"cve":"CVE-2026-97969","month":"2026-09","title":"watchdog: msc313e: Fix clock leak and spurious timer in settimeout()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97969"},{"cve":"CVE-2026-97970","month":"2026-09","title":"watchdog: msc313e: Avoid division by zero","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97970"},{"cve":"CVE-2026-97973","month":"2026-09","title":"net: macb: destroy the phylink instance on the probe error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97973"},{"cve":"CVE-2026-97975","month":"2026-09","title":"Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97975"},{"cve":"CVE-2026-97977","month":"2026-09","title":"Bluetooth: btusb: Fix UAF of btusb_data by rx_work","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97977"},{"cve":"CVE-2026-97978","month":"2026-09","title":"eth: ice: don't dereference pointers from TP_printk()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97978"},{"cve":"CVE-2026-97979","month":"2026-09","title":"ice: add missing xa_destroy for sched_node_ids","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97979"},{"cve":"CVE-2026-97981","month":"2026-09","title":"net: ethernet: cortina: Count dropped frames as NAPI work","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97981"},{"cve":"CVE-2026-97982","month":"2026-09","title":"net: ethernet: cortina: Fix budget accounting","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97982"},{"cve":"CVE-2026-97984","month":"2026-09","title":"net: ipv6: Fix UDP length overflow with PMTU discover and big MTU","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97984"},{"cve":"CVE-2026-97985","month":"2026-09","title":"af_unix: Update last skb marker in manage_oob().","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97985"},{"cve":"CVE-2026-97986","month":"2026-09","title":"virtio_input: stop callbacks before unregistering input device","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97986"},{"cve":"CVE-2026-97987","month":"2026-09","title":"virtio_input: reset device if input_register_device() fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97987"},{"cve":"CVE-2026-97988","month":"2026-09","title":"vhost: invalidate vring access on IOTLB transitions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97988"},{"cve":"CVE-2026-97989","month":"2026-09","title":"vduse: validate virtqueue alignment","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97989"},{"cve":"CVE-2026-97990","month":"2026-09","title":"vdpa_sim_net: check TX pull result before RX copy","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97990"},{"cve":"CVE-2026-97991","month":"2026-09","title":"vdpa_sim_blk: reject out-of-range sector starts","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97991"},{"cve":"CVE-2026-97992","month":"2026-09","title":"vhost-vdpa: protect config_ctx from being freed under the config callback","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97992"},{"cve":"CVE-2026-97993","month":"2026-09","title":"vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97993"},{"cve":"CVE-2026-97994","month":"2026-09","title":"vhost/vdpa: reject VRING_NUM larger than device max","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97994"},{"cve":"CVE-2026-97995","month":"2026-09","title":"virtio_console: do not free control-out buffers on remove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97995"},{"cve":"CVE-2026-97997","month":"2026-09","title":"virtio_ring: fix stale descriptor flags after a failed packed add","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97997"},{"cve":"CVE-2026-97998","month":"2026-09","title":"netfilter: nfnetlink_log: cope with concurrent instance destruction","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97998"},{"cve":"CVE-2026-98003","month":"2026-09","title":"iommu/amd: Do not reallocate GA log buffers on resume","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98003"},{"cve":"CVE-2026-98006","month":"2026-09","title":"ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98006"},{"cve":"CVE-2026-98007","month":"2026-09","title":"bpf: Reject non-scalar bpf_loop iteration counts","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98007"},{"cve":"CVE-2026-98008","month":"2026-09","title":"net: macb: fix NULL pointer dereference on unbind with fixed-link","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98008"},{"cve":"CVE-2026-98009","month":"2026-09","title":"net/sched: ets: clamp quantum in parse and fallback paths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98009"},{"cve":"CVE-2026-98010","month":"2026-09","title":"net/sched: drr: clamp quantum in change class","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98010"},{"cve":"CVE-2026-98011","month":"2026-09","title":"net/sched: hhf: clamp quantum in change and init paths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98011"},{"cve":"CVE-2026-98012","month":"2026-09","title":"net/sched: sfq: clamp quantum in change path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98012"},{"cve":"CVE-2026-98013","month":"2026-09","title":"net/sched: fq_pie: clamp quantum in change path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98013"},{"cve":"CVE-2026-98014","month":"2026-09","title":"net/mlx5: E-Switch, prevent mc_list repopulation during vport disable","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98014"},{"cve":"CVE-2026-98015","month":"2026-09","title":"net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98015"},{"cve":"CVE-2026-98016","month":"2026-09","title":"net/mlx5e: Fix use-after-free race in sample_restore_put()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98016"},{"cve":"CVE-2026-98017","month":"2026-09","title":"net/sched: defer qdisc freeing after failed creation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98017"},{"cve":"CVE-2026-98019","month":"2026-09","title":"bpf: mark a NULL call argument precise","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98019"},{"cve":"CVE-2026-98020","month":"2026-09","title":"pds_core: fix cmd_regs access racing BAR unmap on reset","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98020"},{"cve":"CVE-2026-98021","month":"2026-09","title":"net: reject oversized tx_queue_len at netlink parse time","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98021"},{"cve":"CVE-2026-98022","month":"2026-09","title":"net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98022"},{"cve":"CVE-2026-98023","month":"2026-09","title":"vxlan: reject dynamic fdb entries that reference a nexthop id","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98023"},{"cve":"CVE-2026-98024","month":"2026-09","title":"s390/ism: folio_put() after error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98024"},{"cve":"CVE-2026-98025","month":"2026-09","title":"net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98025"},{"cve":"CVE-2026-98026","month":"2026-09","title":"net: bridge: mcast: properly convert mglist to rcu","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98026"},{"cve":"CVE-2026-98027","month":"2026-09","title":"net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98027"},{"cve":"CVE-2026-98030","month":"2026-09","title":"net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98030"},{"cve":"CVE-2026-98031","month":"2026-09","title":"nexthop: Initialize extack in remove_nh_grp_entry()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98031"},{"cve":"CVE-2026-98033","month":"2026-09","title":"bpf: Preserve inner map identity in callback frames","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98033"},{"cve":"CVE-2026-98034","month":"2026-09","title":"bpf: Mark NULL kptr stores precise","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98034"},{"cve":"CVE-2026-98041","month":"2026-09","title":"bpf: Don't predict JMP32 pointer vs zero comparisons","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98041"},{"cve":"CVE-2026-98043","month":"2026-09","title":"bpf: Don't infer non-NULL from a pointer with an unbounded offset","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98043"},{"cve":"CVE-2026-98044","month":"2026-09","title":"bpf: Reject legacy packet loads from callbacks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98044"},{"cve":"CVE-2026-98046","month":"2026-09","title":"bpf: Mark bpf_btf_find_by_name_kind() as sleepable","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98046"},{"cve":"CVE-2026-98051","month":"2026-09","title":"net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98051"},{"cve":"CVE-2026-98052","month":"2026-09","title":"net: bcmasp: clear txcb->last before writing each descriptor","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98052"},{"cve":"CVE-2026-98056","month":"2026-09","title":"nvme: remove stale namespaces by NSID range during scan","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98056"},{"cve":"CVE-2026-98058","month":"2026-09","title":"bpf: Mark syscall helpers as sleepable","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98058"},{"cve":"CVE-2026-98063","month":"2026-09","title":"bpf: Fix NULL-ptr-deref in btf_var_show()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98063"},{"cve":"CVE-2026-98064","month":"2026-09","title":"bpf: Fix NULL-ptr-deref when showing a void BTF type","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98064"},{"cve":"CVE-2026-98066","month":"2026-09","title":"ALSA: caiaq: Fix potential double-free at error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98066"},{"cve":"CVE-2026-98067","month":"2026-09","title":"erofs: disable LZ4 rolling decompression for now","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98067"},{"cve":"CVE-2026-98069","month":"2026-09","title":"net/rds: acquire the fastpath locks in rds_conn_shutdown()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98069"},{"cve":"CVE-2026-98070","month":"2026-09","title":"net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98070"},{"cve":"CVE-2026-98072","month":"2026-09","title":"net/rds: use wq_has_sleeper() in release_in_xmit()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98072"},{"cve":"CVE-2026-98073","month":"2026-09","title":"net: Remove conflicting altnames for dying netns in __dev_change_net_namespace().","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98073"},{"cve":"CVE-2026-98074","month":"2026-09","title":"bonding: do not clear curr_active_slave prematurely when releasing all slaves","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98074"},{"cve":"CVE-2026-98075","month":"2026-09","title":"bpf: reject BPF_PSEUDO_FUNC reference to the main program","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98075"},{"cve":"CVE-2026-98076","month":"2026-09","title":"tracing/probes: Fix use-after-free on field name/type of events with multiple probes","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98076"},{"cve":"CVE-2026-98077","month":"2026-09","title":"netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98077"},{"cve":"CVE-2026-98078","month":"2026-09","title":"ipvs: fix reversed sequence option serialization","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.6,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98078"},{"cve":"CVE-2026-98079","month":"2026-09","title":"btrfs: zstd: fix lost wakeup when waiting for a workspace","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98079"},{"cve":"CVE-2026-98080","month":"2026-09","title":"btrfs: do not force reloc root creation during qgroup_account_snapshot()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98080"},{"cve":"CVE-2026-98081","month":"2026-09","title":"btrfs: zoned: finish active block group cleanup if call_zone_finish() fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98081"},{"cve":"CVE-2026-98082","month":"2026-09","title":"btrfs: fix the possible bioc_list memory leak during error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98082"},{"cve":"CVE-2026-98083","month":"2026-09","title":"btrfs: fix transaction use-after-free in raid stripe insertion","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98083"},{"cve":"CVE-2026-98084","month":"2026-09","title":"bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98084"},{"cve":"CVE-2026-98085","month":"2026-09","title":"bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98085"},{"cve":"CVE-2026-98086","month":"2026-09","title":"ALSA: ump: do not touch legacy_rmidi before it exists","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98086"},{"cve":"CVE-2026-98087","month":"2026-09","title":"sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98087"},{"cve":"CVE-2026-98089","month":"2026-09","title":"bonding: alb: fix uninitialized transport header access in alb_determine_nd()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98089"},{"cve":"CVE-2026-98090","month":"2026-09","title":"btrfs: restore active device pointers after failed sprout","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98090"},{"cve":"CVE-2026-98091","month":"2026-09","title":"btrfs: detach failed sprout device from transaction update list","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98091"},{"cve":"CVE-2026-98092","month":"2026-09","title":"ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98092"},{"cve":"CVE-2026-98094","month":"2026-09","title":"staging: fbtft: make dirty_lock IRQ-safe","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98094"},{"cve":"CVE-2026-98095","month":"2026-09","title":"af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header().","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98095"},{"cve":"CVE-2026-98096","month":"2026-09","title":"ipv6: sr: restore network header before routing and forwarding","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98096"},{"cve":"CVE-2026-98097","month":"2026-09","title":"tipc: Dont send random pad bytes in RESET/ACTIVATE messages","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98097"},{"cve":"CVE-2026-98098","month":"2026-09","title":"tipc: fix NULL deref in tipc_named_node_up() on empty publication list","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98098"},{"cve":"CVE-2026-98099","month":"2026-09","title":"ipv6: mcast: use rcu_assign_pointer() for __rcu list updates","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98099"},{"cve":"CVE-2026-98101","month":"2026-09","title":"ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98101"},{"cve":"CVE-2026-98102","month":"2026-09","title":"ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98102"},{"cve":"CVE-2026-98103","month":"2026-09","title":"igmp: convert struct ip_sf_list to RCU","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98103"},{"cve":"CVE-2026-98104","month":"2026-09","title":"net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98104"},{"cve":"CVE-2026-98107","month":"2026-09","title":"Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98107"},{"cve":"CVE-2026-98108","month":"2026-09","title":"Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98108"},{"cve":"CVE-2026-98109","month":"2026-09","title":"Bluetooth: hci_core: Fix race condition during device registration","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98109"},{"cve":"CVE-2026-98111","month":"2026-09","title":"Bluetooth: btintel: validate version TLV value lengths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98111"},{"cve":"CVE-2026-98113","month":"2026-09","title":"ksmbd: rate limit unmapped SID errors","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98113"},{"cve":"CVE-2026-98114","month":"2026-09","title":"ksmbd: propagate DACL parsing errors","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98114"},{"cve":"CVE-2026-98115","month":"2026-09","title":"ksmbd: safely drain sessions during logoff","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98115"},{"cve":"CVE-2026-98116","month":"2026-09","title":"ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98116"},{"cve":"CVE-2026-98121","month":"2026-09","title":"watchdog: msc313e: Fix NULL pointer dereference in PM callbacks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98121"},{"cve":"CVE-2026-98122","month":"2026-09","title":"vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98122"},{"cve":"CVE-2026-98123","month":"2026-09","title":"sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98123"},{"cve":"CVE-2026-98124","month":"2026-09","title":"smb/client: invalidate fscache for fallocate range operations","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98124"},{"cve":"CVE-2026-98125","month":"2026-09","title":"smb/client: fix stale page cache in insert/collapse range","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98125"},{"cve":"CVE-2026-98126","month":"2026-09","title":"smb/client: validate new EOF for zero range","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98126"},{"cve":"CVE-2026-98127","month":"2026-09","title":"smb/client: validate new EOF for insert range","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98127"},{"cve":"CVE-2026-98128","month":"2026-09","title":"scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98128"},{"cve":"CVE-2026-98129","month":"2026-09","title":"scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98129"},{"cve":"CVE-2026-98130","month":"2026-09","title":"sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98130"},{"cve":"CVE-2026-98131","month":"2026-09","title":"net: stmmac: fix dma mapping leak in stmmac_tso_xmit()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98131"},{"cve":"CVE-2026-98134","month":"2026-09","title":"bpf: check_cond_jmp_op(): properly infer if register is null","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98134"},{"cve":"CVE-2026-98142","month":"2026-09","title":"drm/cirrus-qemu: Validate BAR0 size during probe","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98142"},{"cve":"CVE-2026-98148","month":"2026-09","title":"drm/gud: validate GUD_ROTATION_0 is present in supported rotations","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98148"},{"cve":"CVE-2026-98154","month":"2026-09","title":"nvme-rdma: fix -EIO cleanup order in queue_rq","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98154"},{"cve":"CVE-2026-98155","month":"2026-09","title":"accel/qaic: Address potential out-of-bounds read in resp_worker()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98155"},{"cve":"CVE-2026-98157","month":"2026-09","title":"EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98157"},{"cve":"CVE-2026-98158","month":"2026-09","title":"ppp_async: drop the errored frame instead of resetting its headroom","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98158"},{"cve":"CVE-2026-98159","month":"2026-09","title":"wifi: mt76: mt7921: validate CLC firmware records","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98159"},{"cve":"CVE-2026-98160","month":"2026-09","title":"staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98160"},{"cve":"CVE-2026-98161","month":"2026-09","title":"nvdimm: pmem: keep PREFLUSH before data writes","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98161"},{"cve":"CVE-2026-98162","month":"2026-09","title":"smb/server: fix tree connection leak in smb2_tree_connect()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98162"},{"cve":"CVE-2026-98164","month":"2026-09","title":"KVM: x86/mmu: Check write tracking in all address spaces","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98164"},{"cve":"CVE-2026-47297","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47297"},{"cve":"CVE-2026-50349","month":"2026-09","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50349"},{"cve":"CVE-2026-55007","month":"2026-09","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55007"},{"cve":"CVE-2026-55946","month":"2026-09","title":"Microsoft Copilot Information Disclosure Vulnerability","family":"Other","component":"Microsoft Copilot","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55946"},{"cve":"CVE-2026-56172","month":"2026-09","title":"Windows VHD miniport driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows VHD miniport driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56172"},{"cve":"CVE-2026-56177","month":"2026-09","title":"Windows Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56177"},{"cve":"CVE-2026-56198","month":"2026-09","title":"Microsoft Trace Data Helper Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Trace Data Helper","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56198"},{"cve":"CVE-2026-57098","month":"2026-09","title":"Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability","family":"Windows","component":"Windows RDP Client","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57098"},{"cve":"CVE-2026-57099","month":"2026-09","title":"ASP.NET Core Denial of Service Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57099"},{"cve":"CVE-2026-58599","month":"2026-09","title":"HEVC Video Extensions Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Codecs Library","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58599"},{"cve":"CVE-2026-58600","month":"2026-09","title":"HEVC Video Extensions Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Codecs Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58600"},{"cve":"CVE-2026-58611","month":"2026-09","title":"Xbox Gaming Services Elevation of Privilege Vulnerability","family":"Apps","component":"XBox Gaming Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58611"},{"cve":"CVE-2026-58649","month":"2026-09","title":".NET Information Disclosure Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58649"},{"cve":"CVE-2026-62694","month":"2026-09","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62694"},{"cve":"CVE-2026-62697","month":"2026-09","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62697"},{"cve":"CVE-2026-62706","month":"2026-09","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62706"},{"cve":"CVE-2026-62744","month":"2026-09","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62744"},{"cve":"CVE-2026-62759","month":"2026-09","title":"Windows Netlogon Spoofing Vulnerability","family":"Windows","component":"Windows Netlogon","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-290"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62759"},{"cve":"CVE-2026-62762","month":"2026-09","title":"Windows Active Directory Domain Services Denial of Service Vulnerability","family":"Windows","component":"Active Directory Domain Services","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62762"},{"cve":"CVE-2026-62801","month":"2026-09","title":"Microsoft PowerShell Security Feature Bypass Vulnerability","family":"Windows","component":"Windows PowerShell","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62801"},{"cve":"CVE-2026-62804","month":"2026-09","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62804"},{"cve":"CVE-2026-62810","month":"2026-09","title":"Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability","family":"Windows","component":"Active Directory Certificate Services (AD CS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62810"},{"cve":"CVE-2026-62813","month":"2026-09","title":"Windows Active Directory Domain Services Remote Code Execution Vulnerability","family":"Windows","component":"Active Directory Domain Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62813"},{"cve":"CVE-2026-62874","month":"2026-09","title":"Azure Billing Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Billing","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-345"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62874"},{"cve":"CVE-2026-62895","month":"2026-09","title":"Azure Arc SQL Server Extension Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Arc","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-942","CWE-1390","CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62895"},{"cve":"CVE-2026-62906","month":"2026-09","title":"Microsoft Discovery Studio Information Disclosure Vulnerability","family":"Azure","component":"Microsoft Discovery Studio","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-943"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62906"},{"cve":"CVE-2026-62916","month":"2026-09","title":"Microsoft Entra ID Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft Entra ID","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-288"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62916"},{"cve":"CVE-2026-63523","month":"2026-09","title":"Skype for Business Spoofing Vulnerability","family":"Microsoft Office","component":"Skype for Business","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63523"},{"cve":"CVE-2026-64918","month":"2026-09","title":"Microsoft Office Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-522"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64918"},{"cve":"CVE-2026-65669","month":"2026-09","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"Windows","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-74"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65669"},{"cve":"CVE-2026-65772","month":"2026-09","title":"Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability","family":"Microsoft Dynamics","component":"Microsoft Dynamics 365","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65772"},{"cve":"CVE-2026-65812","month":"2026-09","title":"Microsoft Teams for Android Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Teams for Android","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-201"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65812"},{"cve":"CVE-2026-65818","month":"2026-09","title":"Power Automate Elevation of Privilege Vulnerability","family":"Microsoft Dynamics","component":"Power Automate","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65818"},{"cve":"CVE-2026-66302","month":"2026-09","title":"Skype for Business Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Skype for Business","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66302"},{"cve":"CVE-2026-66303","month":"2026-09","title":"Skype for Business and Lync Denial of Service Vulnerability","family":"Microsoft Office","component":"Skype for Business","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66303"},{"cve":"CVE-2026-66304","month":"2026-09","title":"Skype for Business Information Disclosure Vulnerability","family":"Microsoft Office","component":"Skype for Business","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66304"},{"cve":"CVE-2026-66305","month":"2026-09","title":"Skype for Business Spoofing Vulnerability","family":"Microsoft Office","component":"Skype for Business","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-603"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66305"},{"cve":"CVE-2026-66306","month":"2026-09","title":"Skype for Business Information Disclosure Vulnerability","family":"Microsoft Office","component":"Skype for Business","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-209"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66306"},{"cve":"CVE-2026-66307","month":"2026-09","title":"Skype for Business and Lync Denial of Service Vulnerability","family":"Microsoft Office","component":"Skype for Business","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66307"},{"cve":"CVE-2026-66308","month":"2026-09","title":"Skype for Business and Lync Denial of Service Vulnerability","family":"Microsoft Office","component":"Skype for Business","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66308"},{"cve":"CVE-2026-66814","month":"2026-09","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1220"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66814"},{"cve":"CVE-2026-66816","month":"2026-09","title":"Microsoft SQL Server Security Feature Bypass Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-778"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66816"},{"cve":"CVE-2026-66818","month":"2026-09","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-269"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66818"},{"cve":"CVE-2026-66819","month":"2026-09","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66819"},{"cve":"CVE-2026-66820","month":"2026-09","title":"SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66820"},{"cve":"CVE-2026-67368","month":"2026-09","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67368"},{"cve":"CVE-2026-67369","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67369"},{"cve":"CVE-2026-67370","month":"2026-09","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67370"},{"cve":"CVE-2026-67373","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67373"},{"cve":"CVE-2026-67376","month":"2026-09","title":"Microsoft SQL Server Denial of Service Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67376"},{"cve":"CVE-2026-67378","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67378"},{"cve":"CVE-2026-67379","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67379"},{"cve":"CVE-2026-67380","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67380"},{"cve":"CVE-2026-67381","month":"2026-09","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67381"},{"cve":"CVE-2026-67383","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-209"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67383"},{"cve":"CVE-2026-67384","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67384"},{"cve":"CVE-2026-67385","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67385"},{"cve":"CVE-2026-67386","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67386"},{"cve":"CVE-2026-67388","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67388"},{"cve":"CVE-2026-67389","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67389"},{"cve":"CVE-2026-67390","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67390"},{"cve":"CVE-2026-67393","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67393"},{"cve":"CVE-2026-67624","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67624"},{"cve":"CVE-2026-67629","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67629"},{"cve":"CVE-2026-67630","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67630"},{"cve":"CVE-2026-67631","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67631"},{"cve":"CVE-2026-67633","month":"2026-09","title":"Microsoft SQL Server Denial of Service Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67633"},{"cve":"CVE-2026-67636","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67636"},{"cve":"CVE-2026-67638","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67638"},{"cve":"CVE-2026-67639","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67639"},{"cve":"CVE-2026-67641","month":"2026-09","title":"Microsoft SQL Server Denial of Service Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67641"},{"cve":"CVE-2026-67642","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67642"},{"cve":"CVE-2026-67643","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67643"},{"cve":"CVE-2026-67645","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67645"},{"cve":"CVE-2026-67648","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67648"},{"cve":"CVE-2026-68775","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68775"},{"cve":"CVE-2026-68776","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68776"},{"cve":"CVE-2026-68777","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68777"},{"cve":"CVE-2026-68778","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68778"},{"cve":"CVE-2026-68779","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68779"},{"cve":"CVE-2026-68780","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68780"},{"cve":"CVE-2026-68781","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68781"},{"cve":"CVE-2026-68784","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68784"},{"cve":"CVE-2026-68785","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68785"},{"cve":"CVE-2026-68786","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68786"},{"cve":"CVE-2026-68787","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68787"},{"cve":"CVE-2026-68791","month":"2026-09","title":"Azure Machine Learning Information Disclosure Vulnerability","family":"Azure","component":"Azure Machine Learning","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68791"},{"cve":"CVE-2026-68824","month":"2026-09","title":"Connected User Experiences and Telemetry Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Connected User Experiences and Telemetry","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68824"},{"cve":"CVE-2026-68825","month":"2026-09","title":"Windows Bind Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bind Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68825"},{"cve":"CVE-2026-68827","month":"2026-09","title":"Windows GDI+ Elevation of Privilege Vulnerability","family":"Windows","component":"Windows GDI+","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68827"},{"cve":"CVE-2026-68828","month":"2026-09","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68828"},{"cve":"CVE-2026-68830","month":"2026-09","title":"Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability","family":"Windows","component":"Windows Universal Plug and Play (UPnP) Device Host","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-59","CWE-269"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68830"},{"cve":"CVE-2026-68831","month":"2026-09","title":"Windows Defender Firewall Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Defender Firewall Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-552"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68831"},{"cve":"CVE-2026-68832","month":"2026-09","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68832"},{"cve":"CVE-2026-68833","month":"2026-09","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68833"},{"cve":"CVE-2026-68834","month":"2026-09","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68834"},{"cve":"CVE-2026-68835","month":"2026-09","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68835"},{"cve":"CVE-2026-68837","month":"2026-09","title":"Windows File History Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows File History Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68837"},{"cve":"CVE-2026-68838","month":"2026-09","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68838"},{"cve":"CVE-2026-68839","month":"2026-09","title":"Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows USB Mass Storage Class Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68839"},{"cve":"CVE-2026-68840","month":"2026-09","title":"Windows USB Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68840"},{"cve":"CVE-2026-68841","month":"2026-09","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68841"},{"cve":"CVE-2026-68842","month":"2026-09","title":"Windows MIDI Service Module Information Disclosure Vulnerability","family":"Windows","component":"Windows MIDI Service Module","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68842"},{"cve":"CVE-2026-68843","month":"2026-09","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68843"},{"cve":"CVE-2026-68844","month":"2026-09","title":"Windows Storage Spaces Controller Remote Code Execution Vulnerability","family":"Windows","component":"Windows Storage Spaces Controller","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68844"},{"cve":"CVE-2026-68845","month":"2026-09","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Program Compatibility Assistant Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68845"},{"cve":"CVE-2026-68846","month":"2026-09","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68846"},{"cve":"CVE-2026-68847","month":"2026-09","title":"Connected User Experiences and Telemetry Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Connected User Experiences and Telemetry","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68847"},{"cve":"CVE-2026-68848","month":"2026-09","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68848"},{"cve":"CVE-2026-68849","month":"2026-09","title":"Windows Bluetooth Port Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows Bluetooth Port Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68849"},{"cve":"CVE-2026-68850","month":"2026-09","title":"Microsoft Account Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Account","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68850"},{"cve":"CVE-2026-68851","month":"2026-09","title":"Windows NTFS Information Disclosure Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68851"},{"cve":"CVE-2026-68852","month":"2026-09","title":"Microsoft Account Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Account","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908","CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68852"},{"cve":"CVE-2026-68873","month":"2026-09","title":"Windows Program Compatibility Assistant Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Program Compatibility Assistant Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-532","CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68873"},{"cve":"CVE-2026-68874","month":"2026-09","title":"Windows Program Compatibility Assistant Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Program Compatibility Assistant Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68874"},{"cve":"CVE-2026-68875","month":"2026-09","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68875"},{"cve":"CVE-2026-68876","month":"2026-09","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Program Compatibility Assistant Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68876"},{"cve":"CVE-2026-68877","month":"2026-09","title":"Windows Storage Spaces Controller Remote Code Execution Vulnerability","family":"Windows","component":"Windows Storage Spaces Controller","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68877"},{"cve":"CVE-2026-68878","month":"2026-09","title":"Windows Fast FAT Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Fast FAT Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68878"},{"cve":"CVE-2026-68880","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68880"},{"cve":"CVE-2026-68881","month":"2026-09","title":"Microsoft Standard XPS Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68881"},{"cve":"CVE-2026-68884","month":"2026-09","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68884"},{"cve":"CVE-2026-68885","month":"2026-09","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68885"},{"cve":"CVE-2026-68886","month":"2026-09","title":"Windows Network Connection Broker Information Disclosure Vulnerability","family":"Windows","component":"Windows Network Connection Broker","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-209"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68886"},{"cve":"CVE-2026-68887","month":"2026-09","title":"Windows Message Queuing Queue Manager Denial of Service Vulnerability","family":"Windows","component":"Windows Message Queuing Queue Manager","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68887"},{"cve":"CVE-2026-68888","month":"2026-09","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68888"},{"cve":"CVE-2026-68889","month":"2026-09","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68889"},{"cve":"CVE-2026-68890","month":"2026-09","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68890"},{"cve":"CVE-2026-68891","month":"2026-09","title":"Microsoft Standard XPS Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68891"},{"cve":"CVE-2026-68892","month":"2026-09","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68892"},{"cve":"CVE-2026-68893","month":"2026-09","title":"Remote Desktop Licensing Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Desktop Licensing Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68893"},{"cve":"CVE-2026-68894","month":"2026-09","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68894"},{"cve":"CVE-2026-68895","month":"2026-09","title":"Internet Storage Name Service Information Disclosure Vulnerability","family":"Windows","component":"Internet Storage Name Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68895"},{"cve":"CVE-2026-68896","month":"2026-09","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-36"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68896"},{"cve":"CVE-2026-68897","month":"2026-09","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68897"},{"cve":"CVE-2026-68898","month":"2026-09","title":"Windows iSCSI Denial of Service Vulnerability","family":"Windows","component":"Windows iSCSI","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68898"},{"cve":"CVE-2026-69265","month":"2026-09","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69265"},{"cve":"CVE-2026-69266","month":"2026-09","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69266"},{"cve":"CVE-2026-69267","month":"2026-09","title":"Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability","family":"Windows","component":"Windows Connected User Experiences and Telemetry","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-1220"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69267"},{"cve":"CVE-2026-69268","month":"2026-09","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69268"},{"cve":"CVE-2026-69269","month":"2026-09","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69269"},{"cve":"CVE-2026-69270","month":"2026-09","title":"Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Audio Class driver (usbaudio.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69270"},{"cve":"CVE-2026-69271","month":"2026-09","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69271"},{"cve":"CVE-2026-69272","month":"2026-09","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69272"},{"cve":"CVE-2026-69273","month":"2026-09","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69273"},{"cve":"CVE-2026-69274","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69274"},{"cve":"CVE-2026-69275","month":"2026-09","title":"Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Kernel Streaming WOW Thunk Service Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69275"},{"cve":"CVE-2026-69276","month":"2026-09","title":"Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft UxTheme Library (uxtheme.dll)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69276"},{"cve":"CVE-2026-69277","month":"2026-09","title":"Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Local Security Authority Server (lsasrv)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69277"},{"cve":"CVE-2026-69279","month":"2026-09","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69279"},{"cve":"CVE-2026-69280","month":"2026-09","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69280"},{"cve":"CVE-2026-69281","month":"2026-09","title":"Windows License Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Windows License Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69281"},{"cve":"CVE-2026-69282","month":"2026-09","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69282"},{"cve":"CVE-2026-69283","month":"2026-09","title":"Windows CD-ROM Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows CD-ROM Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69283"},{"cve":"CVE-2026-69284","month":"2026-09","title":"Windows DCOM Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DCOM Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69284"},{"cve":"CVE-2026-69285","month":"2026-09","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69285"},{"cve":"CVE-2026-69286","month":"2026-09","title":"Windows USB Audio Class Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows USB Audio Class driver (usbaudio.sys)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69286"},{"cve":"CVE-2026-69287","month":"2026-09","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Desktop Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69287"},{"cve":"CVE-2026-69288","month":"2026-09","title":"Windows GDI+ Information Disclosure Vulnerability","family":"Windows","component":"Windows GDI+","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69288"},{"cve":"CVE-2026-69289","month":"2026-09","title":"Windows Setup Files Cleanup Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Setup Files Cleanup","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69289"},{"cve":"CVE-2026-69290","month":"2026-09","title":"Windows Storage Spaces Controller Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage Spaces Controller","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69290"},{"cve":"CVE-2026-69291","month":"2026-09","title":"Windows Volume Manager Extension Driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows Volume Manager Extension Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69291"},{"cve":"CVE-2026-69292","month":"2026-09","title":"Remote Desktop Gateway Service Elevation of Privilege Vulnerability","family":"Windows","component":"Remote Desktop Gateway Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69292"},{"cve":"CVE-2026-69293","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69293"},{"cve":"CVE-2026-69294","month":"2026-09","title":"Microsoft COM for Windows Information Disclosure Vulnerability","family":"Windows","component":"Microsoft COM for Windows","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-209"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69294"},{"cve":"CVE-2026-69295","month":"2026-09","title":"Windows USB Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69295"},{"cve":"CVE-2026-69296","month":"2026-09","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69296"},{"cve":"CVE-2026-69297","month":"2026-09","title":"Windows DHCP Server Information Disclosure Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-257"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69297"},{"cve":"CVE-2026-69298","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69298"},{"cve":"CVE-2026-69299","month":"2026-09","title":"Microsoft COM for Windows Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft COM for Windows","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69299"},{"cve":"CVE-2026-69300","month":"2026-09","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69300"},{"cve":"CVE-2026-69301","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69301"},{"cve":"CVE-2026-69303","month":"2026-09","title":"Push Message Routing Service Information Disclosure Vulnerability","family":"Windows","component":"Push Message Routing Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69303"},{"cve":"CVE-2026-69304","month":"2026-09","title":"ASP.NET Core Denial of Service Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-409"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69304"},{"cve":"CVE-2026-69305","month":"2026-09","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69305"},{"cve":"CVE-2026-69307","month":"2026-09","title":"Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Audio Class driver (usbaudio.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69307"},{"cve":"CVE-2026-69308","month":"2026-09","title":"Microsoft Standard XPS Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69308"},{"cve":"CVE-2026-69309","month":"2026-09","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69309"},{"cve":"CVE-2026-69310","month":"2026-09","title":"Windows DNS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69310"},{"cve":"CVE-2026-69311","month":"2026-09","title":"Windows Audio Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Audio Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69311"},{"cve":"CVE-2026-69312","month":"2026-09","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69312"},{"cve":"CVE-2026-69313","month":"2026-09","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69313"},{"cve":"CVE-2026-69314","month":"2026-09","title":"Windows Device Association Broker Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Broker service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69314"},{"cve":"CVE-2026-69315","month":"2026-09","title":"Windows License Manager Information Disclosure Vulnerability","family":"Windows","component":"Windows License Manager","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69315"},{"cve":"CVE-2026-69316","month":"2026-09","title":"Windows Overlay Filter Information Disclosure Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69316"},{"cve":"CVE-2026-69317","month":"2026-09","title":"Windows Remote Desktop Client Information Disclosure Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69317"},{"cve":"CVE-2026-69318","month":"2026-09","title":"Windows Imaging Component Information Disclosure Vulnerability","family":"Windows","component":"Windows Imaging Component","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69318"},{"cve":"CVE-2026-69319","month":"2026-09","title":"Windows USB Video Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Video Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69319"},{"cve":"CVE-2026-69321","month":"2026-09","title":"Windows Power Dependency Coordinator Tampering Vulnerability","family":"Windows","component":"Windows Power Dependency Coordinator","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69321"},{"cve":"CVE-2026-69322","month":"2026-09","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69322"},{"cve":"CVE-2026-69323","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69323"},{"cve":"CVE-2026-69324","month":"2026-09","title":"Windows Performance Monitor Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Performance Monitor","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69324"},{"cve":"CVE-2026-69325","month":"2026-09","title":"Microsoft JScript Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft JScript","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69325"},{"cve":"CVE-2026-69328","month":"2026-09","title":"Windows Storage Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69328"},{"cve":"CVE-2026-69329","month":"2026-09","title":"BranchCache Denial of Service Vulnerability","family":"Windows","component":"BranchCache","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69329"},{"cve":"CVE-2026-69331","month":"2026-09","title":"Windows Remote Access Connection Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Access Connection Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69331"},{"cve":"CVE-2026-69332","month":"2026-09","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69332"},{"cve":"CVE-2026-69333","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69333"},{"cve":"CVE-2026-69334","month":"2026-09","title":"Windows Volume Manager Extension Driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows Volume Manager Extension Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69334"},{"cve":"CVE-2026-69335","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69335"},{"cve":"CVE-2026-69336","month":"2026-09","title":"Microsoft Standard XPS Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69336"},{"cve":"CVE-2026-69337","month":"2026-09","title":"Windows Registry Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Registry","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69337"},{"cve":"CVE-2026-69338","month":"2026-09","title":"Remote Desktop Gateway Service Elevation of Privilege Vulnerability","family":"Windows","component":"Remote Desktop Gateway Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69338"},{"cve":"CVE-2026-69339","month":"2026-09","title":"Windows MIDI Service Module Information Disclosure Vulnerability","family":"Windows","component":"Windows MIDI Service Module","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69339"},{"cve":"CVE-2026-69340","month":"2026-09","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69340"},{"cve":"CVE-2026-69341","month":"2026-09","title":"Windows Image Acquisition Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Image Acquisition","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69341"},{"cve":"CVE-2026-69342","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69342"},{"cve":"CVE-2026-69343","month":"2026-09","title":"Windows Overlay Filter Information Disclosure Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69343"},{"cve":"CVE-2026-69344","month":"2026-09","title":"Windows Print Spooler Components Information Disclosure Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69344"},{"cve":"CVE-2026-69345","month":"2026-09","title":"Microsoft Standard XPS Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69345"},{"cve":"CVE-2026-69346","month":"2026-09","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69346"},{"cve":"CVE-2026-69347","month":"2026-09","title":"Windows Fast FAT Driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows Fast FAT Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69347"},{"cve":"CVE-2026-69348","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69348"},{"cve":"CVE-2026-69349","month":"2026-09","title":"Windows Management Instrumentation Information Disclosure Vulnerability","family":"Windows","component":"Windows Management Instrumentation","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69349"},{"cve":"CVE-2026-69350","month":"2026-09","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69350"},{"cve":"CVE-2026-69351","month":"2026-09","title":"Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability","family":"Windows","component":"Windows Universal Plug and Play (UPnP) Device Host","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-359"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69351"},{"cve":"CVE-2026-69352","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69352"},{"cve":"CVE-2026-69353","month":"2026-09","title":"Windows Text Shaping Information Disclosure Vulnerability","family":"Windows","component":"Windows Text Shaping","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69353"},{"cve":"CVE-2026-69355","month":"2026-09","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69355"},{"cve":"CVE-2026-69356","month":"2026-09","title":"Microsoft Exchange Server Spoofing Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69356"},{"cve":"CVE-2026-69357","month":"2026-09","title":"Windows NDIS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NDIS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69357"},{"cve":"CVE-2026-69358","month":"2026-09","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69358"},{"cve":"CVE-2026-69359","month":"2026-09","title":"Active Directory Domain Services Elevation of Privilege Vulnerability","family":"Windows","component":"Active Directory Domain Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69359"},{"cve":"CVE-2026-69360","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69360"},{"cve":"CVE-2026-69361","month":"2026-09","title":"Microsoft Exchange Server Spoofing Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69361"},{"cve":"CVE-2026-69362","month":"2026-09","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69362"},{"cve":"CVE-2026-69364","month":"2026-09","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69364"},{"cve":"CVE-2026-69365","month":"2026-09","title":"Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Local Security Authority Server (lsasrv)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69365"},{"cve":"CVE-2026-69366","month":"2026-09","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69366"},{"cve":"CVE-2026-69367","month":"2026-09","title":"Microsoft Standard XPS Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69367"},{"cve":"CVE-2026-69368","month":"2026-09","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69368"},{"cve":"CVE-2026-69369","month":"2026-09","title":"Windows DNS Information Disclosure Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69369"},{"cve":"CVE-2026-69371","month":"2026-09","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69371"},{"cve":"CVE-2026-69372","month":"2026-09","title":"Windows Network File System Denial of Service Vulnerability","family":"Windows","component":"Windows Network File System","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69372"},{"cve":"CVE-2026-69373","month":"2026-09","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69373"},{"cve":"CVE-2026-69374","month":"2026-09","title":"Windows SMB Server Denial of Service Vulnerability","family":"Windows","component":"Windows SMB Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69374"},{"cve":"CVE-2026-69375","month":"2026-09","title":"Microsoft Exchange Server Tampering Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-639"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69375"},{"cve":"CVE-2026-69376","month":"2026-09","title":"Microsoft Standard XPS Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69376"},{"cve":"CVE-2026-69377","month":"2026-09","title":"Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Modern Device Management (MDM)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69377"},{"cve":"CVE-2026-69378","month":"2026-09","title":"Microsoft Exchange Server Denial of Service Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69378"},{"cve":"CVE-2026-69379","month":"2026-09","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69379"},{"cve":"CVE-2026-69380","month":"2026-09","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69380"},{"cve":"CVE-2026-69381","month":"2026-09","title":"Windows Storage Port Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows Storage Port Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69381"},{"cve":"CVE-2026-69382","month":"2026-09","title":"Microsoft Exchange Server Information Disclosure Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-327"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69382"},{"cve":"CVE-2026-69383","month":"2026-09","title":"Windows Shell Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69383"},{"cve":"CVE-2026-69384","month":"2026-09","title":"Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability","family":"Windows","component":"Virtual Hard Disk (VHD) Miniport Driver","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69384"},{"cve":"CVE-2026-69385","month":"2026-09","title":"Windows TCP/IP Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69385"},{"cve":"CVE-2026-69386","month":"2026-09","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69386"},{"cve":"CVE-2026-69388","month":"2026-09","title":"Windows Bluetooth Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bluetooth Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69388"},{"cve":"CVE-2026-69389","month":"2026-09","title":"Windows Storage Management Provider Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage Management Provider","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69389"},{"cve":"CVE-2026-69390","month":"2026-09","title":"Windows Spaceport.sys Information Disclosure Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69390"},{"cve":"CVE-2026-69391","month":"2026-09","title":"Windows Broker Infrastructure Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broker Infrastructure Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69391"},{"cve":"CVE-2026-69392","month":"2026-09","title":"Windows Shell Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69392"},{"cve":"CVE-2026-69393","month":"2026-09","title":"Windows Spaceport.sys Information Disclosure Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69393"},{"cve":"CVE-2026-69394","month":"2026-09","title":"Windows Audio Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Audio Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69394"},{"cve":"CVE-2026-69395","month":"2026-09","title":"Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability","family":"Windows","component":"Active Directory Certificate Services (AD CS)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-134"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69395"},{"cve":"CVE-2026-69396","month":"2026-09","title":"Windows NDIS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NDIS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69396"},{"cve":"CVE-2026-69397","month":"2026-09","title":"Microsoft OpenSSH for Windows Remote Code Execution Vulnerability","family":"Windows","component":"OpenSSH for Windows","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69397"},{"cve":"CVE-2026-69398","month":"2026-09","title":"Windows Bluetooth Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bluetooth Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69398"},{"cve":"CVE-2026-69399","month":"2026-09","title":"Azure Arc Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Arc","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-441"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69399"},{"cve":"CVE-2026-69401","month":"2026-09","title":"Audio Video Control Transport Protocol Elevation of Privilege Vulnerability","family":"Windows","component":"Audio Video Control Transport Protocol","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69401"},{"cve":"CVE-2026-69402","month":"2026-09","title":"Microsoft Office SharePoint Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69402"},{"cve":"CVE-2026-69403","month":"2026-09","title":"Windows SMB Server Information Disclosure Vulnerability","family":"Windows","component":"Windows SMB Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69403"},{"cve":"CVE-2026-69404","month":"2026-09","title":"Windows TCP/IP Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69404"},{"cve":"CVE-2026-69405","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69405"},{"cve":"CVE-2026-69406","month":"2026-09","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69406"},{"cve":"CVE-2026-69407","month":"2026-09","title":"Volume Manager Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Volume Manager Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69407"},{"cve":"CVE-2026-69408","month":"2026-09","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69408"},{"cve":"CVE-2026-69409","month":"2026-09","title":"Microsoft Office SharePoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-250"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69409"},{"cve":"CVE-2026-69410","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69410"},{"cve":"CVE-2026-69412","month":"2026-09","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69412"},{"cve":"CVE-2026-69413","month":"2026-09","title":"Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Audio Class driver (usbaudio.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69413"},{"cve":"CVE-2026-69415","month":"2026-09","title":"Windows DHCP Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69415"},{"cve":"CVE-2026-69416","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69416"},{"cve":"CVE-2026-69417","month":"2026-09","title":"Microsoft Office SharePoint Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69417"},{"cve":"CVE-2026-69418","month":"2026-09","title":"Volume Manager Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Volume Manager Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69418"},{"cve":"CVE-2026-69420","month":"2026-09","title":"Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows VOLSNAP.SYS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69420"},{"cve":"CVE-2026-69421","month":"2026-09","title":"Windows Kernel-Mode Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel Mode Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69421"},{"cve":"CVE-2026-69422","month":"2026-09","title":"Windows USB Video Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Video Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69422"},{"cve":"CVE-2026-69423","month":"2026-09","title":"Windows USB Video Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Video Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69423"},{"cve":"CVE-2026-69424","month":"2026-09","title":"Windows Distributed File System (DFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Distributed File System (DFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69424"},{"cve":"CVE-2026-69425","month":"2026-09","title":"Windows NTFS Tampering Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69425"},{"cve":"CVE-2026-69426","month":"2026-09","title":"Windows VOLSNAP.SYS Remote Code Execution Vulnerability","family":"Windows","component":"Windows VOLSNAP.SYS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69426"},{"cve":"CVE-2026-69427","month":"2026-09","title":"Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows VOLSNAP.SYS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69427"},{"cve":"CVE-2026-69428","month":"2026-09","title":"Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability","family":"Windows","component":"Windows LDAP - Lightweight Directory Access Protocol","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69428"},{"cve":"CVE-2026-69429","month":"2026-09","title":"Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability","family":"Windows","component":"Windows IKE Extension","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69429"},{"cve":"CVE-2026-69430","month":"2026-09","title":"Windows Embedded Mode Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Embedded Mode Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69430"},{"cve":"CVE-2026-69431","month":"2026-09","title":"Telnet Client Remote Code Execution Vulnerability","family":"Windows","component":"Telnet Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69431"},{"cve":"CVE-2026-69432","month":"2026-09","title":"Volume Manager Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Volume Manager Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69432"},{"cve":"CVE-2026-69433","month":"2026-09","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69433"},{"cve":"CVE-2026-69434","month":"2026-09","title":"Windows URL Moniker Remote Code Execution Vulnerability","family":"Windows","component":"Windows URL Moniker","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69434"},{"cve":"CVE-2026-69436","month":"2026-09","title":"Windows State Repository Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows State Repository Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69436"},{"cve":"CVE-2026-69438","month":"2026-09","title":"Microsoft JScript Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft JScript","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-681"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69438"},{"cve":"CVE-2026-69439","month":"2026-09","title":".NET and Visual Studio Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET and Visual Studio","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69439"},{"cve":"CVE-2026-69440","month":"2026-09","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","family":"Windows","component":"Windows MIDI Service Module","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69440"},{"cve":"CVE-2026-69441","month":"2026-09","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69441"},{"cve":"CVE-2026-69442","month":"2026-09","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69442"},{"cve":"CVE-2026-69443","month":"2026-09","title":"Windows Device Health Attestation (DHA) Information Disclosure Vulnerability","family":"Windows","component":"Windows Device Health Attestation (DHA)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69443"},{"cve":"CVE-2026-69444","month":"2026-09","title":"Microsoft Windows Speech Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Speech","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69444"},{"cve":"CVE-2026-69445","month":"2026-09","title":"Windows Compressed Folder Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Compressed Folder","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69445"},{"cve":"CVE-2026-69447","month":"2026-09","title":"Windows Audio Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Audio Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69447"},{"cve":"CVE-2026-69448","month":"2026-09","title":"Windows Bluetooth Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bluetooth Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69448"},{"cve":"CVE-2026-69449","month":"2026-09","title":"Windows BitLocker Remote Code Execution Vulnerability","family":"Windows","component":"Windows BitLocker","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69449"},{"cve":"CVE-2026-69450","month":"2026-09","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69450"},{"cve":"CVE-2026-69451","month":"2026-09","title":"Windows Management Instrumentation Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Instrumentation","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69451"},{"cve":"CVE-2026-69453","month":"2026-09","title":"Microsoft Windows Search Component Tampering Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69453"},{"cve":"CVE-2026-69455","month":"2026-09","title":"Windows Remote Access Connection Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Access Connection Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69455"},{"cve":"CVE-2026-69456","month":"2026-09","title":"Microsoft Windows Speech Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Speech","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69456"},{"cve":"CVE-2026-69457","month":"2026-09","title":"Windows USB Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows USB Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69457"},{"cve":"CVE-2026-69458","month":"2026-09","title":"Windows BitLocker Elevation of Privilege Vulnerability","family":"Windows","component":"Windows BitLocker","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69458"},{"cve":"CVE-2026-69459","month":"2026-09","title":"Windows Power Dependency Coordinator Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Power Dependency Coordinator","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69459"},{"cve":"CVE-2026-69460","month":"2026-09","title":"Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Modern Device Management (MDM)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69460"},{"cve":"CVE-2026-69461","month":"2026-09","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69461"},{"cve":"CVE-2026-69462","month":"2026-09","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69462"},{"cve":"CVE-2026-69463","month":"2026-09","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69463"},{"cve":"CVE-2026-69464","month":"2026-09","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-250"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69464"},{"cve":"CVE-2026-69465","month":"2026-09","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69465"},{"cve":"CVE-2026-69466","month":"2026-09","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69466"},{"cve":"CVE-2026-69467","month":"2026-09","title":"Microsoft Graphics Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69467"},{"cve":"CVE-2026-69468","month":"2026-09","title":"Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Volume Manager Extension Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69468"},{"cve":"CVE-2026-69469","month":"2026-09","title":"Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Audio Class driver (usbaudio.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69469"},{"cve":"CVE-2026-69470","month":"2026-09","title":"Connected User Experiences and Telemetry Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Connected User Experiences and Telemetry","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69470"},{"cve":"CVE-2026-69472","month":"2026-09","title":"Windows Devices Human Interface Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Devices Human Interface","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69472"},{"cve":"CVE-2026-69473","month":"2026-09","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69473"},{"cve":"CVE-2026-69474","month":"2026-09","title":"Windows Overlay Filter Information Disclosure Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69474"},{"cve":"CVE-2026-69475","month":"2026-09","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Desktop Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69475"},{"cve":"CVE-2026-69476","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69476"},{"cve":"CVE-2026-69477","month":"2026-09","title":"Microsoft Office Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69477"},{"cve":"CVE-2026-69478","month":"2026-09","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69478"},{"cve":"CVE-2026-69479","month":"2026-09","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69479"},{"cve":"CVE-2026-69480","month":"2026-09","title":"Windows Partition Management Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Partition Management Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69480"},{"cve":"CVE-2026-69481","month":"2026-09","title":"Windows Enterprise App Management Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Enterprise App Management","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69481"},{"cve":"CVE-2026-69482","month":"2026-09","title":"Windows Error Reporting Tampering Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-379"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69482"},{"cve":"CVE-2026-69483","month":"2026-09","title":"Windows Image Acquisition Information Disclosure Vulnerability","family":"Windows","component":"Windows Image Acquisition","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69483"},{"cve":"CVE-2026-69485","month":"2026-09","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69485"},{"cve":"CVE-2026-69486","month":"2026-09","title":"Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69486"},{"cve":"CVE-2026-69488","month":"2026-09","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69488"},{"cve":"CVE-2026-69489","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69489"},{"cve":"CVE-2026-69490","month":"2026-09","title":"Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Mass Storage Class Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69490"},{"cve":"CVE-2026-69491","month":"2026-09","title":"Microsoft DirectMusic Remote Code Execution Vulnerability","family":"Windows","component":"Windows Microsoft DirectMusic","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69491"},{"cve":"CVE-2026-69492","month":"2026-09","title":"Windows Partition Management Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Partition Management Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69492"},{"cve":"CVE-2026-69493","month":"2026-09","title":"Windows Event Logging Service Remote Code Execution Vulnerability","family":"Windows","component":"Windows Event Logging Service","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69493"},{"cve":"CVE-2026-69494","month":"2026-09","title":"Windows Event Logging Service Remote Code Execution Vulnerability","family":"Windows","component":"Windows Event Logging Service","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69494"},{"cve":"CVE-2026-69495","month":"2026-09","title":"Windows Event Logging Service Remote Code Execution Vulnerability","family":"Windows","component":"Windows Event Logging Service","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69495"},{"cve":"CVE-2026-69496","month":"2026-09","title":"Windows Compressed Folder Remote Code Execution Vulnerability","family":"Windows","component":"Windows Compressed Folder","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69496"},{"cve":"CVE-2026-69497","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69497"},{"cve":"CVE-2026-69498","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69498"},{"cve":"CVE-2026-69499","month":"2026-09","title":"Windows Imaging Component Remote Code Execution Vulnerability","family":"Windows","component":"Windows Imaging Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69499"},{"cve":"CVE-2026-69500","month":"2026-09","title":"Windows Image Acquisition Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Image Acquisition","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69500"},{"cve":"CVE-2026-69501","month":"2026-09","title":"Windows Secure Kernel Mode Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Secure Kernel Mode","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69501"},{"cve":"CVE-2026-69503","month":"2026-09","title":"Windows USB Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69503"},{"cve":"CVE-2026-69504","month":"2026-09","title":"Windows NTFS Information Disclosure Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69504"},{"cve":"CVE-2026-69505","month":"2026-09","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69505"},{"cve":"CVE-2026-69507","month":"2026-09","title":"Microsoft Windows Search Component Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-538"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69507"},{"cve":"CVE-2026-69508","month":"2026-09","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","family":"Windows","component":"Windows MIDI Service Module","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69508"},{"cve":"CVE-2026-69509","month":"2026-09","title":"Role: Windows Fax Service Elevation of Privilege Vulnerability","family":"Windows","component":"Role: Windows Fax Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69509"},{"cve":"CVE-2026-69510","month":"2026-09","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69510"},{"cve":"CVE-2026-69511","month":"2026-09","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69511"},{"cve":"CVE-2026-69512","month":"2026-09","title":"Windows Spaceport.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69512"},{"cve":"CVE-2026-69513","month":"2026-09","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69513"},{"cve":"CVE-2026-69514","month":"2026-09","title":"Remote Desktop Services\u00a0Remote Code Execution Vulnerability","family":"Windows","component":"Windows Remote Desktop Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69514"},{"cve":"CVE-2026-69516","month":"2026-09","title":"Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability","family":"Windows","component":"Connected Devices Platform Service (Cdpsvc)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69516"},{"cve":"CVE-2026-69517","month":"2026-09","title":"Windows Wireless Networking Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Wireless Networking","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69517"},{"cve":"CVE-2026-69518","month":"2026-09","title":"Windows Remote Desktop Remote Code Execution Vulnerability","family":"Windows","component":"Windows Remote Desktop","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69518"},{"cve":"CVE-2026-69522","month":"2026-09","title":".NET and Visual Studio Remote Code Execution Vulnerability","family":"Developer Tools","component":"Visual Studio","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69522"},{"cve":"CVE-2026-69524","month":"2026-09","title":"Windows Active Directory Domain Services Remote Code Execution Vulnerability","family":"Windows","component":"Active Directory Domain Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69524"},{"cve":"CVE-2026-69525","month":"2026-09","title":"Remote Desktop Services\u00a0Remote Code Execution Vulnerability","family":"Windows","component":"Windows Remote Desktop Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69525"},{"cve":"CVE-2026-69527","month":"2026-09","title":"Windows USB Mass Storage Class Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows USB Mass Storage Class Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69527"},{"cve":"CVE-2026-69528","month":"2026-09","title":"Windows Shell Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69528"},{"cve":"CVE-2026-69529","month":"2026-09","title":"Microsoft Office Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69529"},{"cve":"CVE-2026-69530","month":"2026-09","title":"Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability","family":"Windows","component":"Reliable Multicast Transport Driver (RMCAST)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69530"},{"cve":"CVE-2026-69531","month":"2026-09","title":"Microsoft Windows Speech Tampering Vulnerability","family":"Windows","component":"Microsoft Windows Speech","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-441"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69531"},{"cve":"CVE-2026-69532","month":"2026-09","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69532"},{"cve":"CVE-2026-69534","month":"2026-09","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Program Compatibility Assistant Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69534"},{"cve":"CVE-2026-69535","month":"2026-09","title":"Windows Spaceport.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69535"},{"cve":"CVE-2026-69536","month":"2026-09","title":"Remote Desktop Services\u00a0Remote Code Execution Vulnerability","family":"Windows","component":"Windows Remote Desktop Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69536"},{"cve":"CVE-2026-69538","month":"2026-09","title":"Windows Spaceport.sys Remote Code Execution Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69538"},{"cve":"CVE-2026-69539","month":"2026-09","title":"Remote Desktop Services\u00a0Remote Code Execution Vulnerability","family":"Windows","component":"Windows Remote Desktop Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69539"},{"cve":"CVE-2026-69540","month":"2026-09","title":"Windows Audio Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Audio Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69540"},{"cve":"CVE-2026-69541","month":"2026-09","title":"Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability","family":"Windows","component":"Virtual Hard Disk (VHD) Miniport Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69541"},{"cve":"CVE-2026-69542","month":"2026-09","title":"Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Camera Frame Server Monitor","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69542"},{"cve":"CVE-2026-69544","month":"2026-09","title":"Windows SMB Client Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SMB Client","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69544"},{"cve":"CVE-2026-69546","month":"2026-09","title":"Windows Active Directory Domain Services Remote Code Execution Vulnerability","family":"Windows","component":"Active Directory Domain Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69546"},{"cve":"CVE-2026-69547","month":"2026-09","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69547"},{"cve":"CVE-2026-69548","month":"2026-09","title":"Windows RNDIS Information Disclosure Vulnerability","family":"Windows","component":"Windows RNDIS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69548"},{"cve":"CVE-2026-69549","month":"2026-09","title":"Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability","family":"Windows","component":"Virtual Hard Disk (VHD) Miniport Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69549"},{"cve":"CVE-2026-69551","month":"2026-09","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69551"},{"cve":"CVE-2026-69552","month":"2026-09","title":"Windows Print Spooler Components Information Disclosure Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-209"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69552"},{"cve":"CVE-2026-69553","month":"2026-09","title":"Windows Hyper-V Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69553"},{"cve":"CVE-2026-69554","month":"2026-09","title":"Microsoft Windows Search Component Tampering Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69554"},{"cve":"CVE-2026-69556","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69556"},{"cve":"CVE-2026-69559","month":"2026-09","title":"Microsoft Teams for Android Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Teams for Android","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69559"},{"cve":"CVE-2026-69560","month":"2026-09","title":"Windows Work Folder Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Work Folder Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69560"},{"cve":"CVE-2026-69561","month":"2026-09","title":"Windows CD-ROM Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows CD-ROM Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69561"},{"cve":"CVE-2026-69562","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69562"},{"cve":"CVE-2026-69563","month":"2026-09","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Program Compatibility Assistant Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69563"},{"cve":"CVE-2026-69564","month":"2026-09","title":"Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Online Certificate Status Protocol (OCSP)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69564"},{"cve":"CVE-2026-69566","month":"2026-09","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69566"},{"cve":"CVE-2026-69567","month":"2026-09","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69567"},{"cve":"CVE-2026-69568","month":"2026-09","title":"Storage Spaces Controller Information Disclosure Vulnerability","family":"Windows","component":"Windows Storage Spaces Controller","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69568"},{"cve":"CVE-2026-69569","month":"2026-09","title":"Windows Print Spooler Components Denial of Service Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69569"},{"cve":"CVE-2026-69571","month":"2026-09","title":"Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Audio Class driver (usbaudio.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69571"},{"cve":"CVE-2026-69572","month":"2026-09","title":"Windows SMB Client Information Disclosure Vulnerability","family":"Windows","component":"Windows SMB Client","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69572"},{"cve":"CVE-2026-69573","month":"2026-09","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69573"},{"cve":"CVE-2026-69574","month":"2026-09","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69574"},{"cve":"CVE-2026-69575","month":"2026-09","title":"Windows Storage Spaces Controller Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage Spaces Controller","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69575"},{"cve":"CVE-2026-69576","month":"2026-09","title":"Graphic Fonts Elevation of Privilege Vulnerability","family":"Windows","component":"Graphic Fonts","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69576"},{"cve":"CVE-2026-69578","month":"2026-09","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69578"},{"cve":"CVE-2026-69579","month":"2026-09","title":"Windows Message Queuing Remote Code Execution Vulnerability","family":"Windows","component":"Windows Message Queuing","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69579"},{"cve":"CVE-2026-69580","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69580"},{"cve":"CVE-2026-69581","month":"2026-09","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69581"},{"cve":"CVE-2026-69582","month":"2026-09","title":"Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Volume Manager Extension Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69582"},{"cve":"CVE-2026-69583","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69583"},{"cve":"CVE-2026-69584","month":"2026-09","title":"Windows USB Video Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Video Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69584"},{"cve":"CVE-2026-69585","month":"2026-09","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-704"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69585"},{"cve":"CVE-2026-69586","month":"2026-09","title":"Microsoft Windows PDF Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows PDF","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69586"},{"cve":"CVE-2026-69587","month":"2026-09","title":"Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability","family":"Windows","component":"Windows IKE Extension","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69587"},{"cve":"CVE-2026-69588","month":"2026-09","title":"Windows TCP/IP Denial of Service Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69588"},{"cve":"CVE-2026-69589","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69589"},{"cve":"CVE-2026-69590","month":"2026-09","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69590"},{"cve":"CVE-2026-69591","month":"2026-09","title":"Windows NTFS Information Disclosure Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69591"},{"cve":"CVE-2026-69592","month":"2026-09","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69592"},{"cve":"CVE-2026-69593","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69593"},{"cve":"CVE-2026-69594","month":"2026-09","title":"Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Local Security Authority Server (lsasrv)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69594"},{"cve":"CVE-2026-69595","month":"2026-09","title":"Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows Services for NFS ONCRPC XDR Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69595"},{"cve":"CVE-2026-69597","month":"2026-09","title":"Windows HTTP.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69597"},{"cve":"CVE-2026-69598","month":"2026-09","title":"Windows iSCSI Remote Code Execution Vulnerability","family":"Windows","component":"Windows iSCSI","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-131"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69598"},{"cve":"CVE-2026-69599","month":"2026-09","title":"Remote Desktop Services\u00a0Remote Code Execution Vulnerability","family":"Windows","component":"Windows Remote Desktop Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69599"},{"cve":"CVE-2026-69600","month":"2026-09","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69600"},{"cve":"CVE-2026-69601","month":"2026-09","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69601"},{"cve":"CVE-2026-69602","month":"2026-09","title":"Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability","family":"Windows","component":"Windows PrintWorkflowUserSvc","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69602"},{"cve":"CVE-2026-69603","month":"2026-09","title":"Windows Hyper-V Remote Code Execution Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69603"},{"cve":"CVE-2026-69604","month":"2026-09","title":"Windows Audio Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Audio Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69604"},{"cve":"CVE-2026-69605","month":"2026-09","title":"Microsoft Install Service Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Install Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69605"},{"cve":"CVE-2026-69606","month":"2026-09","title":"Windows Shell Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69606"},{"cve":"CVE-2026-69607","month":"2026-09","title":"Windows Deployment Services Remote Code Execution Vulnerability","family":"Windows","component":"Windows Deployment Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69607"},{"cve":"CVE-2026-69608","month":"2026-09","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69608"},{"cve":"CVE-2026-69609","month":"2026-09","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-193"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69609"},{"cve":"CVE-2026-69610","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69610"},{"cve":"CVE-2026-69611","month":"2026-09","title":"Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability","family":"Windows","component":"Virtual Hard Disk (VHD) Miniport Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69611"},{"cve":"CVE-2026-69612","month":"2026-09","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-36"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69612"},{"cve":"CVE-2026-69613","month":"2026-09","title":"Windows Image Acquisition Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Image Acquisition","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69613"},{"cve":"CVE-2026-69614","month":"2026-09","title":"Microsoft Office Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69614"},{"cve":"CVE-2026-69615","month":"2026-09","title":"Microsoft Office SharePoint Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69615"},{"cve":"CVE-2026-69616","month":"2026-09","title":"Windows Remote Desktop Services Information Disclosure Vulnerability","family":"Windows","component":"Windows Remote Desktop Services","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69616"},{"cve":"CVE-2026-69617","month":"2026-09","title":"Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69617"},{"cve":"CVE-2026-69618","month":"2026-09","title":"Windows SMB Client Information Disclosure Vulnerability","family":"Windows","component":"Windows SMB Client","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69618"},{"cve":"CVE-2026-69619","month":"2026-09","title":"Windows exFAT File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows exFAT File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69619"},{"cve":"CVE-2026-69620","month":"2026-09","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69620"},{"cve":"CVE-2026-69621","month":"2026-09","title":"Role: Windows Fax Service Elevation of Privilege Vulnerability","family":"Windows","component":"Role: Windows Fax Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69621"},{"cve":"CVE-2026-69623","month":"2026-09","title":"Windows HTTP Print Provider Remote Code Execution Vulnerability","family":"Windows","component":"Windows HTTP Print Provider","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69623"},{"cve":"CVE-2026-69624","month":"2026-09","title":"Active Directory Certificate Services (AD CS) Tampering Vulnerability","family":"Windows","component":"Active Directory Certificate Services (AD CS)","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-184"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69624"},{"cve":"CVE-2026-69625","month":"2026-09","title":"Connected User Experiences and Telemetry Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Connected User Experiences and Telemetry","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69625"},{"cve":"CVE-2026-69626","month":"2026-09","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69626"},{"cve":"CVE-2026-69627","month":"2026-09","title":"Windows Remote Desktop Licensing Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Remote Desktop Licensing Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69627"},{"cve":"CVE-2026-69628","month":"2026-09","title":"Windows iSCSI Remote Code Execution Vulnerability","family":"Windows","component":"Windows iSCSI","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69628"},{"cve":"CVE-2026-69629","month":"2026-09","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69629"},{"cve":"CVE-2026-69630","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69630"},{"cve":"CVE-2026-69631","month":"2026-09","title":"Windows DNS Denial of Service Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69631"},{"cve":"CVE-2026-69632","month":"2026-09","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69632"},{"cve":"CVE-2026-69636","month":"2026-09","title":"Microsoft Office SharePoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69636"},{"cve":"CVE-2026-69637","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69637"},{"cve":"CVE-2026-69638","month":"2026-09","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69638"},{"cve":"CVE-2026-69641","month":"2026-09","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69641"},{"cve":"CVE-2026-69642","month":"2026-09","title":"Skype for Business Spoofing Vulnerability","family":"Microsoft Office","component":"Skype for Business","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69642"},{"cve":"CVE-2026-69643","month":"2026-09","title":"Windows Spaceport.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69643"},{"cve":"CVE-2026-69645","month":"2026-09","title":"Windows Message Queuing Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Message Queuing","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69645"},{"cve":"CVE-2026-69646","month":"2026-09","title":"Skype for Business Spoofing Vulnerability","family":"Microsoft Office","component":"Skype for Business","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69646"},{"cve":"CVE-2026-69648","month":"2026-09","title":"Windows Notification Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Notification","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69648"},{"cve":"CVE-2026-69649","month":"2026-09","title":"Raw Image Extension Remote Code Execution Vulnerability","family":"Windows","component":"Windows Raw Image Extension","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69649"},{"cve":"CVE-2026-69652","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69652"},{"cve":"CVE-2026-69654","month":"2026-09","title":"Windows Accounts Control Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Accounts Control","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69654"},{"cve":"CVE-2026-69669","month":"2026-09","title":"Windows Kernel Remote Code Execution Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69669"},{"cve":"CVE-2026-69671","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69671"},{"cve":"CVE-2026-69672","month":"2026-09","title":"Windows DNS Information Disclosure Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69672"},{"cve":"CVE-2026-69674","month":"2026-09","title":"Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Modern Device Management (MDM)","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69674"},{"cve":"CVE-2026-69676","month":"2026-09","title":"Windows Kerberos Remote Code Execution Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-294"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69676"},{"cve":"CVE-2026-69678","month":"2026-09","title":"Microsoft Office PowerPoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69678"},{"cve":"CVE-2026-69679","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69679"},{"cve":"CVE-2026-69680","month":"2026-09","title":"Windows DNS Spoofing Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69680"},{"cve":"CVE-2026-69681","month":"2026-09","title":"Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability","family":"Windows","component":"Virtual Hard Disk (VHD) Miniport Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69681"},{"cve":"CVE-2026-69682","month":"2026-09","title":"Windows Host Guardian Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Host Guardian Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69682"},{"cve":"CVE-2026-69683","month":"2026-09","title":"Microsoft Office SharePoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69683"},{"cve":"CVE-2026-69684","month":"2026-09","title":"Windows Error Reporting Information Disclosure Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-209"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69684"},{"cve":"CVE-2026-69685","month":"2026-09","title":"Windows Kerberos Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69685"},{"cve":"CVE-2026-69686","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69686"},{"cve":"CVE-2026-69687","month":"2026-09","title":"Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Audio Class driver (usbaudio.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69687"},{"cve":"CVE-2026-69688","month":"2026-09","title":"Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Encrypting File System (EFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69688"},{"cve":"CVE-2026-69689","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69689"},{"cve":"CVE-2026-69690","month":"2026-09","title":"Microsoft Office SharePoint Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69690"},{"cve":"CVE-2026-69691","month":"2026-09","title":"Windows Spaceport.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69691"},{"cve":"CVE-2026-69692","month":"2026-09","title":"Windows Audio Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Audio Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69692"},{"cve":"CVE-2026-69693","month":"2026-09","title":"Windows Device Association Broker Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Broker service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69693"},{"cve":"CVE-2026-69694","month":"2026-09","title":"Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows IP Address Management (IPAM) Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69694"},{"cve":"CVE-2026-69706","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69706"},{"cve":"CVE-2026-69707","month":"2026-09","title":"Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Audio Class driver (usbaudio.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69707"},{"cve":"CVE-2026-69708","month":"2026-09","title":"Windows Web Platform Storage Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Web Platform Storage","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69708"},{"cve":"CVE-2026-69709","month":"2026-09","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69709"},{"cve":"CVE-2026-69710","month":"2026-09","title":"Windows Hello Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69710"},{"cve":"CVE-2026-69711","month":"2026-09","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69711"},{"cve":"CVE-2026-69712","month":"2026-09","title":"Windows Key Distribution Center Remote Code Execution Vulnerability","family":"Windows","component":"Windows Key Distribution Center","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69712"},{"cve":"CVE-2026-69713","month":"2026-09","title":"Windows Secure Boot Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Secure Boot","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-1395"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69713"},{"cve":"CVE-2026-69714","month":"2026-09","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69714"},{"cve":"CVE-2026-69715","month":"2026-09","title":"Windows Direct Show Remote Code Execution Vulnerability","family":"Windows","component":"Windows Direct Show","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69715"},{"cve":"CVE-2026-69716","month":"2026-09","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69716"},{"cve":"CVE-2026-69717","month":"2026-09","title":"Windows Group Policy Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Group Policy","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822","CWE-843","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69717"},{"cve":"CVE-2026-69719","month":"2026-09","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69719"},{"cve":"CVE-2026-69720","month":"2026-09","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","family":"Windows","component":"Windows MIDI Service Module","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69720"},{"cve":"CVE-2026-69722","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69722"},{"cve":"CVE-2026-69723","month":"2026-09","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69723"},{"cve":"CVE-2026-69724","month":"2026-09","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69724"},{"cve":"CVE-2026-69725","month":"2026-09","title":"Windows Hello Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69725"},{"cve":"CVE-2026-69727","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69727"},{"cve":"CVE-2026-69729","month":"2026-09","title":"Windows Credential Providers Remote Code Execution Vulnerability","family":"Windows","component":"Windows Credential Providers","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69729"},{"cve":"CVE-2026-69730","month":"2026-09","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69730"},{"cve":"CVE-2026-69731","month":"2026-09","title":"HID Class Driver Elevation of Privilege Vulnerability","family":"Windows","component":"HID class driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69731"},{"cve":"CVE-2026-69732","month":"2026-09","title":"Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability","family":"Windows","component":"Windows Link Layer Topology Discovery Protocol","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69732"},{"cve":"CVE-2026-69734","month":"2026-09","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69734"},{"cve":"CVE-2026-69735","month":"2026-09","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69735"},{"cve":"CVE-2026-69738","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69738"},{"cve":"CVE-2026-69739","month":"2026-09","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69739"},{"cve":"CVE-2026-69740","month":"2026-09","title":"Windows Hello Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69740"},{"cve":"CVE-2026-69741","month":"2026-09","title":"Windows Spaceport.sys Information Disclosure Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69741"},{"cve":"CVE-2026-69742","month":"2026-09","title":"Microsoft Office Publisher Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Publisher","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69742"},{"cve":"CVE-2026-69744","month":"2026-09","title":"Windows Kerberos Denial of Service Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69744"},{"cve":"CVE-2026-69757","month":"2026-09","title":"Windows TCP/IP Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69757"},{"cve":"CVE-2026-69758","month":"2026-09","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69758"},{"cve":"CVE-2026-69759","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69759"},{"cve":"CVE-2026-69760","month":"2026-09","title":"Windows Kerberos Denial of Service Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69760"},{"cve":"CVE-2026-69761","month":"2026-09","title":"Windows TCP/IP Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69761"},{"cve":"CVE-2026-69762","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69762"},{"cve":"CVE-2026-69764","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69764"},{"cve":"CVE-2026-69767","month":"2026-09","title":"Microsoft Office PowerPoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69767"},{"cve":"CVE-2026-69768","month":"2026-09","title":"Windows RNDIS Remote Code Execution Vulnerability","family":"Windows","component":"Windows RNDIS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69768"},{"cve":"CVE-2026-69769","month":"2026-09","title":"Windows HTTP Print Provider Remote Code Execution Vulnerability","family":"Windows","component":"Windows HTTP Print Provider","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69769"},{"cve":"CVE-2026-69770","month":"2026-09","title":"Windows Spaceport.sys Information Disclosure Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69770"},{"cve":"CVE-2026-69771","month":"2026-09","title":"Windows Container Manager Service Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Container Manager Service","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69771"},{"cve":"CVE-2026-69772","month":"2026-09","title":"Windows Network File System Remote Code Execution Vulnerability","family":"Windows","component":"Windows Network File System","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69772"},{"cve":"CVE-2026-69773","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69773"},{"cve":"CVE-2026-69775","month":"2026-09","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69775"},{"cve":"CVE-2026-69777","month":"2026-09","title":"Windows DHCP Client Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DHCP Client","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69777"},{"cve":"CVE-2026-69778","month":"2026-09","title":"Microsoft Office Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69778"},{"cve":"CVE-2026-69779","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69779"},{"cve":"CVE-2026-69781","month":"2026-09","title":"Windows DHCP Client Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Client","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69781"},{"cve":"CVE-2026-69782","month":"2026-09","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69782"},{"cve":"CVE-2026-69784","month":"2026-09","title":"Windows Hello Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69784"},{"cve":"CVE-2026-69785","month":"2026-09","title":"Windows Smart Card Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Smart Card","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69785"},{"cve":"CVE-2026-69786","month":"2026-09","title":"Windows Text Shaping Remote Code Execution Vulnerability","family":"Windows","component":"Windows Text Shaping","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69786"},{"cve":"CVE-2026-69787","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69787"},{"cve":"CVE-2026-69790","month":"2026-09","title":"Windows Credential Providers Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Credential Providers","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69790"},{"cve":"CVE-2026-69791","month":"2026-09","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69791"},{"cve":"CVE-2026-69792","month":"2026-09","title":"Windows Win32K Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69792"},{"cve":"CVE-2026-69793","month":"2026-09","title":"Windows TCP/IP Security Feature Bypass Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-1288"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69793"},{"cve":"CVE-2026-69794","month":"2026-09","title":"Windows Encrypting File System (EFS) Information Disclosure Vulnerability","family":"Windows","component":"Windows Encrypting File System (EFS)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69794"},{"cve":"CVE-2026-69797","month":"2026-09","title":"Microsoft Office PowerPoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69797"},{"cve":"CVE-2026-69799","month":"2026-09","title":"Windows Hello Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69799"},{"cve":"CVE-2026-69801","month":"2026-09","title":"Windows Audio Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Audio Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69801"},{"cve":"CVE-2026-69803","month":"2026-09","title":"Windows DHCP Server Information Disclosure Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69803"},{"cve":"CVE-2026-69804","month":"2026-09","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69804"},{"cve":"CVE-2026-69805","month":"2026-09","title":".NET Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-73","CWE-522","CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69805"},{"cve":"CVE-2026-69806","month":"2026-09","title":".NET Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-200","CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69806"},{"cve":"CVE-2026-69807","month":"2026-09","title":"PowerShell Elevation of Privilege Vulnerability","family":"Windows","component":"Windows PowerShell","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69807"},{"cve":"CVE-2026-69808","month":"2026-09","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69808"},{"cve":"CVE-2026-69809","month":"2026-09","title":"Windows Active Directory Domain Services Denial of Service Vulnerability","family":"Windows","component":"Active Directory Domain Services","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69809"},{"cve":"CVE-2026-69813","month":"2026-09","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69813"},{"cve":"CVE-2026-69814","month":"2026-09","title":"Windows Credential Providers Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Credential Providers","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69814"},{"cve":"CVE-2026-69816","month":"2026-09","title":"Windows Accounts Control Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Accounts Control","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69816"},{"cve":"CVE-2026-69817","month":"2026-09","title":"Windows Bluetooth Port Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bluetooth Port Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69817"},{"cve":"CVE-2026-69818","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69818"},{"cve":"CVE-2026-69819","month":"2026-09","title":"RPC Runtime Library Remote Code Execution Vulnerability","family":"Windows","component":"RPC Runtime","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69819"},{"cve":"CVE-2026-69820","month":"2026-09","title":"Windows Hello Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69820"},{"cve":"CVE-2026-69821","month":"2026-09","title":"Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability","family":"Windows","component":"Active Directory Certificate Services (AD CS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-116"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69821"},{"cve":"CVE-2026-69822","month":"2026-09","title":"Windows Kerberos Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69822"},{"cve":"CVE-2026-69824","month":"2026-09","title":"Microsoft Standard XPS Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Standard XPS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69824"},{"cve":"CVE-2026-69826","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69826"},{"cve":"CVE-2026-69827","month":"2026-09","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69827"},{"cve":"CVE-2026-69829","month":"2026-09","title":"Windows Shell Remote Code Execution Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69829"},{"cve":"CVE-2026-69832","month":"2026-09","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69832"},{"cve":"CVE-2026-69834","month":"2026-09","title":"Windows ALPC Elevation of Privilege Vulnerability","family":"Windows","component":"Windows ALPC","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69834"},{"cve":"CVE-2026-69838","month":"2026-09","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69838"},{"cve":"CVE-2026-69839","month":"2026-09","title":"Windows iSCSI Target Service Denial of Service Vulnerability","family":"Windows","component":"Windows iSCSI Target Service","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-248"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69839"},{"cve":"CVE-2026-69841","month":"2026-09","title":"Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Encrypting File System (EFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69841"},{"cve":"CVE-2026-69843","month":"2026-09","title":"Microsoft Fabric Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Fabric","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-290"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69843"},{"cve":"CVE-2026-69844","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69844"},{"cve":"CVE-2026-69845","month":"2026-09","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69845"},{"cve":"CVE-2026-69846","month":"2026-09","title":"Windows Secure Kernel Mode Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Secure Kernel Mode","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69846"},{"cve":"CVE-2026-69847","month":"2026-09","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69847"},{"cve":"CVE-2026-69852","month":"2026-09","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69852"},{"cve":"CVE-2026-69853","month":"2026-09","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69853"},{"cve":"CVE-2026-69854","month":"2026-09","title":"Spring Cloud Azure Elevation of Privilege Vulnerability","family":"Azure","component":"Spring Cloud Azure","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69854"},{"cve":"CVE-2026-69857","month":"2026-09","title":"Azure Cosmos DB Spoofing Vulnerability","family":"Azure","component":"Azure Cosmos DB","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-639"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69857"},{"cve":"CVE-2026-69858","month":"2026-09","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69858"},{"cve":"CVE-2026-69859","month":"2026-09","title":"Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Audio Class driver (usbaudio.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367","CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69859"},{"cve":"CVE-2026-69860","month":"2026-09","title":"Windows Imaging Component Remote Code Execution Vulnerability","family":"Windows","component":"Windows Imaging Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69860"},{"cve":"CVE-2026-69862","month":"2026-09","title":"Windows Wireless Wide Area Network Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Wireless Wide Area Network Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69862"},{"cve":"CVE-2026-69864","month":"2026-09","title":"Windows Hello Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69864"},{"cve":"CVE-2026-69865","month":"2026-09","title":"Microsoft Container Registry Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft Container Registry","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-639"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69865"},{"cve":"CVE-2026-69866","month":"2026-09","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69866"},{"cve":"CVE-2026-69874","month":"2026-09","title":"Windows ALPC Elevation of Privilege Vulnerability","family":"Windows","component":"Windows ALPC","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69874"},{"cve":"CVE-2026-69875","month":"2026-09","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69875"},{"cve":"CVE-2026-69876","month":"2026-09","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69876"},{"cve":"CVE-2026-69878","month":"2026-09","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69878"},{"cve":"CVE-2026-69881","month":"2026-09","title":"Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability","family":"Windows","component":"Windows IKE Extension","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69881"},{"cve":"CVE-2026-69889","month":"2026-09","title":"Windows Bluetooth Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bluetooth Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69889"},{"cve":"CVE-2026-69890","month":"2026-09","title":"Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Virtual Trusted Platform Module","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69890"},{"cve":"CVE-2026-69891","month":"2026-09","title":"Windows Media Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69891"},{"cve":"CVE-2026-69895","month":"2026-09","title":"Windows Spaceport.sys Information Disclosure Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69895"},{"cve":"CVE-2026-69896","month":"2026-09","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69896"},{"cve":"CVE-2026-69900","month":"2026-09","title":"Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Kernel Streaming WOW Thunk Service Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69900"},{"cve":"CVE-2026-69904","month":"2026-09","title":"Microsoft Office SharePoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69904"},{"cve":"CVE-2026-69906","month":"2026-09","title":"Windows Secure Kernel Mode Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Secure Kernel Mode","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69906"},{"cve":"CVE-2026-69907","month":"2026-09","title":"Windows Enterprise App Management Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Enterprise App Management","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-280"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69907"},{"cve":"CVE-2026-69910","month":"2026-09","title":"Windows Hyper-V Remote Code Execution Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69910"},{"cve":"CVE-2026-69911","month":"2026-09","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69911"},{"cve":"CVE-2026-69921","month":"2026-09","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69921"},{"cve":"CVE-2026-69929","month":"2026-09","title":"Windows DHCP Server Information Disclosure Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69929"},{"cve":"CVE-2026-69930","month":"2026-09","title":"Windows DHCP Server Information Disclosure Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69930"},{"cve":"CVE-2026-69989","month":"2026-09","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69989"},{"cve":"CVE-2026-70009","month":"2026-09","title":"Azure Arc Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Arc","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70009"},{"cve":"CVE-2026-70019","month":"2026-09","title":"Windows Compressed Folder Information Disclosure Vulnerability","family":"Windows","component":"Windows Compressed Folder","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-65"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70019"},{"cve":"CVE-2026-70065","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70065"},{"cve":"CVE-2026-70091","month":"2026-09","title":"Windows DNS Denial of Service Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70091"},{"cve":"CVE-2026-70124","month":"2026-09","title":"Windows DHCP Server Information Disclosure Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70124"},{"cve":"CVE-2026-70125","month":"2026-09","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70125"},{"cve":"CVE-2026-70145","month":"2026-09","title":"Microsoft Windows Search Component Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70145"},{"cve":"CVE-2026-70178","month":"2026-09","title":"Microsoft Fabric Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Fabric","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70178"},{"cve":"CVE-2026-70200","month":"2026-09","title":"Azure Logic Apps Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Logic Apps","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-22","CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70200"},{"cve":"CVE-2026-70203","month":"2026-09","title":"Windows Media Player Remote Code Execution Vulnerability","family":"Windows","component":"Windows Media Player","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70203"},{"cve":"CVE-2026-70283","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70283"},{"cve":"CVE-2026-70289","month":"2026-09","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70289"},{"cve":"CVE-2026-70290","month":"2026-09","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70290"},{"cve":"CVE-2026-70296","month":"2026-09","title":"Windows Imaging Component Remote Code Execution Vulnerability","family":"Windows","component":"Windows Imaging Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70296"},{"cve":"CVE-2026-70334","month":"2026-09","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-184"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70334"},{"cve":"CVE-2026-70342","month":"2026-09","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70342"},{"cve":"CVE-2026-70351","month":"2026-09","title":"Microsoft WebP Image Extension Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft WebP Image Extension","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70351"},{"cve":"CVE-2026-70352","month":"2026-09","title":"Azure AI Language Elevation of Privilege Vulnerability","family":"Azure","component":"Azure AI Language","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70352"},{"cve":"CVE-2026-70562","month":"2026-09","title":"Windows Audio Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Audio Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70562"},{"cve":"CVE-2026-70563","month":"2026-09","title":"Windows Shell Spoofing Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70563"},{"cve":"CVE-2026-70564","month":"2026-09","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70564"},{"cve":"CVE-2026-70565","month":"2026-09","title":"Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability","family":"Windows","component":"Windows AF_UNIX Socket Provider","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70565"},{"cve":"CVE-2026-70567","month":"2026-09","title":"Windows Display Enhancement Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Display Enhancement Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70567"},{"cve":"CVE-2026-70568","month":"2026-09","title":"Windows Defender Firewall Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Defender Firewall Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70568"},{"cve":"CVE-2026-70569","month":"2026-09","title":"Windows Spaceport.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70569"},{"cve":"CVE-2026-70570","month":"2026-09","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70570"},{"cve":"CVE-2026-70572","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70572"},{"cve":"CVE-2026-70573","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70573"},{"cve":"CVE-2026-70574","month":"2026-09","title":"Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability","family":"Windows","component":"Virtual Hard Disk (VHD) Miniport Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70574"},{"cve":"CVE-2026-70575","month":"2026-09","title":"Windows Schannel Denial of Service Vulnerability","family":"Windows","component":"Windows Schannel","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70575"},{"cve":"CVE-2026-70577","month":"2026-09","title":"Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Modern Device Management (MDM)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70577"},{"cve":"CVE-2026-70578","month":"2026-09","title":"Windows Credential Guard Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Credential Guard","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70578"},{"cve":"CVE-2026-70579","month":"2026-09","title":"Windows Mobile Broadband Information Disclosure Vulnerability","family":"Windows","component":"Windows Mobile Broadband","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70579"},{"cve":"CVE-2026-70581","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70581"},{"cve":"CVE-2026-70582","month":"2026-09","title":"Windows Management Instrumentation Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Instrumentation","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70582"},{"cve":"CVE-2026-70583","month":"2026-09","title":"Windows Core Messaging Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Core Messaging","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70583"},{"cve":"CVE-2026-70584","month":"2026-09","title":"Windows Core Messaging Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Core Messaging","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70584"},{"cve":"CVE-2026-70585","month":"2026-09","title":"Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows Services for NFS ONCRPC XDR Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70585"},{"cve":"CVE-2026-70586","month":"2026-09","title":"Windows Paint Remote Code Execution Vulnerability","family":"Windows","component":"Windows Paint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70586"},{"cve":"CVE-2026-70587","month":"2026-09","title":"Windows Remote Desktop Protocol Information Disclosure Vulnerability","family":"Windows","component":"Windows Remote Desktop Protocol","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-170"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70587"},{"cve":"CVE-2026-71328","month":"2026-09","title":".NET and Visual Studio Remote Code Execution Vulnerability","family":"Developer Tools","component":"Visual Studio","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71328"},{"cve":"CVE-2026-71329","month":"2026-09","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71329"},{"cve":"CVE-2026-71330","month":"2026-09","title":"Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows Services for NFS ONCRPC XDR Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71330"},{"cve":"CVE-2026-71332","month":"2026-09","title":"Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Secure Socket Tunneling Protocol (SSTP)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71332"},{"cve":"CVE-2026-71333","month":"2026-09","title":"Windows Remote Access Connection Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Access Connection Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71333"},{"cve":"CVE-2026-71334","month":"2026-09","title":"Windows NFS Portmapper Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NFS Portmapper","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71334"},{"cve":"CVE-2026-71336","month":"2026-09","title":"Windows Work Folder Service Remote Code Execution Vulnerability","family":"Windows","component":"Windows Work Folder Service","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71336"},{"cve":"CVE-2026-71337","month":"2026-09","title":"Windows Storage Management Provider Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage Management Provider","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121","CWE-130"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71337"},{"cve":"CVE-2026-71338","month":"2026-09","title":"Windows Failover Cluster Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Failover Cluster","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71338"},{"cve":"CVE-2026-71339","month":"2026-09","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71339"},{"cve":"CVE-2026-71340","month":"2026-09","title":"Windows File History Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows File History Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71340"},{"cve":"CVE-2026-71341","month":"2026-09","title":"Windows Partition Management Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows Partition Management Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71341"},{"cve":"CVE-2026-71342","month":"2026-09","title":"Windows Remote Access Connection Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Access Connection Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71342"},{"cve":"CVE-2026-71343","month":"2026-09","title":"Windows Remote Access Connection Manager Remote Code Execution Vulnerability","family":"Windows","component":"Windows Remote Access Connection Manager","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71343"},{"cve":"CVE-2026-71345","month":"2026-09","title":"Windows Spaceport.sys Remote Code Execution Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71345"},{"cve":"CVE-2026-71348","month":"2026-09","title":"Windows Spaceport.sys Remote Code Execution Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71348"},{"cve":"CVE-2026-71349","month":"2026-09","title":"Windows Spaceport.sys Remote Code Execution Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71349"},{"cve":"CVE-2026-71350","month":"2026-09","title":"Windows Spaceport.sys Remote Code Execution Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71350"},{"cve":"CVE-2026-71351","month":"2026-09","title":"Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71351"},{"cve":"CVE-2026-71352","month":"2026-09","title":"Windows Remote Access Connection Manager Remote Code Execution Vulnerability","family":"Windows","component":"Windows Remote Access Connection Manager","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71352"},{"cve":"CVE-2026-71353","month":"2026-09","title":"Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71353"},{"cve":"CVE-2026-72926","month":"2026-09","title":"Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Internet Connection Sharing (ICS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72926"},{"cve":"CVE-2026-72927","month":"2026-09","title":"Winsock Elevation of Privilege Vulnerability","family":"Windows","component":"Winsock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72927"},{"cve":"CVE-2026-72928","month":"2026-09","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72928"},{"cve":"CVE-2026-72929","month":"2026-09","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-354"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72929"},{"cve":"CVE-2026-72930","month":"2026-09","title":"Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Secure Socket Tunneling Protocol (SSTP)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72930"},{"cve":"CVE-2026-72931","month":"2026-09","title":"Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability","family":"Windows","component":"Windows Secure Socket Tunneling Protocol (SSTP)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-772"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72931"},{"cve":"CVE-2026-72932","month":"2026-09","title":"Windows Message Queuing Queue Manager Information Disclosure Vulnerability","family":"Windows","component":"Windows Message Queuing Queue Manager","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72932"},{"cve":"CVE-2026-72933","month":"2026-09","title":"Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft WDAC OLE DB provider for SQL","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72933"},{"cve":"CVE-2026-72935","month":"2026-09","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72935"},{"cve":"CVE-2026-72936","month":"2026-09","title":"Windows SMB Client Remote Code Execution Vulnerability","family":"Windows","component":"Windows SMB Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72936"},{"cve":"CVE-2026-72937","month":"2026-09","title":"Windows Storage Port Driver Information Disclosure Vulnerability","family":"Windows","component":"Storage Port Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72937"},{"cve":"CVE-2026-72938","month":"2026-09","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-843","CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72938"},{"cve":"CVE-2026-72939","month":"2026-09","title":"Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72939"},{"cve":"CVE-2026-72940","month":"2026-09","title":"Windows Schannel Remote Code Execution Vulnerability","family":"Windows","component":"Windows Schannel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72940"},{"cve":"CVE-2026-72941","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72941"},{"cve":"CVE-2026-72942","month":"2026-09","title":"Windows Spaceport.sys Information Disclosure Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72942"},{"cve":"CVE-2026-72943","month":"2026-09","title":"Windows Deployment Services Remote Code Execution Vulnerability","family":"Windows","component":"Windows Deployment Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72943"},{"cve":"CVE-2026-72944","month":"2026-09","title":"Role: Windows Fax Service Elevation of Privilege Vulnerability","family":"Windows","component":"Role: Windows Fax Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72944"},{"cve":"CVE-2026-72945","month":"2026-09","title":"Windows Task Scheduler Information Disclosure Vulnerability","family":"Windows","component":"Windows Task Scheduler","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72945"},{"cve":"CVE-2026-72946","month":"2026-09","title":"Microsoft Storage Port Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Storage Port Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72946"},{"cve":"CVE-2026-72947","month":"2026-09","title":"Windows File History Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows File History Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72947"},{"cve":"CVE-2026-72948","month":"2026-09","title":"Windows DNS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72948"},{"cve":"CVE-2026-72949","month":"2026-09","title":"Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability","family":"Windows","component":"Windows SMB Server Network Transport Driver (srvnet.sys)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72949"},{"cve":"CVE-2026-72950","month":"2026-09","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72950"},{"cve":"CVE-2026-72952","month":"2026-09","title":"Windows Spaceport.sys Remote Code Execution Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72952"},{"cve":"CVE-2026-72953","month":"2026-09","title":"Windows USB Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72953"},{"cve":"CVE-2026-72954","month":"2026-09","title":"Windows Deployment Services Remote Code Execution Vulnerability","family":"Windows","component":"Windows Deployment Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72954"},{"cve":"CVE-2026-72956","month":"2026-09","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72956"},{"cve":"CVE-2026-72957","month":"2026-09","title":"Windows Deployment Services Remote Code Execution Vulnerability","family":"Windows","component":"Windows Deployment Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72957"},{"cve":"CVE-2026-72958","month":"2026-09","title":"Windows Credential Guard Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Credential Guard","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72958"},{"cve":"CVE-2026-72959","month":"2026-09","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72959"},{"cve":"CVE-2026-72960","month":"2026-09","title":"Windows Media Player Remote Code Execution Vulnerability","family":"Windows","component":"Windows Media Player","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72960"},{"cve":"CVE-2026-72961","month":"2026-09","title":"Windows Hyper-V Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72961"},{"cve":"CVE-2026-72962","month":"2026-09","title":"Windows USB Video Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Video Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72962"},{"cve":"CVE-2026-72963","month":"2026-09","title":"Windows Modern Execution Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Modern Execution Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72963"},{"cve":"CVE-2026-72964","month":"2026-09","title":"Windows Internet Connection Sharing (ICS) Tampering Vulnerability","family":"Windows","component":"Windows Internet Connection Sharing (ICS)","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72964"},{"cve":"CVE-2026-72965","month":"2026-09","title":"Windows WebClient Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows WebClient Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72965"},{"cve":"CVE-2026-72966","month":"2026-09","title":"Windows Remote Access Connection Manager Tampering Vulnerability","family":"Windows","component":"Windows Remote Access Connection Manager","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72966"},{"cve":"CVE-2026-72967","month":"2026-09","title":"Windows Network Connection Broker Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Network Connection Broker","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72967"},{"cve":"CVE-2026-72972","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72972"},{"cve":"CVE-2026-72973","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72973"},{"cve":"CVE-2026-72974","month":"2026-09","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72974"},{"cve":"CVE-2026-72975","month":"2026-09","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72975"},{"cve":"CVE-2026-72976","month":"2026-09","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72976"},{"cve":"CVE-2026-72977","month":"2026-09","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72977"},{"cve":"CVE-2026-72978","month":"2026-09","title":"Active Directory Federation Services (AD FS) Denial of Service Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72978"},{"cve":"CVE-2026-72979","month":"2026-09","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72979"},{"cve":"CVE-2026-72980","month":"2026-09","title":"Windows Hello Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Critical","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-427"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72980"},{"cve":"CVE-2026-72981","month":"2026-09","title":"IP Helper Remote Code Execution Vulnerability","family":"Windows","component":"IP Helper","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72981"},{"cve":"CVE-2026-72982","month":"2026-09","title":"Windows Netlogon Remote Code Execution Vulnerability","family":"Windows","component":"Windows Netlogon","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72982"},{"cve":"CVE-2026-72983","month":"2026-09","title":"Internet Connection Sharing (ICS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Internet Connection Sharing (ICS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72983"},{"cve":"CVE-2026-72985","month":"2026-09","title":"Volume Shadow Copy Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Volume Shadow Copy","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72985"},{"cve":"CVE-2026-72986","month":"2026-09","title":"Graphic Fonts Remote Code Execution Vulnerability","family":"Windows","component":"Graphic Fonts","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72986"},{"cve":"CVE-2026-72987","month":"2026-09","title":"Windows DNS Remote Code Execution Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72987"},{"cve":"CVE-2026-72988","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72988"},{"cve":"CVE-2026-72989","month":"2026-09","title":"Windows Failover Cluster Information Disclosure Vulnerability","family":"Windows","component":"Windows Failover Cluster","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72989"},{"cve":"CVE-2026-72990","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72990"},{"cve":"CVE-2026-72991","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72991"},{"cve":"CVE-2026-72992","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72992"},{"cve":"CVE-2026-72993","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72993"},{"cve":"CVE-2026-72994","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72994"},{"cve":"CVE-2026-72995","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72995"},{"cve":"CVE-2026-72996","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72996"},{"cve":"CVE-2026-72997","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72997"},{"cve":"CVE-2026-72999","month":"2026-09","title":"Windows USB Hub Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Hub Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72999"},{"cve":"CVE-2026-73000","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73000"},{"cve":"CVE-2026-73001","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73001"},{"cve":"CVE-2026-73002","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73002"},{"cve":"CVE-2026-73003","month":"2026-09","title":"Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Modern Device Management (MDM)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73003"},{"cve":"CVE-2026-73004","month":"2026-09","title":"Windows Autopilot Tampering Vulnerability","family":"Windows","component":"Windows Autopilot","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73004"},{"cve":"CVE-2026-73005","month":"2026-09","title":"Windows Authentication Methods Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Authentication Methods","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73005"},{"cve":"CVE-2026-73006","month":"2026-09","title":"DirectWrite Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73006"},{"cve":"CVE-2026-73007","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73007"},{"cve":"CVE-2026-73008","month":"2026-09","title":"Windows Biometric Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-359"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73008"},{"cve":"CVE-2026-73009","month":"2026-09","title":"Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Secure Socket Tunneling Protocol (SSTP)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73009"},{"cve":"CVE-2026-73010","month":"2026-09","title":"Microsoft Failover Cluster Remote Code Execution Vulnerability","family":"Windows","component":"Windows Failover Cluster","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73010"},{"cve":"CVE-2026-73011","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73011"},{"cve":"CVE-2026-73012","month":"2026-09","title":"Windows Management Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73012"},{"cve":"CVE-2026-73013","month":"2026-09","title":"Windows Imaging Component Remote Code Execution Vulnerability","family":"Windows","component":"Windows Imaging Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73013"},{"cve":"CVE-2026-73014","month":"2026-09","title":"Data Sharing Service Client Elevation of Privilege Vulnerability","family":"Windows","component":"Data Sharing Service Client","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73014"},{"cve":"CVE-2026-73015","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73015"},{"cve":"CVE-2026-73016","month":"2026-09","title":"DirectWrite Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73016"},{"cve":"CVE-2026-73017","month":"2026-09","title":"Graphics Kernel Remote Code Execution Vulnerability","family":"Windows","component":"Windows Graphics Kernel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73017"},{"cve":"CVE-2026-73018","month":"2026-09","title":"Graphic Fonts Remote Code Execution Vulnerability","family":"Windows","component":"Graphic Fonts","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73018"},{"cve":"CVE-2026-73019","month":"2026-09","title":"Windows URL Moniker Security Feature Bypass Vulnerability","family":"Windows","component":"Windows URL Moniker","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-41"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73019"},{"cve":"CVE-2026-73020","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73020"},{"cve":"CVE-2026-73021","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73021"},{"cve":"CVE-2026-73022","month":"2026-09","title":"Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Modern Device Management (MDM)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73022"},{"cve":"CVE-2026-73023","month":"2026-09","title":"Windows Imaging Component Remote Code Execution Vulnerability","family":"Windows","component":"Windows Imaging Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73023"},{"cve":"CVE-2026-73024","month":"2026-09","title":"Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Services for NFS ONCRPC XDR Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73024"},{"cve":"CVE-2026-73025","month":"2026-09","title":"Windows iSCSI Security Feature Bypass Vulnerability","family":"Windows","component":"Windows iSCSI","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73025"},{"cve":"CVE-2026-73026","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73026"},{"cve":"CVE-2026-73028","month":"2026-09","title":"SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73028"},{"cve":"CVE-2026-73029","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73029"},{"cve":"CVE-2026-76017","month":"2026-09","title":"Chromium CVE-2026-76017:  Use after free in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76017"},{"cve":"CVE-2026-76018","month":"2026-09","title":"Chromium CVE-2026-76018:  Privilege elevation in Import","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76018"},{"cve":"CVE-2026-76019","month":"2026-09","title":"Chromium CVE-2026-76019:  Incorrect authorization in Workers","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76019"},{"cve":"CVE-2026-76021","month":"2026-09","title":"Chromium CVE-2026-76021:  Use after free in DOM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76021"},{"cve":"CVE-2026-76022","month":"2026-09","title":"Chromium CVE-2026-76022:  Buffer overflow in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76022"},{"cve":"CVE-2026-76023","month":"2026-09","title":"Chromium CVE-2026-76023:  Improper resource control in Linux Toolkit Theming","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76023"},{"cve":"CVE-2026-76036","month":"2026-09","title":"Chromium CVE-2026-76036:  Buffer overflow in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76036"},{"cve":"CVE-2026-76039","month":"2026-09","title":"Chromium CVE-2026-76039:  Incorrect reference resolution in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-76039"},{"cve":"CVE-2026-77480","month":"2026-09","title":"SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1220"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77480"},{"cve":"CVE-2026-77481","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77481"},{"cve":"CVE-2026-77482","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77482"},{"cve":"CVE-2026-77483","month":"2026-09","title":"SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77483"},{"cve":"CVE-2026-77484","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77484"},{"cve":"CVE-2026-77485","month":"2026-09","title":"SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77485"},{"cve":"CVE-2026-77486","month":"2026-09","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77486"},{"cve":"CVE-2026-77487","month":"2026-09","title":"SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77487"},{"cve":"CVE-2026-77488","month":"2026-09","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77488"},{"cve":"CVE-2026-77489","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77489"},{"cve":"CVE-2026-77490","month":"2026-09","title":"Microsoft Edge (Chromium-based) Spoofing Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77490"},{"cve":"CVE-2026-77491","month":"2026-09","title":"Windows GDI Information Disclosure Vulnerability","family":"Windows","component":"Windows GDI","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77491"},{"cve":"CVE-2026-77492","month":"2026-09","title":"Windows Storage Port Driver Information Disclosure Vulnerability","family":"Windows","component":"Storage Port Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77492"},{"cve":"CVE-2026-77493","month":"2026-09","title":"Windows Graphics Component Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77493"},{"cve":"CVE-2026-77494","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77494"},{"cve":"CVE-2026-77495","month":"2026-09","title":"Windows Imaging Component Remote Code Execution Vulnerability","family":"Windows","component":"Windows Imaging Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77495"},{"cve":"CVE-2026-77498","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77498"},{"cve":"CVE-2026-77499","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77499"},{"cve":"CVE-2026-77500","month":"2026-09","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-763"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77500"},{"cve":"CVE-2026-77501","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77501"},{"cve":"CVE-2026-77502","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77502"},{"cve":"CVE-2026-77503","month":"2026-09","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77503"},{"cve":"CVE-2026-77504","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77504"},{"cve":"CVE-2026-77505","month":"2026-09","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77505"},{"cve":"CVE-2026-77886","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77886"},{"cve":"CVE-2026-77887","month":"2026-09","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77887"},{"cve":"CVE-2026-77888","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77888"},{"cve":"CVE-2026-77889","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77889"},{"cve":"CVE-2026-77890","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77890"},{"cve":"CVE-2026-77891","month":"2026-09","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77891"},{"cve":"CVE-2026-77892","month":"2026-09","title":"Windows Boot Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Boot Manager","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77892"},{"cve":"CVE-2026-77893","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77893"},{"cve":"CVE-2026-77894","month":"2026-09","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77894"},{"cve":"CVE-2026-77895","month":"2026-09","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77895"},{"cve":"CVE-2026-77896","month":"2026-09","title":"Windows Remote Desktop Client Denial of Service Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77896"},{"cve":"CVE-2026-77897","month":"2026-09","title":"Microsoft Power Automate Desktop Elevation of Privilege Vulnerability","family":"Microsoft Dynamics","component":"Power Automate","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77897"},{"cve":"CVE-2026-77898","month":"2026-09","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77898"},{"cve":"CVE-2026-77899","month":"2026-09","title":"Windows Security Center Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Security Center","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77899"},{"cve":"CVE-2026-77901","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77901"},{"cve":"CVE-2026-77903","month":"2026-09","title":"Microsoft Dataverse Elevation of Privilege Vulnerability","family":"Microsoft Dynamics","component":"Microsoft Dataverse","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-290"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77903"},{"cve":"CVE-2026-77904","month":"2026-09","title":"Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Volume Manager Extension Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77904"},{"cve":"CVE-2026-77905","month":"2026-09","title":"Windows Management Instrumentation Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Instrumentation","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77905"},{"cve":"CVE-2026-77906","month":"2026-09","title":"Visual Studio Remote Code Execution Vulnerability","family":"Developer Tools","component":"Visual Studio","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77906"},{"cve":"CVE-2026-77907","month":"2026-09","title":"Visual Studio Remote Code Execution Vulnerability","family":"Developer Tools","component":"Visual Studio","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77907"},{"cve":"CVE-2026-77908","month":"2026-09","title":"Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability","family":"Microsoft Dynamics","component":"Microsoft Dynamics 365","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77908"},{"cve":"CVE-2026-77909","month":"2026-09","title":"Azure CycleCloud Information Disclosure Vulnerability","family":"Azure","component":"Azure CycleCloud","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-522"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77909"},{"cve":"CVE-2026-77911","month":"2026-09","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77911"},{"cve":"CVE-2026-78439","month":"2026-09","title":"Microsoft Office Graphics Component Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78439"},{"cve":"CVE-2026-78441","month":"2026-09","title":"Windows OLE DB Information Disclosure Vulnerability","family":"SQL Server","component":"Windows OLE DB","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78441"},{"cve":"CVE-2026-78442","month":"2026-09","title":"Windows OLE DB Remote Code Execution Vulnerability","family":"SQL Server","component":"Windows OLE DB","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78442"},{"cve":"CVE-2026-78444","month":"2026-09","title":"Microsoft Failover Cluster Remote Code Execution Vulnerability","family":"Windows","component":"Windows Failover Cluster","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78444"},{"cve":"CVE-2026-78445","month":"2026-09","title":"Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows Services for NFS ONCRPC XDR Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78445"},{"cve":"CVE-2026-78446","month":"2026-09","title":"Windows Distributed File System (DFS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Distributed File System (DFS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78446"},{"cve":"CVE-2026-78447","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78447"},{"cve":"CVE-2026-78448","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78448"},{"cve":"CVE-2026-78449","month":"2026-09","title":"Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability","family":"Windows","component":"Reliable Multicast Transport Driver (RMCAST)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78449"},{"cve":"CVE-2026-78450","month":"2026-09","title":"Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability","family":"Windows","component":"Reliable Multicast Transport Driver (RMCAST)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78450"},{"cve":"CVE-2026-78451","month":"2026-09","title":"Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows SCSI Class System File","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78451"},{"cve":"CVE-2026-78452","month":"2026-09","title":"Microsoft Windows SCSI Class System File Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Windows SCSI Class System File","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78452"},{"cve":"CVE-2026-78453","month":"2026-09","title":"Microsoft Windows SCSI Class System File Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Windows SCSI Class System File","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78453"},{"cve":"CVE-2026-78454","month":"2026-09","title":"Windows CD-ROM Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows CD-ROM Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78454"},{"cve":"CVE-2026-78455","month":"2026-09","title":"Xbox Information Disclosure Vulnerability","family":"Windows","component":"Xbox","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78455"},{"cve":"CVE-2026-78456","month":"2026-09","title":"SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78456"},{"cve":"CVE-2026-78457","month":"2026-09","title":"Windows Security Health Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Security Health Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78457"},{"cve":"CVE-2026-78461","month":"2026-09","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78461"},{"cve":"CVE-2026-78462","month":"2026-09","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-639"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78462"},{"cve":"CVE-2026-78463","month":"2026-09","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78463"},{"cve":"CVE-2026-78464","month":"2026-09","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","family":"Windows","component":"Windows MIDI Service Module","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78464"},{"cve":"CVE-2026-78501","month":"2026-09","title":"Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability","family":"Apps","component":"Microsoft 365 Copilot's Business Chat","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-77","CWE-923"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78501"},{"cve":"CVE-2026-78502","month":"2026-09","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78502"},{"cve":"CVE-2026-78503","month":"2026-09","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78503"},{"cve":"CVE-2026-78504","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78504"},{"cve":"CVE-2026-78505","month":"2026-09","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78505"},{"cve":"CVE-2026-78506","month":"2026-09","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-170"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78506"},{"cve":"CVE-2026-78507","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78507"},{"cve":"CVE-2026-78508","month":"2026-09","title":"Windows CD-ROM Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows CD-ROM Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78508"},{"cve":"CVE-2026-78509","month":"2026-09","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78509"},{"cve":"CVE-2026-78510","month":"2026-09","title":"Microsoft Outlook and Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78510"},{"cve":"CVE-2026-78511","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78511"},{"cve":"CVE-2026-78512","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78512"},{"cve":"CVE-2026-78513","month":"2026-09","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78513"},{"cve":"CVE-2026-78514","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78514"},{"cve":"CVE-2026-78515","month":"2026-09","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78515"},{"cve":"CVE-2026-78516","month":"2026-09","title":"Windows Storage Information Disclosure Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78516"},{"cve":"CVE-2026-78517","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78517"},{"cve":"CVE-2026-78518","month":"2026-09","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78518"},{"cve":"CVE-2026-78519","month":"2026-09","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78519"},{"cve":"CVE-2026-78520","month":"2026-09","title":"Microsoft Office Outlook Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78520"},{"cve":"CVE-2026-78521","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78521"},{"cve":"CVE-2026-78522","month":"2026-09","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78522"},{"cve":"CVE-2026-78523","month":"2026-09","title":"Windows DNS Server Denial of Service Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78523"},{"cve":"CVE-2026-78524","month":"2026-09","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78524"},{"cve":"CVE-2026-78525","month":"2026-09","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78525"},{"cve":"CVE-2026-78526","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78526"},{"cve":"CVE-2026-80073","month":"2026-09","title":"Microsoft Office Outlook Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80073"},{"cve":"CVE-2026-80074","month":"2026-09","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80074"},{"cve":"CVE-2026-80075","month":"2026-09","title":"Windows Work Folders Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Work Folders","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80075"},{"cve":"CVE-2026-80076","month":"2026-09","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80076"},{"cve":"CVE-2026-80077","month":"2026-09","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80077"},{"cve":"CVE-2026-80078","month":"2026-09","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80078"},{"cve":"CVE-2026-80079","month":"2026-09","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80079"},{"cve":"CVE-2026-80080","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80080"},{"cve":"CVE-2026-80081","month":"2026-09","title":"Microsoft Office PowerPoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80081"},{"cve":"CVE-2026-80082","month":"2026-09","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80082"},{"cve":"CVE-2026-80083","month":"2026-09","title":"Windows Hyper-V Remote Code Execution Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80083"},{"cve":"CVE-2026-80084","month":"2026-09","title":"Microsoft Office Outlook Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80084"},{"cve":"CVE-2026-80085","month":"2026-09","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80085"},{"cve":"CVE-2026-80086","month":"2026-09","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80086"},{"cve":"CVE-2026-80087","month":"2026-09","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80087"},{"cve":"CVE-2026-80088","month":"2026-09","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80088"},{"cve":"CVE-2026-80089","month":"2026-09","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80089"},{"cve":"CVE-2026-80090","month":"2026-09","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80090"},{"cve":"CVE-2026-80091","month":"2026-09","title":"Microsoft Office Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80091"},{"cve":"CVE-2026-80093","month":"2026-09","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80093"},{"cve":"CVE-2026-80096","month":"2026-09","title":"Windows Remote Desktop Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Desktop Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80096"},{"cve":"CVE-2026-80097","month":"2026-09","title":"Microsoft Authenticator Elevation of Privilege Vulnerability","family":"Apps","component":"Microsoft Authenticator","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80097"},{"cve":"CVE-2026-80098","month":"2026-09","title":"Copilot Studio Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Copilot Studio","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80098"},{"cve":"CVE-2026-81349","month":"2026-09","title":"Azure HDInsight Ambari Elevation of Privilege Vulnerability","family":"Azure","component":"Azure HDInsights","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81349"},{"cve":"CVE-2026-81352","month":"2026-09","title":"Web Media Extensions Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Codecs Library","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81352"},{"cve":"CVE-2026-81353","month":"2026-09","title":"HEIF Image Extensions Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Codecs Library","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81353"},{"cve":"CVE-2026-81354","month":"2026-09","title":"Windows Hello Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81354"},{"cve":"CVE-2026-81355","month":"2026-09","title":"Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability","family":"Windows","component":"Virtual Hard Disk (VHD) Miniport Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81355"},{"cve":"CVE-2026-81356","month":"2026-09","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81356"},{"cve":"CVE-2026-81357","month":"2026-09","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81357"},{"cve":"CVE-2026-81376","month":"2026-09","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1023","CWE-693"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81376"},{"cve":"CVE-2026-81377","month":"2026-09","title":"Visual Studio Code Tampering Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81377"},{"cve":"CVE-2026-81378","month":"2026-09","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-436"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81378"},{"cve":"CVE-2026-81379","month":"2026-09","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-636"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81379"},{"cve":"CVE-2026-81380","month":"2026-09","title":"GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability","family":"Developer Tools","component":"GitHub Copilot and Visual Studio Code","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81380"},{"cve":"CVE-2026-81381","month":"2026-09","title":"GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability","family":"Developer Tools","component":"GitHub Copilot and Visual Studio Code","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-522"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81381"},{"cve":"CVE-2026-81383","month":"2026-09","title":"Visual Studio Code Information Disclosure Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-706"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81383"},{"cve":"CVE-2026-81385","month":"2026-09","title":"Microsoft Office Publisher Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Publisher","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81385"},{"cve":"CVE-2026-81386","month":"2026-09","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81386"},{"cve":"CVE-2026-81387","month":"2026-09","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81387"},{"cve":"CVE-2026-81388","month":"2026-09","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81388"},{"cve":"CVE-2026-81389","month":"2026-09","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81389"},{"cve":"CVE-2026-81390","month":"2026-09","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81390"},{"cve":"CVE-2026-81391","month":"2026-09","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81391"},{"cve":"CVE-2026-81392","month":"2026-09","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81392"},{"cve":"CVE-2026-81393","month":"2026-09","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81393"},{"cve":"CVE-2026-81394","month":"2026-09","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81394"},{"cve":"CVE-2026-81395","month":"2026-09","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81395"},{"cve":"CVE-2026-81396","month":"2026-09","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121","CWE-193"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81396"},{"cve":"CVE-2026-81397","month":"2026-09","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81397"},{"cve":"CVE-2026-81398","month":"2026-09","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81398"},{"cve":"CVE-2026-81399","month":"2026-09","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81399"},{"cve":"CVE-2026-81400","month":"2026-09","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81400"},{"cve":"CVE-2026-81401","month":"2026-09","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81401"},{"cve":"CVE-2026-81947","month":"2026-09","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81947"},{"cve":"CVE-2026-81948","month":"2026-09","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81948"},{"cve":"CVE-2026-81949","month":"2026-09","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81949"},{"cve":"CVE-2026-81950","month":"2026-09","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81950"},{"cve":"CVE-2026-81951","month":"2026-09","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81951"},{"cve":"CVE-2026-81952","month":"2026-09","title":"Microsoft Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81952"},{"cve":"CVE-2026-81953","month":"2026-09","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81953"},{"cve":"CVE-2026-81954","month":"2026-09","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81954"},{"cve":"CVE-2026-81955","month":"2026-09","title":"Windows Graphics Component Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81955"},{"cve":"CVE-2026-81956","month":"2026-09","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81956"},{"cve":"CVE-2026-81957","month":"2026-09","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81957"},{"cve":"CVE-2026-81958","month":"2026-09","title":"Microsoft Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81958"},{"cve":"CVE-2026-81959","month":"2026-09","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81959"},{"cve":"CVE-2026-81960","month":"2026-09","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81960"},{"cve":"CVE-2026-81963","month":"2026-09","title":"Windows Update Stack Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update Stack","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C","cwe":["CWE-59","CWE-284"],"exploited":true,"disclosed":false,"kev":true,"kev_added":"2026-09-08","class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963"},{"cve":"CVE-2026-83498","month":"2026-09","title":"Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Virtualization-Based Security (VBS) Enclave","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83498"},{"cve":"CVE-2026-83501","month":"2026-09","title":"Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability","family":"Windows","component":"Windows Virtualization-Based Security (VBS) Enclave","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83501"},{"cve":"CVE-2026-83711","month":"2026-09","title":"Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft Azure Active Directory B2C","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-639"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83711"},{"cve":"CVE-2026-83939","month":"2026-09","title":"Windows Secure Kernel Mode Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Secure Kernel Mode","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83939"},{"cve":"CVE-2026-83940","month":"2026-09","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83940"},{"cve":"CVE-2026-83941","month":"2026-09","title":"Entra ID Elevation of Privilege Vulnerability","family":"Azure","component":"Entra ID","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83941"},{"cve":"CVE-2026-83942","month":"2026-09","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83942"},{"cve":"CVE-2026-83944","month":"2026-09","title":"Azure Logic Apps Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Logic Apps","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83944"},{"cve":"CVE-2026-83946","month":"2026-09","title":"Azure Portal Spoofing Vulnerability","family":"Azure","component":"Azure Portal","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83946"},{"cve":"CVE-2026-83948","month":"2026-09","title":"Microsoft Azure CLI Remote Code Execution Vulnerability","family":"Azure","component":"Microsoft Azure CLI","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83948"},{"cve":"CVE-2026-83949","month":"2026-09","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83949"},{"cve":"CVE-2026-83951","month":"2026-09","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83951"},{"cve":"CVE-2026-83952","month":"2026-09","title":"Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83952"},{"cve":"CVE-2026-83954","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83954"},{"cve":"CVE-2026-83955","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83955"},{"cve":"CVE-2026-83967","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83967"},{"cve":"CVE-2026-83968","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83968"},{"cve":"CVE-2026-83969","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83969"},{"cve":"CVE-2026-83970","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83970"},{"cve":"CVE-2026-83971","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83971"},{"cve":"CVE-2026-83972","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83972"},{"cve":"CVE-2026-83973","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83973"},{"cve":"CVE-2026-83974","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83974"},{"cve":"CVE-2026-83975","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83975"},{"cve":"CVE-2026-83976","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83976"},{"cve":"CVE-2026-83977","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83977"},{"cve":"CVE-2026-83978","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83978"},{"cve":"CVE-2026-83979","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83979"},{"cve":"CVE-2026-83980","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83980"},{"cve":"CVE-2026-83981","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83981"},{"cve":"CVE-2026-83982","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83982"},{"cve":"CVE-2026-83983","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83983"},{"cve":"CVE-2026-83985","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83985"},{"cve":"CVE-2026-83986","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83986"},{"cve":"CVE-2026-83987","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83987"},{"cve":"CVE-2026-83988","month":"2026-09","title":"Windows Biometric Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83988"},{"cve":"CVE-2026-83989","month":"2026-09","title":"Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability","family":"Windows","component":"Windows Services for NFS ONCRPC XDR Driver","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83989"},{"cve":"CVE-2026-83990","month":"2026-09","title":"Microsoft Graphics Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83990"},{"cve":"CVE-2026-83991","month":"2026-09","title":"Windows Cloud Files Mini Filter Driver Tampering Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83991"},{"cve":"CVE-2026-83992","month":"2026-09","title":"Windows Imaging Component Remote Code Execution Vulnerability","family":"Windows","component":"Windows Imaging Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83992"},{"cve":"CVE-2026-83995","month":"2026-09","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83995"},{"cve":"CVE-2026-83996","month":"2026-09","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83996"},{"cve":"CVE-2026-83997","month":"2026-09","title":"Windows Message Queuing Remote Code Execution Vulnerability","family":"Windows","component":"Windows Message Queuing","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83997"},{"cve":"CVE-2026-83998","month":"2026-09","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83998"},{"cve":"CVE-2026-83999","month":"2026-09","title":"Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS) Deduplication Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83999"},{"cve":"CVE-2026-84000","month":"2026-09","title":"Microsoft Graphics Component Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84000"},{"cve":"CVE-2026-84001","month":"2026-09","title":"Windows Key Distribution Center Denial of Service Vulnerability","family":"Windows","component":"Windows Key Distribution Center","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84001"},{"cve":"CVE-2026-84003","month":"2026-09","title":"Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability","family":"Azure","component":"Microsoft Authentication Library (MSAL) for Node.js","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-294"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84003"},{"cve":"CVE-2026-84323","month":"2026-09","title":"Chromium: CVE-2026-84323 Missing authorization in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84323"},{"cve":"CVE-2026-84324","month":"2026-09","title":"Chromium: CVE-2026-84324 Use after free in Proxy","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84324"},{"cve":"CVE-2026-84325","month":"2026-09","title":"Chromium: CVE-2026-84325 Improper input validation in DataTransfer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84325"},{"cve":"CVE-2026-84326","month":"2026-09","title":"Chromium: CVE-2026-84326 Uninitialized resource in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84326"},{"cve":"CVE-2026-84327","month":"2026-09","title":"Chromium: CVE-2026-84327 Incorrect authorization in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84327"},{"cve":"CVE-2026-84328","month":"2026-09","title":"Chromium: CVE-2026-84328 Missing authorization in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84328"},{"cve":"CVE-2026-84329","month":"2026-09","title":"Chromium: CVE-2026-84329 Confused deputy in CredentialProvider","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84329"},{"cve":"CVE-2026-84330","month":"2026-09","title":"Chromium: CVE-2026-84330 UI misrepresentation in FullScreen","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84330"},{"cve":"CVE-2026-84331","month":"2026-09","title":"Chromium: CVE-2026-84331 Incorrect authorization in Actor","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84331"},{"cve":"CVE-2026-84332","month":"2026-09","title":"Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84332"},{"cve":"CVE-2026-84333","month":"2026-09","title":"Chromium: CVE-2026-84333 Use after free in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84333"},{"cve":"CVE-2026-84334","month":"2026-09","title":"Chromium: CVE-2026-84334 Incorrect authorization in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84334"},{"cve":"CVE-2026-84335","month":"2026-09","title":"Chromium: CVE-2026-84335 Incorrect authorization in TabStrip","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84335"},{"cve":"CVE-2026-84347","month":"2026-09","title":"Chromium: CVE-2026-84347 Use after free in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84347"},{"cve":"CVE-2026-84348","month":"2026-09","title":"Chromium: CVE-2026-84348 Information leak in MediaCapture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84348"},{"cve":"CVE-2026-84349","month":"2026-09","title":"Chromium: CVE-2026-84349 Use after free in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84349"},{"cve":"CVE-2026-84350","month":"2026-09","title":"Chromium: CVE-2026-84350 Use after free in TabStrip","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84350"},{"cve":"CVE-2026-84351","month":"2026-09","title":"Chromium: CVE-2026-84351 Buffer overflow in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84351"},{"cve":"CVE-2026-84352","month":"2026-09","title":"Chromium: CVE-2026-84352 Use after free in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84352"},{"cve":"CVE-2026-84353","month":"2026-09","title":"Chromium: CVE-2026-84353 Use after free in Shared Tab Groups","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84353"},{"cve":"CVE-2026-84354","month":"2026-09","title":"Chromium: CVE-2026-84354 Incorrect authorization in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84354"},{"cve":"CVE-2026-84355","month":"2026-09","title":"Chromium: CVE-2026-84355 Incorrect authorization in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84355"},{"cve":"CVE-2026-84356","month":"2026-09","title":"Chromium: CVE-2026-84356 UI misrepresentation in FullScreen","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84356"},{"cve":"CVE-2026-84357","month":"2026-09","title":"Chromium: CVE-2026-84357 Improper input validation in Omnibox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84357"},{"cve":"CVE-2026-84358","month":"2026-09","title":"Chromium: CVE-2026-84358 Improper privilege management in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84358"},{"cve":"CVE-2026-84359","month":"2026-09","title":"Chromium: CVE-2026-84359 Information leak in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84359"},{"cve":"CVE-2026-85042","month":"2026-09","title":"Chromium CVE-2026-85042:  Use after free in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85042"},{"cve":"CVE-2026-85043","month":"2026-09","title":"Chromium CVE-2026-85043:  Incomplete cleanup in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85043"},{"cve":"CVE-2026-85045","month":"2026-09","title":"Chromium CVE-2026-85045:  Race condition in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85045"},{"cve":"CVE-2026-85046","month":"2026-09","title":"Chromium: CVE-2026-85046 Type confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":true,"kev_added":"2026-09-04","class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85046"},{"cve":"CVE-2026-85047","month":"2026-09","title":"Chromium CVE-2026-85047: Improper input validation in Transactions Platform","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85047"},{"cve":"CVE-2026-85048","month":"2026-09","title":"Chromium CVE-2026-85048:  Use after free in Compositing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85048"},{"cve":"CVE-2026-85049","month":"2026-09","title":"Chromium CVE-2026-85049:  Use after free in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85049"},{"cve":"CVE-2026-85051","month":"2026-09","title":"Chromium CVE-2026-85051:  Type confusion in Compositing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85051"},{"cve":"CVE-2026-85052","month":"2026-09","title":"Chromium CVE-2026-85052:  Out of bounds read in CrashReporting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85052"},{"cve":"CVE-2026-85053","month":"2026-09","title":"Chromium CVE-2026-85053:  Improper resource exposure in CacheStorage","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85053"},{"cve":"CVE-2026-85360","month":"2026-09","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85360"},{"cve":"CVE-2026-85875","month":"2026-09","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85875"},{"cve":"CVE-2026-85877","month":"2026-09","title":"Windows Print Spooler Remote Code Execution Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85877"},{"cve":"CVE-2026-85878","month":"2026-09","title":"Azure Database for PostgreSQL Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Database for PostgreSQL","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85878"},{"cve":"CVE-2026-85880","month":"2026-09","title":"Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows ALPC","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C","cwe":["CWE-122","CWE-908"],"exploited":true,"disclosed":false,"kev":true,"kev_added":"2026-09-08","class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880"},{"cve":"CVE-2026-85885","month":"2026-09","title":"Microsoft 365 Copilot Elevation of Privilege Vulnerability","family":"Apps","component":"M365 Copilot","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85885"},{"cve":"CVE-2026-85887","month":"2026-09","title":"M365 Copilot Information Disclosure Vulnerability","family":"Apps","component":"M365 Copilot","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-732"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85887"},{"cve":"CVE-2026-85889","month":"2026-09","title":"Azure AI Foundry Elevation of Privilege Vulnerability","family":"Azure","component":"Azure AI Foundry","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85889"},{"cve":"CVE-2026-85892","month":"2026-09","title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85892"},{"cve":"CVE-2026-85893","month":"2026-09","title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85893"},{"cve":"CVE-2026-85917","month":"2026-09","title":"Azure AI Foundry Elevation of Privilege Vulnerability","family":"Azure","component":"Azure AI Foundry","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85917"},{"cve":"CVE-2026-85921","month":"2026-09","title":"Windows Secure Kernel Mode Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Secure Kernel Mode","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85921"},{"cve":"CVE-2026-87429","month":"2026-09","title":"Chromium CVE-2026-87429: Missing authorization in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87429"},{"cve":"CVE-2026-87430","month":"2026-09","title":"Chromium CVE-2026-87430: Buffer overflow in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87430"},{"cve":"CVE-2026-87431","month":"2026-09","title":"Chromium CVE-2026-87431: Missing authorization in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87431"},{"cve":"CVE-2026-87432","month":"2026-09","title":"Chromium CVE-2026-87432: Incorrect authorization in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87432"},{"cve":"CVE-2026-87433","month":"2026-09","title":"Chromium CVE-2026-87433: Race condition in FileAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87433"},{"cve":"CVE-2026-87434","month":"2026-09","title":"Chromium CVE-2026-87434: Missing authorization in CORS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87434"},{"cve":"CVE-2026-87435","month":"2026-09","title":"Chromium CVE-2026-87435: Information leak in ControlledFrame","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87435"},{"cve":"CVE-2026-87436","month":"2026-09","title":"Chromium CVE-2026-87436: Incomplete cleanup in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87436"},{"cve":"CVE-2026-87437","month":"2026-09","title":"Chromium CVE-2026-87437: Information leak in Frames","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87437"},{"cve":"CVE-2026-87438","month":"2026-09","title":"Chromium CVE-2026-87438: Out of bounds write in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87438"},{"cve":"CVE-2026-87439","month":"2026-09","title":"Chromium CVE-2026-87439: Information leak in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87439"},{"cve":"CVE-2026-87440","month":"2026-09","title":"Chromium CVE-2026-87440: Out of bounds read in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87440"},{"cve":"CVE-2026-87441","month":"2026-09","title":"Chromium CVE-2026-87441: Missing authorization in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87441"},{"cve":"CVE-2026-87442","month":"2026-09","title":"Chromium CVE-2026-87442: Confused deputy in Prerender","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87442"},{"cve":"CVE-2026-87443","month":"2026-09","title":"Chromium CVE-2026-87443: Missing authorization in Actor","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87443"},{"cve":"CVE-2026-87444","month":"2026-09","title":"Chromium CVE-2026-87444: Memory corruption in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87444"},{"cve":"CVE-2026-87445","month":"2026-09","title":"Chromium CVE-2026-87445: UI misrepresentation in Session","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87445"},{"cve":"CVE-2026-87446","month":"2026-09","title":"Chromium CVE-2026-87446: Incomplete cleanup in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87446"},{"cve":"CVE-2026-87447","month":"2026-09","title":"Chromium CVE-2026-87447: Incorrect authorization in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87447"},{"cve":"CVE-2026-87448","month":"2026-09","title":"Chromium CVE-2026-87448: Use after free in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87448"},{"cve":"CVE-2026-87449","month":"2026-09","title":"Chromium CVE-2026-87449: Cross-site request forgery in DeviceBoundSessionCredentials","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87449"},{"cve":"CVE-2026-87450","month":"2026-09","title":"Chromium CVE-2026-87450: Incorrect authorization in Permissions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87450"},{"cve":"CVE-2026-87451","month":"2026-09","title":"Chromium CVE-2026-87451: Information leak in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87451"},{"cve":"CVE-2026-87452","month":"2026-09","title":"Chromium CVE-2026-87452: Incorrect authorization in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87452"},{"cve":"CVE-2026-87453","month":"2026-09","title":"Chromium CVE-2026-87453: Confused deputy in BackgroundFetch","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87453"},{"cve":"CVE-2026-87454","month":"2026-09","title":"Chromium CVE-2026-87454: Information leak in Enterprise","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87454"},{"cve":"CVE-2026-87455","month":"2026-09","title":"Chromium CVE-2026-87455: Use after free in Aura","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87455"},{"cve":"CVE-2026-87456","month":"2026-09","title":"Chromium CVE-2026-87456: Uninitialized resource in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87456"},{"cve":"CVE-2026-87457","month":"2026-09","title":"Chromium CVE-2026-87457: Race condition in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87457"},{"cve":"CVE-2026-87458","month":"2026-09","title":"Chromium CVE-2026-87458: UI misrepresentation in Geometry","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87458"},{"cve":"CVE-2026-87459","month":"2026-09","title":"Chromium CVE-2026-87459: Observable discrepancy in Select","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87459"},{"cve":"CVE-2026-87460","month":"2026-09","title":"Chromium CVE-2026-87460: Use after free in Platform","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87460"},{"cve":"CVE-2026-87461","month":"2026-09","title":"Chromium CVE-2026-87461: Information leak in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87461"},{"cve":"CVE-2026-87462","month":"2026-09","title":"Chromium CVE-2026-87462: UI misrepresentation in FedCM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87462"},{"cve":"CVE-2026-87463","month":"2026-09","title":"Chromium CVE-2026-87463: Incorrect authorization in Certificate","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87463"},{"cve":"CVE-2026-87464","month":"2026-09","title":"Chromium CVE-2026-87464: Use after free in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87464"},{"cve":"CVE-2026-87465","month":"2026-09","title":"Chromium CVE-2026-87465: Incorrect authorization in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87465"},{"cve":"CVE-2026-87466","month":"2026-09","title":"Chromium CVE-2026-87466: Incorrect authorization in Workers","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87466"},{"cve":"CVE-2026-87467","month":"2026-09","title":"Chromium CVE-2026-87467: Race condition in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87467"},{"cve":"CVE-2026-87468","month":"2026-09","title":"Chromium CVE-2026-87468: Incorrect authorization in Isolated","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87468"},{"cve":"CVE-2026-87469","month":"2026-09","title":"Chromium CVE-2026-87469: Improper input validation in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87469"},{"cve":"CVE-2026-87470","month":"2026-09","title":"Chromium CVE-2026-87470: Improper quantity validation in Tint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87470"},{"cve":"CVE-2026-87471","month":"2026-09","title":"Chromium CVE-2026-87471: Incorrect authorization in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87471"},{"cve":"CVE-2026-87472","month":"2026-09","title":"Chromium CVE-2026-87472: Improper input validation in FedCM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87472"},{"cve":"CVE-2026-87473","month":"2026-09","title":"Chromium CVE-2026-87473: Incorrect authorization in FileHandling","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87473"},{"cve":"CVE-2026-87474","month":"2026-09","title":"Chromium CVE-2026-87474: Use after free in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87474"},{"cve":"CVE-2026-87475","month":"2026-09","title":"Chromium CVE-2026-87475: Missing authorization in Omnibox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87475"},{"cve":"CVE-2026-87476","month":"2026-09","title":"Chromium CVE-2026-87476: Incorrect authorization in Loader","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87476"},{"cve":"CVE-2026-87477","month":"2026-09","title":"Chromium CVE-2026-87477: Information leak in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87477"},{"cve":"CVE-2026-87478","month":"2026-09","title":"Chromium CVE-2026-87478: Observable discrepancy in Autofill","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87478"},{"cve":"CVE-2026-87479","month":"2026-09","title":"Chromium CVE-2026-87479: Insufficient policy enforcement in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87479"},{"cve":"CVE-2026-87480","month":"2026-09","title":"Chromium CVE-2026-87480: Use after free in Printing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87480"},{"cve":"CVE-2026-87481","month":"2026-09","title":"Chromium CVE-2026-87481: Incorrect authorization in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87481"},{"cve":"CVE-2026-87482","month":"2026-09","title":"Chromium CVE-2026-87482: Cleartext transmission of sensitive data in HttpsUpgrades","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87482"},{"cve":"CVE-2026-87483","month":"2026-09","title":"Chromium CVE-2026-87483: Incorrect authorization in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87483"},{"cve":"CVE-2026-87484","month":"2026-09","title":"Chromium CVE-2026-87484: UI misrepresentation in Geometry","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87484"},{"cve":"CVE-2026-87485","month":"2026-09","title":"Chromium CVE-2026-87485: Incorrect authorization in CORS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87485"},{"cve":"CVE-2026-87486","month":"2026-09","title":"Chromium CVE-2026-87486: Clickjacking in TrustedWebActivities","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87486"},{"cve":"CVE-2026-87487","month":"2026-09","title":"Chromium CVE-2026-87487: Missing authorization in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87487"},{"cve":"CVE-2026-87488","month":"2026-09","title":"Chromium CVE-2026-87488: Use after free in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87488"},{"cve":"CVE-2026-87489","month":"2026-09","title":"Chromium CVE-2026-87489: Memory corruption in V8","family":"Open Source Software","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87489"},{"cve":"CVE-2026-87490","month":"2026-09","title":"Chromium CVE-2026-87490: Information leak in Transactions Platform","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87490"},{"cve":"CVE-2026-87491","month":"2026-09","title":"Chromium CVE-2026-87491:  Out of bounds write in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":true,"kev_added":"2026-09-09","class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87491"},{"cve":"CVE-2026-87492","month":"2026-09","title":"Chromium CVE-2026-87492: Incorrect authorization in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87492"},{"cve":"CVE-2026-87493","month":"2026-09","title":"Chromium CVE-2026-87493: Missing authorization in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87493"},{"cve":"CVE-2026-87494","month":"2026-09","title":"Chromium CVE-2026-87494: Use after free in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87494"},{"cve":"CVE-2026-87495","month":"2026-09","title":"Chromium CVE-2026-87495: Information leak in Scroll","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87495"},{"cve":"CVE-2026-87496","month":"2026-09","title":"Chromium CVE-2026-87496: UI misrepresentation in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87496"},{"cve":"CVE-2026-87497","month":"2026-09","title":"Chromium CVE-2026-87497: Uninitialized resource in Codecs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87497"},{"cve":"CVE-2026-87498","month":"2026-09","title":"Chromium CVE-2026-87498: Missing authorization in WebUI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87498"},{"cve":"CVE-2026-87499","month":"2026-09","title":"Chromium CVE-2026-87499: Incorrect authorization in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87499"},{"cve":"CVE-2026-87500","month":"2026-09","title":"Chromium CVE-2026-87500: Improper validation of array index in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87500"},{"cve":"CVE-2026-87501","month":"2026-09","title":"Chromium CVE-2026-87501: UI misrepresentation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87501"},{"cve":"CVE-2026-87502","month":"2026-09","title":"Chromium CVE-2026-87502: Confused deputy in Fullscreen","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87502"},{"cve":"CVE-2026-87503","month":"2026-09","title":"Chromium CVE-2026-87503: Inappropriate implementation in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87503"},{"cve":"CVE-2026-87504","month":"2026-09","title":"Chromium CVE-2026-87504: Use after free in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87504"},{"cve":"CVE-2026-87505","month":"2026-09","title":"Chromium CVE-2026-87505: Incorrect authorization in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87505"},{"cve":"CVE-2026-87506","month":"2026-09","title":"Chromium CVE-2026-87506: Privilege elevation in WebUI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87506"},{"cve":"CVE-2026-87507","month":"2026-09","title":"Chromium CVE-2026-87507: UI misrepresentation in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87507"},{"cve":"CVE-2026-87508","month":"2026-09","title":"Chromium CVE-2026-87508: Incorrect authorization in Loader","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87508"},{"cve":"CVE-2026-87509","month":"2026-09","title":"Chromium CVE-2026-87509: Incorrect authorization in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87509"},{"cve":"CVE-2026-87510","month":"2026-09","title":"Chromium CVE-2026-87510: Improper input validation in FileAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87510"},{"cve":"CVE-2026-87511","month":"2026-09","title":"Chromium CVE-2026-87511: Missing authorization in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87511"},{"cve":"CVE-2026-87512","month":"2026-09","title":"Chromium CVE-2026-87512: Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87512"},{"cve":"CVE-2026-87513","month":"2026-09","title":"Chromium CVE-2026-87513: Missing authorization in ControlledFrame","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87513"},{"cve":"CVE-2026-87514","month":"2026-09","title":"Chromium CVE-2026-87514: Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87514"},{"cve":"CVE-2026-87515","month":"2026-09","title":"Chromium CVE-2026-87515: Incorrect authorization in FileAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87515"},{"cve":"CVE-2026-87516","month":"2026-09","title":"Chromium CVE-2026-87516: Observable discrepancy in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87516"},{"cve":"CVE-2026-87517","month":"2026-09","title":"Chromium CVE-2026-87517: Race condition in Mobile","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87517"},{"cve":"CVE-2026-87518","month":"2026-09","title":"Chromium CVE-2026-87518: Observable discrepancy in Safebrowsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87518"},{"cve":"CVE-2026-87519","month":"2026-09","title":"Chromium CVE-2026-87519: Incorrect authorization in Safebrowsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87519"},{"cve":"CVE-2026-87520","month":"2026-09","title":"Chromium CVE-2026-87520: Use after free in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87520"},{"cve":"CVE-2026-87521","month":"2026-09","title":"Chromium CVE-2026-87521: Information leak in WebMCP","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87521"},{"cve":"CVE-2026-87522","month":"2026-09","title":"Chromium CVE-2026-87522: Missing authorization in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87522"},{"cve":"CVE-2026-87523","month":"2026-09","title":"Chromium CVE-2026-87523: Race condition in DataTransfer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87523"},{"cve":"CVE-2026-87524","month":"2026-09","title":"Chromium CVE-2026-87524: Use after free in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87524"},{"cve":"CVE-2026-87525","month":"2026-09","title":"Chromium CVE-2026-87525: Out of bounds read in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87525"},{"cve":"CVE-2026-87526","month":"2026-09","title":"Chromium CVE-2026-87526: Use after free in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87526"},{"cve":"CVE-2026-87527","month":"2026-09","title":"Chromium CVE-2026-87527: Buffer overflow in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87527"},{"cve":"CVE-2026-87528","month":"2026-09","title":"Chromium CVE-2026-87528: Type confusion in Rust","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87528"},{"cve":"CVE-2026-87529","month":"2026-09","title":"Chromium CVE-2026-87529: Numeric truncation error in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87529"},{"cve":"CVE-2026-87530","month":"2026-09","title":"Chromium CVE-2026-87530: Uncontrolled search path element in CredentialProvider","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87530"},{"cve":"CVE-2026-87531","month":"2026-09","title":"Chromium CVE-2026-87531: Information leak in CORS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87531"},{"cve":"CVE-2026-87532","month":"2026-09","title":"Chromium CVE-2026-87532: Improper state validation in Safebrowsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87532"},{"cve":"CVE-2026-87533","month":"2026-09","title":"Chromium CVE-2026-87533: Use after free in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87533"},{"cve":"CVE-2026-87534","month":"2026-09","title":"Chromium CVE-2026-87534: Missing authorization in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87534"},{"cve":"CVE-2026-87535","month":"2026-09","title":"Chromium CVE-2026-87535: Information loss or omission in Safebrowsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87535"},{"cve":"CVE-2026-87536","month":"2026-09","title":"Chromium CVE-2026-87536: Use after free in V8","family":"Open Source Software","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87536"},{"cve":"CVE-2026-87537","month":"2026-09","title":"Chromium CVE-2026-87537: Missing authorization in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87537"},{"cve":"CVE-2026-87538","month":"2026-09","title":"Chromium CVE-2026-87538: Clickjacking in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87538"},{"cve":"CVE-2026-87539","month":"2026-09","title":"Chromium CVE-2026-87539: Observable discrepancy in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87539"},{"cve":"CVE-2026-87540","month":"2026-09","title":"Chromium CVE-2026-87540: Incorrect authorization in Isolated","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87540"},{"cve":"CVE-2026-87541","month":"2026-09","title":"Chromium CVE-2026-87541: Information leak in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87541"},{"cve":"CVE-2026-87542","month":"2026-09","title":"Chromium CVE-2026-87542: Use after free in Input","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87542"},{"cve":"CVE-2026-87543","month":"2026-09","title":"Chromium CVE-2026-87543: Missing authorization in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87543"},{"cve":"CVE-2026-87544","month":"2026-09","title":"Chromium CVE-2026-87544: Incorrect authorization in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87544"},{"cve":"CVE-2026-87545","month":"2026-09","title":"Chromium CVE-2026-87545: Information leak in Mobile","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87545"},{"cve":"CVE-2026-87546","month":"2026-09","title":"Chromium CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87546"},{"cve":"CVE-2026-87547","month":"2026-09","title":"Chromium CVE-2026-87547: Incorrect reference resolution in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87547"},{"cve":"CVE-2026-87548","month":"2026-09","title":"Chromium CVE-2026-87548: Improper state validation in Installer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87548"},{"cve":"CVE-2026-87549","month":"2026-09","title":"Chromium CVE-2026-87549: Incomplete cleanup in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87549"},{"cve":"CVE-2026-87550","month":"2026-09","title":"Chromium CVE-2026-87550: Improper encoding or escaping of output in CSS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87550"},{"cve":"CVE-2026-87551","month":"2026-09","title":"Chromium CVE-2026-87551: Improper certificate validation in CORS","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87551"},{"cve":"CVE-2026-87552","month":"2026-09","title":"Chromium CVE-2026-87552: Missing authorization in TrustedWebActivities","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87552"},{"cve":"CVE-2026-87553","month":"2026-09","title":"Chromium CVE-2026-87553: Improper input validation in SiteIsolation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87553"},{"cve":"CVE-2026-87554","month":"2026-09","title":"Chromium CVE-2026-87554: Race condition in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87554"},{"cve":"CVE-2026-87555","month":"2026-09","title":"Chromium CVE-2026-87555: Uninitialized resource in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87555"},{"cve":"CVE-2026-87556","month":"2026-09","title":"Chromium CVE-2026-87556: Missing authorization in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87556"},{"cve":"CVE-2026-87557","month":"2026-09","title":"Chromium CVE-2026-87557: Missing authorization in LocalNetworkAccess","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87557"},{"cve":"CVE-2026-87558","month":"2026-09","title":"Chromium CVE-2026-87558: Use after free in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87558"},{"cve":"CVE-2026-87559","month":"2026-09","title":"Chromium CVE-2026-87559: UI misrepresentation in UI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87559"},{"cve":"CVE-2026-87560","month":"2026-09","title":"Chromium CVE-2026-87560: Missing authorization in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87560"},{"cve":"CVE-2026-87561","month":"2026-09","title":"Chromium CVE-2026-87561: Incorrect authorization in Web Authentication","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87561"},{"cve":"CVE-2026-87562","month":"2026-09","title":"Chromium CVE-2026-87562: Incorrect reference resolution in Accessibility","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87562"},{"cve":"CVE-2026-87563","month":"2026-09","title":"Chromium CVE-2026-87563: Origin validation error in Paint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87563"},{"cve":"CVE-2026-87565","month":"2026-09","title":"Chromium CVE-2026-87565: Information leak in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87565"},{"cve":"CVE-2026-87566","month":"2026-09","title":"Chromium CVE-2026-87566: Observable discrepancy in Layout","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87566"},{"cve":"CVE-2026-87567","month":"2026-09","title":"Chromium CVE-2026-87567: UI misrepresentation in UrlFormatting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87567"},{"cve":"CVE-2026-87568","month":"2026-09","title":"Chromium CVE-2026-87568: Improper input validation in Chromium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87568"},{"cve":"CVE-2026-87569","month":"2026-09","title":"Chromium CVE-2026-87569: Missing authorization in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87569"},{"cve":"CVE-2026-87570","month":"2026-09","title":"Chromium CVE-2026-87570: Incorrect authorization in SiteIsolation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87570"},{"cve":"CVE-2026-87571","month":"2026-09","title":"Chromium CVE-2026-87571: Improper certificate validation in Loader","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87571"},{"cve":"CVE-2026-87572","month":"2026-09","title":"Chromium CVE-2026-87572: Injection in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87572"},{"cve":"CVE-2026-87573","month":"2026-09","title":"Chromium CVE-2026-87573: Improper input validation in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87573"},{"cve":"CVE-2026-87574","month":"2026-09","title":"Chromium CVE-2026-87574: Information leak in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87574"},{"cve":"CVE-2026-87575","month":"2026-09","title":"Chromium CVE-2026-87575: Incorrect authorization in Loader","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87575"},{"cve":"CVE-2026-87576","month":"2026-09","title":"Chromium CVE-2026-87576: Uninitialized resource in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87576"},{"cve":"CVE-2026-87577","month":"2026-09","title":"Chromium CVE-2026-87577: Incorrect authorization in Isolated","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87577"},{"cve":"CVE-2026-87578","month":"2026-09","title":"Chromium CVE-2026-87578: Use after free in Receiver","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87578"},{"cve":"CVE-2026-87579","month":"2026-09","title":"Chromium CVE-2026-87579: Buffer overflow in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87579"},{"cve":"CVE-2026-87580","month":"2026-09","title":"Chromium CVE-2026-87580: Incorrect authorization in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87580"},{"cve":"CVE-2026-87581","month":"2026-09","title":"Chromium CVE-2026-87581: Use after free in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87581"},{"cve":"CVE-2026-87582","month":"2026-09","title":"Chromium CVE-2026-87582: Confused deputy in DataTransfer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87582"},{"cve":"CVE-2026-87583","month":"2026-09","title":"Chromium CVE-2026-87583: UI misrepresentation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87583"},{"cve":"CVE-2026-87584","month":"2026-09","title":"Chromium CVE-2026-87584: Incorrect authorization in WebUI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87584"},{"cve":"CVE-2026-87585","month":"2026-09","title":"Chromium CVE-2026-87585: Double free in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87585"},{"cve":"CVE-2026-87586","month":"2026-09","title":"Chromium CVE-2026-87586: Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87586"},{"cve":"CVE-2026-87588","month":"2026-09","title":"Chromium CVE-2026-87588: Use after free in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87588"},{"cve":"CVE-2026-87589","month":"2026-09","title":"Chromium CVE-2026-87589: Incorrect authorization in SiteIsolation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87589"},{"cve":"CVE-2026-87590","month":"2026-09","title":"Chromium CVE-2026-87590: Improper input validation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87590"},{"cve":"CVE-2026-87591","month":"2026-09","title":"Chromium CVE-2026-87591: Incorrect authorization in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87591"},{"cve":"CVE-2026-87592","month":"2026-09","title":"Chromium CVE-2026-87592: Out of bounds read in Tint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87592"},{"cve":"CVE-2026-87593","month":"2026-09","title":"Chromium CVE-2026-87593: Information leak in Editing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87593"},{"cve":"CVE-2026-87594","month":"2026-09","title":"Chromium CVE-2026-87594: Incorrect authorization in DataTransfer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87594"},{"cve":"CVE-2026-87595","month":"2026-09","title":"Chromium CVE-2026-87595: Server-side request forgery in Mobile","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87595"},{"cve":"CVE-2026-87596","month":"2026-09","title":"Chromium CVE-2026-87596: Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87596"},{"cve":"CVE-2026-87597","month":"2026-09","title":"Chromium CVE-2026-87597: UI misrepresentation in CustomTabs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87597"},{"cve":"CVE-2026-87598","month":"2026-09","title":"Chromium CVE-2026-87598: Incorrect authorization in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87598"},{"cve":"CVE-2026-87599","month":"2026-09","title":"Chromium CVE-2026-87599: Improper input validation in Interstitials","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87599"},{"cve":"CVE-2026-87600","month":"2026-09","title":"Chromium CVE-2026-87600: Improper input validation in Safebrowsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87600"},{"cve":"CVE-2026-87602","month":"2026-09","title":"Chromium CVE-2026-87602: Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87602"},{"cve":"CVE-2026-87603","month":"2026-09","title":"Chromium CVE-2026-87603: Missing authorization in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87603"},{"cve":"CVE-2026-87604","month":"2026-09","title":"Chromium CVE-2026-87604: Out of bounds read in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87604"},{"cve":"CVE-2026-87605","month":"2026-09","title":"Chromium CVE-2026-87605: Missing authorization in Contacts","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87605"},{"cve":"CVE-2026-87606","month":"2026-09","title":"Chromium CVE-2026-87606: Missing authorization in SiteIsolation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87606"},{"cve":"CVE-2026-87608","month":"2026-09","title":"Chromium CVE-2026-87608: Improper certificate validation in FedCM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87608"},{"cve":"CVE-2026-87609","month":"2026-09","title":"Chromium CVE-2026-87609: Use after free in Sharing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87609"},{"cve":"CVE-2026-87610","month":"2026-09","title":"Chromium CVE-2026-87610: Incorrect authorization in Omnibox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87610"},{"cve":"CVE-2026-87611","month":"2026-09","title":"Chromium CVE-2026-87611: Missing authorization in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87611"},{"cve":"CVE-2026-87613","month":"2026-09","title":"Chromium CVE-2026-87613: Incorrect reference resolution in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87613"},{"cve":"CVE-2026-87614","month":"2026-09","title":"Chromium CVE-2026-87614: Incorrect authorization in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87614"},{"cve":"CVE-2026-87615","month":"2026-09","title":"Chromium CVE-2026-87615: Race condition in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87615"},{"cve":"CVE-2026-87616","month":"2026-09","title":"Chromium CVE-2026-87616: Improper initialization in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87616"},{"cve":"CVE-2026-87617","month":"2026-09","title":"Chromium CVE-2026-87617: Use after free in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87617"},{"cve":"CVE-2026-87618","month":"2026-09","title":"Chromium CVE-2026-87618: Incorrect reference resolution in Storage","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87618"},{"cve":"CVE-2026-87619","month":"2026-09","title":"Chromium CVE-2026-87619: Observable discrepancy in Prefetch","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87619"},{"cve":"CVE-2026-87620","month":"2026-09","title":"Chromium CVE-2026-87620: Observable discrepancy in SVG","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87620"},{"cve":"CVE-2026-87621","month":"2026-09","title":"Chromium CVE-2026-87621: Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87621"},{"cve":"CVE-2026-87622","month":"2026-09","title":"Chromium CVE-2026-87622: Missing authorization in FedCM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87622"},{"cve":"CVE-2026-87623","month":"2026-09","title":"Chromium CVE-2026-87623: Observable discrepancy in DOM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87623"},{"cve":"CVE-2026-87624","month":"2026-09","title":"Chromium CVE-2026-87624: UI misrepresentation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87624"},{"cve":"CVE-2026-87626","month":"2026-09","title":"Chromium CVE-2026-87626: Incorrect authorization in DeviceBoundSessionCredentials","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87626"},{"cve":"CVE-2026-87627","month":"2026-09","title":"Chromium CVE-2026-87627: Interpretation conflict in Safebrowsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87627"},{"cve":"CVE-2026-87628","month":"2026-09","title":"Chromium CVE-2026-87628: Use after free in Cast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87628"},{"cve":"CVE-2026-87629","month":"2026-09","title":"Chromium CVE-2026-87629: Incorrect authorization in Sources","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87629"},{"cve":"CVE-2026-87630","month":"2026-09","title":"Chromium CVE-2026-87630: Integer overflow in WebRTC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87630"},{"cve":"CVE-2026-87631","month":"2026-09","title":"Chromium CVE-2026-87631: Missing authorization in DOM","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87631"},{"cve":"CVE-2026-87632","month":"2026-09","title":"Chromium CVE-2026-87632: Cross-site scripting in SanitizerAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87632"},{"cve":"CVE-2026-87633","month":"2026-09","title":"Chromium CVE-2026-87633: Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87633"},{"cve":"CVE-2026-87634","month":"2026-09","title":"Chromium CVE-2026-87634: Use after free in WebPackaging","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87634"},{"cve":"CVE-2026-87635","month":"2026-09","title":"Chromium CVE-2026-87635: UI misrepresentation in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87635"},{"cve":"CVE-2026-87636","month":"2026-09","title":"Chromium CVE-2026-87636: Type confusion in XML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87636"},{"cve":"CVE-2026-87637","month":"2026-09","title":"Chromium CVE-2026-87637: Use after free in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87637"},{"cve":"CVE-2026-87638","month":"2026-09","title":"Chromium CVE-2026-87638: Out of bounds write in Media","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87638"},{"cve":"CVE-2026-87639","month":"2026-09","title":"Chromium CVE-2026-87639: Use after free in WebPackaging","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87639"},{"cve":"CVE-2026-87640","month":"2026-09","title":"Chromium CVE-2026-87640: Out of bounds read in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87640"},{"cve":"CVE-2026-87641","month":"2026-09","title":"Chromium CVE-2026-87641: Race condition in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87641"},{"cve":"CVE-2026-87642","month":"2026-09","title":"Chromium CVE-2026-87642: Uninitialized resource in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87642"},{"cve":"CVE-2026-87643","month":"2026-09","title":"Chromium CVE-2026-87643: Integer overflow in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87643"},{"cve":"CVE-2026-87644","month":"2026-09","title":"Chromium CVE-2026-87644: Incorrect authorization in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87644"},{"cve":"CVE-2026-87645","month":"2026-09","title":"Chromium CVE-2026-87645: Improper state validation in Safebrowsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87645"},{"cve":"CVE-2026-87646","month":"2026-09","title":"Chromium CVE-2026-87646: Use after free in Web Authentication","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87646"},{"cve":"CVE-2026-87647","month":"2026-09","title":"Chromium CVE-2026-87647: Uninitialized resource in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87647"},{"cve":"CVE-2026-87648","month":"2026-09","title":"Chromium CVE-2026-87648: Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87648"},{"cve":"CVE-2026-87649","month":"2026-09","title":"Chromium CVE-2026-87649: UI misrepresentation in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87649"},{"cve":"CVE-2026-87650","month":"2026-09","title":"Chromium CVE-2026-87650: Out of bounds read in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87650"},{"cve":"CVE-2026-87651","month":"2026-09","title":"Chromium CVE-2026-87651: Incorrect authorization in Paint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87651"},{"cve":"CVE-2026-87652","month":"2026-09","title":"Chromium CVE-2026-87652: Incorrect authorization in PushAPI","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87652"},{"cve":"CVE-2026-87653","month":"2026-09","title":"Chromium CVE-2026-87653: UI misrepresentation in FullScreen","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87653"},{"cve":"CVE-2026-87654","month":"2026-09","title":"Chromium CVE-2026-87654: Buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87654"},{"cve":"CVE-2026-87655","month":"2026-09","title":"Chromium CVE-2026-87655: Clickjacking in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87655"},{"cve":"CVE-2026-87656","month":"2026-09","title":"Chromium CVE-2026-87656: Improper state validation in Safebrowsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87656"},{"cve":"CVE-2026-87657","month":"2026-09","title":"Chromium CVE-2026-87657: Use after free in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87657"},{"cve":"CVE-2026-87658","month":"2026-09","title":"Chromium CVE-2026-87658: Information leak in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87658"},{"cve":"CVE-2026-87701","month":"2026-09","title":"Azure Cosmos DB Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Cosmos DB","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-74"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87701"},{"cve":"CVE-2026-88097","month":"2026-09","title":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88097"},{"cve":"CVE-2026-91708","month":"2026-09","title":"Chromium CVE-2026-91708: Race condition","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91708"},{"cve":"CVE-2026-91709","month":"2026-09","title":"Chromium CVE-2026-91709: Type confusion","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91709"},{"cve":"CVE-2026-91710","month":"2026-09","title":"Chromium CVE-2026-91710: Use after free","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91710"},{"cve":"CVE-2026-91711","month":"2026-09","title":"Chromium CVE-2026-91711: Out of bounds write","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91711"},{"cve":"CVE-2026-91712","month":"2026-09","title":"Chromium CVE-2026-91712: Race condition","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91712"},{"cve":"CVE-2026-91713","month":"2026-09","title":"Chromium CVE-2026-91713: Missing authorization","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91713"},{"cve":"CVE-2026-91714","month":"2026-09","title":"Chromium CVE-2026-91714: Observable discrepancy","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-203"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91714"},{"cve":"CVE-2026-91715","month":"2026-09","title":"Chromium CVE-2026-91715: Type confusion","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91715"},{"cve":"CVE-2026-91716","month":"2026-09","title":"Chromium CVE-2026-91716: Use after free","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91716"},{"cve":"CVE-2026-91717","month":"2026-09","title":"Chromium CVE-2026-91717: Missing authorization","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91717"},{"cve":"CVE-2026-91718","month":"2026-09","title":"Chromium CVE-2026-91718: Use after free","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91718"},{"cve":"CVE-2026-91719","month":"2026-09","title":"Chromium CVE-2026-91719: Code injection","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91719"},{"cve":"CVE-2026-91720","month":"2026-09","title":"Chromium CVE-2026-91720: Uninitialized resource","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91720"},{"cve":"CVE-2026-91721","month":"2026-09","title":"Chromium CVE-2026-91721: Use after free","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91721"},{"cve":"CVE-2026-91722","month":"2026-09","title":"Chromium CVE-2026-91722: Use after free","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91722"},{"cve":"CVE-2026-91723","month":"2026-09","title":"Chromium CVE-2026-91723: Race condition","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91723"},{"cve":"CVE-2026-91724","month":"2026-09","title":"Chromium CVE-2026-91724: Use after free","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91724"},{"cve":"CVE-2026-91725","month":"2026-09","title":"Chromium CVE-2026-91725: Observable discrepancy","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-203"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91725"},{"cve":"CVE-2026-91726","month":"2026-09","title":"Chromium CVE-2026-91726: Out of bounds read","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Critical","cvss":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91726"},{"cve":"CVE-2026-91727","month":"2026-09","title":"Chromium CVE-2026-91727: Incorrect reference resolution","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-706"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91727"},{"cve":"CVE-2026-91728","month":"2026-09","title":"Chromium CVE-2026-91728: Integer overflow","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91728"},{"cve":"CVE-2026-91729","month":"2026-09","title":"Chromium CVE-2026-91729: Use after free","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91729"},{"cve":"CVE-2026-91730","month":"2026-09","title":"Chromium CVE-2026-91730: Incomplete cleanup","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-459"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91730"},{"cve":"CVE-2026-91731","month":"2026-09","title":"Chromium CVE-2026-91731: Type confusion","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91731"},{"cve":"CVE-2026-91733","month":"2026-09","title":"Chromium CVE-2026-91733: Improper state validation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-754"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91733"},{"cve":"CVE-2026-91734","month":"2026-09","title":"Chromium CVE-2026-91734: Incorrect authorization","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91734"},{"cve":"CVE-2026-91735","month":"2026-09","title":"Chromium CVE-2026-91735: Incorrect authorization","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91735"},{"cve":"CVE-2026-91736","month":"2026-09","title":"Chromium CVE-2026-91736: Use after free","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91736"},{"cve":"CVE-2026-91737","month":"2026-09","title":"Chromium CVE-2026-91737: Use after free","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91737"},{"cve":"CVE-2026-91738","month":"2026-09","title":"Chromium CVE-2026-91738: Improper input validation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91738"},{"cve":"CVE-2026-91739","month":"2026-09","title":"Chromium CVE-2026-91739: Missing authorization","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91739"},{"cve":"CVE-2026-91740","month":"2026-09","title":"Chromium CVE-2026-91740: Uninitialized resource","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91740"},{"cve":"CVE-2026-91741","month":"2026-09","title":"Chromium CVE-2026-91741: Type confusion","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91741"},{"cve":"CVE-2026-91742","month":"2026-09","title":"Chromium CVE-2026-91742: Confused deputy","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-441"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91742"},{"cve":"CVE-2026-91743","month":"2026-09","title":"Chromium CVE-2026-91743: Race condition","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91743"},{"cve":"CVE-2026-91744","month":"2026-09","title":"Chromium CVE-2026-91744: Race condition","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91744"},{"cve":"CVE-2026-91745","month":"2026-09","title":"Chromium CVE-2026-91745: Use after free","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91745"},{"cve":"CVE-2026-91746","month":"2026-09","title":"Chromium CVE-2026-91746: Integer overflow","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91746"},{"cve":"CVE-2026-91747","month":"2026-09","title":"Chromium CVE-2026-91747: Use after free","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91747"},{"cve":"CVE-2026-91748","month":"2026-09","title":"Chromium CVE-2026-91748: Race condition","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91748"},{"cve":"CVE-2026-91749","month":"2026-09","title":"Chromium CVE-2026-91749: Use after free","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91749"},{"cve":"CVE-2026-93372","month":"2026-09","title":"Chromium CVE-2026-93372: Buffer overflow in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93372"},{"cve":"CVE-2026-93373","month":"2026-09","title":"Chromium CVE-2026-93373: Use after free in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93373"},{"cve":"CVE-2026-93374","month":"2026-09","title":"Chromium CVE-2026-93374: Use after free in Dawn","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93374"},{"cve":"CVE-2026-93375","month":"2026-09","title":"Chromium CVE-2026-93375: Incorrect reference resolution in Tracing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93375"},{"cve":"CVE-2026-93376","month":"2026-09","title":"Chromium CVE-2026-93376: Out of bounds read in DataTransfer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93376"},{"cve":"CVE-2026-93377","month":"2026-09","title":"Chromium CVE-2026-93377: Type confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93377"},{"cve":"CVE-2026-93378","month":"2026-09","title":"Chromium CVE-2026-93378: Missing authorization in Storage","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93378"},{"cve":"CVE-2026-93379","month":"2026-09","title":"Chromium CVE-2026-93379: Incorrect authorization in ORB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93379"},{"cve":"CVE-2026-93380","month":"2026-09","title":"Chromium CVE-2026-93380: Race condition in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93380"},{"cve":"CVE-2026-93381","month":"2026-09","title":"Chromium CVE-2026-93381: Buffer overflow in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93381"},{"cve":"CVE-2026-93382","month":"2026-09","title":"Chromium CVE-2026-93382: Use after free in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93382"},{"cve":"CVE-2026-93383","month":"2026-09","title":"Chromium CVE-2026-93383: Information leak in Permissions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93383"},{"cve":"CVE-2026-93385","month":"2026-09","title":"Chromium CVE-2026-93385: Information leak in Paint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93385"},{"cve":"CVE-2026-93386","month":"2026-09","title":"Chromium CVE-2026-93386: UI misrepresentation in WebAppInstalls","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93386"},{"cve":"CVE-2026-93387","month":"2026-09","title":"Chromium CVE-2026-93387: Improper state validation in Skia","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93387"},{"cve":"CVE-2026-95274","month":"2026-09","title":"Chromium CVE-2026-95274: Improper output encoding in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-116"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95274"},{"cve":"CVE-2026-95275","month":"2026-09","title":"Chromium CVE-2026-95275: Incorrect reference resolution in MediaStream","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cwe":["CWE-706"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95275"},{"cve":"CVE-2026-95276","month":"2026-09","title":"Chromium CVE-2026-95276: Improper input validation in Themes","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95276"},{"cve":"CVE-2026-95277","month":"2026-09","title":"Chromium CVE-2026-95277: Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95277"},{"cve":"CVE-2026-95278","month":"2026-09","title":"Chromium CVE-2026-95278: Missing authorization in WakeLock","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95278"},{"cve":"CVE-2026-95279","month":"2026-09","title":"Chromium CVE-2026-95279: UI misrepresentation in Omnibox","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95279"},{"cve":"CVE-2026-95280","month":"2026-09","title":"Chromium CVE-2026-95280: Race condition in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95280"},{"cve":"CVE-2026-95281","month":"2026-09","title":"Chromium CVE-2026-95281: Buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95281"},{"cve":"CVE-2026-95282","month":"2026-09","title":"Chromium CVE-2026-95282: Use after free in Platform","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95282"},{"cve":"CVE-2026-95283","month":"2026-09","title":"Chromium CVE-2026-95283: Buffer overflow in Tint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95283"},{"cve":"CVE-2026-95284","month":"2026-09","title":"Chromium CVE-2026-95284: Buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95284"},{"cve":"CVE-2026-95285","month":"2026-09","title":"Chromium CVE-2026-95285: Missing authorization in WebView","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95285"},{"cve":"CVE-2026-95286","month":"2026-09","title":"Chromium CVE-2026-95286: Type confusion in Bindings","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95286"},{"cve":"CVE-2026-95287","month":"2026-09","title":"Chromium CVE-2026-95287: Missing authorization in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95287"},{"cve":"CVE-2026-95288","month":"2026-09","title":"Chromium CVE-2026-95288: UI misrepresentation in Mobile","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95288"},{"cve":"CVE-2026-95289","month":"2026-09","title":"Chromium CVE-2026-95289: Incorrect authorization in Scroll","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95289"},{"cve":"CVE-2026-95290","month":"2026-09","title":"Chromium CVE-2026-95290: Missing authorization in NFC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95290"},{"cve":"CVE-2026-95291","month":"2026-09","title":"Chromium CVE-2026-95291: UI misrepresentation in SecurityIndicators","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95291"},{"cve":"CVE-2026-95292","month":"2026-09","title":"Chromium CVE-2026-95292: Incorrect authorization in Safebrowsing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95292"},{"cve":"CVE-2026-95293","month":"2026-09","title":"Chromium CVE-2026-95293: Uninitialized resource in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95293"},{"cve":"CVE-2026-95294","month":"2026-09","title":"Chromium CVE-2026-95294: UI misrepresentation in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95294"},{"cve":"CVE-2026-95295","month":"2026-09","title":"Chromium CVE-2026-95295: Information leak in Mobile","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95295"},{"cve":"CVE-2026-95296","month":"2026-09","title":"Chromium CVE-2026-95296: Missing authorization in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95296"},{"cve":"CVE-2026-95297","month":"2026-09","title":"Chromium CVE-2026-95297: Missing authorization in Contextual Tasks","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95297"},{"cve":"CVE-2026-95298","month":"2026-09","title":"Chromium CVE-2026-95298: Use after free in Browser","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95298"},{"cve":"CVE-2026-95299","month":"2026-09","title":"Chromium CVE-2026-95299: Use after free in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95299"},{"cve":"CVE-2026-95300","month":"2026-09","title":"Chromium CVE-2026-95300: Missing authorization in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95300"},{"cve":"CVE-2026-95301","month":"2026-09","title":"Chromium CVE-2026-95301: Missing authorization in Extensions","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95301"},{"cve":"CVE-2026-95302","month":"2026-09","title":"Chromium CVE-2026-95302: Incorrect authorization in WebAPKs","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95302"},{"cve":"CVE-2026-95303","month":"2026-09","title":"Chromium CVE-2026-95303: Incomplete cleanup in SmartCard","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cwe":["CWE-459"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95303"},{"cve":"CVE-2026-95304","month":"2026-09","title":"Chromium CVE-2026-95304: Out of bounds write in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95304"},{"cve":"CVE-2026-95305","month":"2026-09","title":"Chromium CVE-2026-95305: UI misrepresentation in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95305"},{"cve":"CVE-2026-95306","month":"2026-09","title":"Chromium CVE-2026-95306: Type confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95306"},{"cve":"CVE-2026-95307","month":"2026-09","title":"Chromium CVE-2026-95307: UI misrepresentation in ExtensionsMenu","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95307"},{"cve":"CVE-2026-95308","month":"2026-09","title":"Chromium CVE-2026-95308: Integer overflow in Metrics","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":3.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95308"},{"cve":"CVE-2026-95309","month":"2026-09","title":"Chromium CVE-2026-95309: UI misrepresentation in Mobile","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95309"},{"cve":"CVE-2026-95310","month":"2026-09","title":"Chromium CVE-2026-95310: Use after free in AdFilter","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95310"},{"cve":"CVE-2026-95311","month":"2026-09","title":"Chromium CVE-2026-95311: Free of non-heap memory in Fonts","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-590"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95311"},{"cve":"CVE-2026-95312","month":"2026-09","title":"Chromium CVE-2026-95312: Information leak in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95312"},{"cve":"CVE-2026-95313","month":"2026-09","title":"Chromium CVE-2026-95313: Use after free in Fullscreen","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95313"},{"cve":"CVE-2026-95314","month":"2026-09","title":"Chromium CVE-2026-95314: Incorrect authorization in HID","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95314"},{"cve":"CVE-2026-95315","month":"2026-09","title":"Chromium CVE-2026-95315: Use after free in Aura","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95315"},{"cve":"CVE-2026-95316","month":"2026-09","title":"Chromium CVE-2026-95316: Unchecked return value in Performance","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-252"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95316"},{"cve":"CVE-2026-95317","month":"2026-09","title":"Chromium CVE-2026-95317: Incorrect authorization in MediaCapture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95317"},{"cve":"CVE-2026-95318","month":"2026-09","title":"Chromium CVE-2026-95318: Buffer overflow in Video","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95318"},{"cve":"CVE-2026-95319","month":"2026-09","title":"Chromium CVE-2026-95319: Use after free in Printing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95319"},{"cve":"CVE-2026-95320","month":"2026-09","title":"Chromium CVE-2026-95320: Missing authorization in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95320"},{"cve":"CVE-2026-95321","month":"2026-09","title":"Chromium CVE-2026-95321: UI misrepresentation in Payments","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95321"},{"cve":"CVE-2026-95322","month":"2026-09","title":"Chromium CVE-2026-95322: Out of bounds write in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Critical","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95322"},{"cve":"CVE-2026-95323","month":"2026-09","title":"Chromium CVE-2026-95323: UI misrepresentation in Chromium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95323"},{"cve":"CVE-2026-95324","month":"2026-09","title":"Chromium CVE-2026-95324: Uninitialized resource in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":3.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95324"},{"cve":"CVE-2026-95325","month":"2026-09","title":"Chromium CVE-2026-95325: Use after free in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95325"},{"cve":"CVE-2026-95326","month":"2026-09","title":"Chromium CVE-2026-95326: Incomplete cleanup in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-459"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95326"},{"cve":"CVE-2026-95327","month":"2026-09","title":"Chromium CVE-2026-95327: Information leak in Networking","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95327"},{"cve":"CVE-2026-95328","month":"2026-09","title":"Chromium CVE-2026-95328: Confused deputy in Mobile","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-441"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95328"},{"cve":"CVE-2026-95329","month":"2026-09","title":"Chromium CVE-2026-95329: Out of bounds write in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95329"},{"cve":"CVE-2026-95330","month":"2026-09","title":"Chromium CVE-2026-95330: Improper state validation in Downloads","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cwe":["CWE-754"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95330"},{"cve":"CVE-2026-95331","month":"2026-09","title":"Chromium CVE-2026-95331: Out of bounds write in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95331"},{"cve":"CVE-2026-95332","month":"2026-09","title":"Chromium CVE-2026-95332: Use of uninitialized variable in Tint","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cwe":["CWE-457"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95332"},{"cve":"CVE-2026-95333","month":"2026-09","title":"Chromium CVE-2026-95333: Use after free in Metrics","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95333"},{"cve":"CVE-2026-95334","month":"2026-09","title":"Chromium CVE-2026-95334: Incorrect reference resolution in WebProtect","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-706"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95334"},{"cve":"CVE-2026-95335","month":"2026-09","title":"Chromium CVE-2026-95335: Use after free in HID","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95335"},{"cve":"CVE-2026-95336","month":"2026-09","title":"Chromium CVE-2026-95336: Information leak in Transactions Platform","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95336"},{"cve":"CVE-2026-95337","month":"2026-09","title":"Chromium CVE-2026-95337: UI misrepresentation in Messages","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95337"},{"cve":"CVE-2026-95338","month":"2026-09","title":"Chromium CVE-2026-95338: Use after free in PDFium","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95338"},{"cve":"CVE-2026-95339","month":"2026-09","title":"Chromium CVE-2026-95339: Use after free in ServiceWorker","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95339"},{"cve":"CVE-2026-95340","month":"2026-09","title":"Chromium CVE-2026-95340: Incorrect authorization in PictureInPicture","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95340"},{"cve":"CVE-2026-95341","month":"2026-09","title":"Chromium CVE-2026-95341: Improper input validation in Desktop","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95341"},{"cve":"CVE-2026-95342","month":"2026-09","title":"Chromium CVE-2026-95342: Missing authorization in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95342"},{"cve":"CVE-2026-95343","month":"2026-09","title":"Chromium CVE-2026-95343: Use after free in WebAudio","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95343"},{"cve":"CVE-2026-95344","month":"2026-09","title":"Chromium CVE-2026-95344: Race condition in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95344"},{"cve":"CVE-2026-95345","month":"2026-09","title":"Chromium CVE-2026-95345: Use after free in Actor","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95345"},{"cve":"CVE-2026-95346","month":"2026-09","title":"Chromium CVE-2026-95346: UI misrepresentation in Chromoting","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95346"},{"cve":"CVE-2026-95347","month":"2026-09","title":"Chromium CVE-2026-95347: Use after free in Updater","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95347"},{"cve":"CVE-2026-95348","month":"2026-09","title":"Chromium CVE-2026-95348: Use after free in Bluetooth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95348"},{"cve":"CVE-2026-95349","month":"2026-09","title":"Chromium CVE-2026-95349: Buffer overflow in WebGL","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95349"},{"cve":"CVE-2026-95350","month":"2026-09","title":"Chromium CVE-2026-95350: Buffer overflow in ANGLE","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95350"},{"cve":"CVE-2026-95351","month":"2026-09","title":"Chromium CVE-2026-95351: Use after free in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95351"},{"cve":"CVE-2026-95352","month":"2026-09","title":"Chromium CVE-2026-95352: Incorrect authorization in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95352"},{"cve":"CVE-2026-95353","month":"2026-09","title":"Chromium CVE-2026-95353: Use after free in Bindings","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95353"},{"cve":"CVE-2026-95354","month":"2026-09","title":"Chromium CVE-2026-95354: Use after free in Verifier","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95354"},{"cve":"CVE-2026-95355","month":"2026-09","title":"Chromium CVE-2026-95355: Incorrect authorization in Navigation","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95355"},{"cve":"CVE-2026-95356","month":"2026-09","title":"Chromium CVE-2026-95356: Use after free in WindowDialog","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95356"},{"cve":"CVE-2026-95357","month":"2026-09","title":"Chromium CVE-2026-95357: Out of bounds write in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95357"},{"cve":"CVE-2026-95358","month":"2026-09","title":"Chromium CVE-2026-95358: Incorrect authorization in Mobile","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95358"},{"cve":"CVE-2026-95359","month":"2026-09","title":"Chromium CVE-2026-95359: Uninitialized resource in GPU","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":3.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95359"},{"cve":"CVE-2026-95360","month":"2026-09","title":"Chromium CVE-2026-95360: Race condition in Editing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95360"},{"cve":"CVE-2026-95361","month":"2026-09","title":"Chromium CVE-2026-95361: Confused deputy in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cwe":["CWE-441"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95361"},{"cve":"CVE-2026-95362","month":"2026-09","title":"Chromium CVE-2026-95362: Cross-site request forgery in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-352"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95362"},{"cve":"CVE-2026-95363","month":"2026-09","title":"Chromium CVE-2026-95363: UI misrepresentation in FileSystem","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-451"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95363"},{"cve":"CVE-2026-95364","month":"2026-09","title":"Chromium CVE-2026-95364: Improper input validation in Passwords","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95364"},{"cve":"CVE-2026-95365","month":"2026-09","title":"Chromium CVE-2026-95365: Type confusion in IndexedDB","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95365"},{"cve":"CVE-2026-95366","month":"2026-09","title":"Chromium CVE-2026-95366: Use of released resource in Core","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cwe":["CWE-672"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95366"},{"cve":"CVE-2026-95367","month":"2026-09","title":"Chromium CVE-2026-95367: Information leak in DataTransfer","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95367"},{"cve":"CVE-2026-95368","month":"2026-09","title":"Chromium CVE-2026-95368: Incorrect authorization in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95368"},{"cve":"CVE-2026-95369","month":"2026-09","title":"Chromium CVE-2026-95369: Inappropriate implementation in XML","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-841"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95369"},{"cve":"CVE-2026-95370","month":"2026-09","title":"Chromium CVE-2026-95370: Inappropriate implementation in NFC","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cwe":["CWE-841"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95370"},{"cve":"CVE-2026-95371","month":"2026-09","title":"Chromium CVE-2026-95371: Missing authorization in Views","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95371"},{"cve":"CVE-2026-95372","month":"2026-09","title":"Chromium CVE-2026-95372: Use after free in Chromecast","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95372"},{"cve":"CVE-2026-95373","month":"2026-09","title":"Chromium CVE-2026-95373: Use after free in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95373"},{"cve":"CVE-2026-95374","month":"2026-09","title":"Chromium CVE-2026-95374: Incorrect authorization in Network","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95374"},{"cve":"CVE-2026-95375","month":"2026-09","title":"Chromium CVE-2026-95375: Incorrect authorization in BrowserTag","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95375"},{"cve":"CVE-2026-95376","month":"2026-09","title":"Chromium CVE-2026-95376: Externally controlled reference in DevTools","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":8.0,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-610"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95376"},{"cve":"CVE-2026-95380","month":"2026-09","title":"Chromium CVE-2026-95380: Type confusion in V8","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95380"},{"cve":"CVE-2026-95381","month":"2026-09","title":"Chromium CVE-2026-95381: Improper input validation in Printing","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95381"},{"cve":"CVE-2026-95382","month":"2026-09","title":"Chromium CVE-2026-95382: Improper input validation in Auth","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95382"},{"cve":"CVE-2026-95384","month":"2026-09","title":"Chromium CVE-2026-95384: Race condition in Transactions Platform","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95384"},{"cve":"CVE-2026-95385","month":"2026-09","title":"Chromium CVE-2026-95385: Inappropriate implementation in PlatformIntegration","family":"Browser","component":"Microsoft Edge (Chromium-based)","cna":"Chrome","label":"(none)","labels":[],"severity":"Low","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","cwe":["CWE-841"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95385"},{"cve":"CVE-2026-89418","month":"2026-09","title":"Uncontrolled Recursion leading to Denial of Service in protobuf-javascript (google-protobuf)","family":"Other","component":"Mariner","cna":"Google","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89418"},{"cve":"CVE-2026-93208","month":"2026-09","title":"kasan: fix cache shrink race with CPU hotplug","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93208"},{"cve":"CVE-2026-93214","month":"2026-09","title":"usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93214"},{"cve":"CVE-2026-93216","month":"2026-09","title":"mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93216"},{"cve":"CVE-2026-93223","month":"2026-09","title":"staging: media: tegra-video: fix of_node_put() on VIP parse errors","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93223"},{"cve":"CVE-2026-93234","month":"2026-09","title":"drm/gud: validate TV mode names before creating enum property","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.2,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93234"},{"cve":"CVE-2026-93236","month":"2026-09","title":"media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93236"},{"cve":"CVE-2026-93237","month":"2026-09","title":"LoongArch: Add DIRECT_MAP_PHYSMEM_END definition","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93237"},{"cve":"CVE-2026-93238","month":"2026-09","title":"s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93238"},{"cve":"CVE-2026-93244","month":"2026-09","title":"drm/sysfb: simpledrm: Improve stride validation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93244"},{"cve":"CVE-2026-93252","month":"2026-09","title":"ocfs2: fix circular locking dependency in ocfs2_init_acl()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93252"},{"cve":"CVE-2026-93259","month":"2026-09","title":"powerpc/irq: Fix missing r2 clobber in PCREL inline assembly","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93259"},{"cve":"CVE-2026-93260","month":"2026-09","title":"powerpc/xive: propagate IPI init errors to prevent use-after-free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93260"},{"cve":"CVE-2026-93261","month":"2026-09","title":"locking/lockdep: Fix NULL pointer dereference in __lock_set_class()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93261"},{"cve":"CVE-2026-93271","month":"2026-09","title":"wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93271"},{"cve":"CVE-2026-93272","month":"2026-09","title":"remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93272"},{"cve":"CVE-2026-93273","month":"2026-09","title":"regulator: tps6594: Fix device node reference leaks in multiphase loop","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93273"},{"cve":"CVE-2026-93275","month":"2026-09","title":"perf/x86/intel/pt: Fix stop/start with no update","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93275"},{"cve":"CVE-2026-93278","month":"2026-09","title":"staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93278"},{"cve":"CVE-2026-93279","month":"2026-09","title":"staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93279"},{"cve":"CVE-2026-93281","month":"2026-09","title":"wifi: rtw89: fix HE extended capability length check","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93281"},{"cve":"CVE-2026-93282","month":"2026-09","title":"ksmbd: fix maximum allowed access checks","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93282"},{"cve":"CVE-2026-93285","month":"2026-09","title":"f2fs: embed f2fs_gc_kthread in f2fs_sb_info","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93285"},{"cve":"CVE-2026-93687","month":"2026-09","title":"braces through 3.0.3 Stack Overflow via Deeply Nested Patterns","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93687"},{"cve":"CVE-2026-93748","month":"2026-09","title":"http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stale","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-524"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93748"},{"cve":"CVE-2026-93749","month":"2026-09","title":"source-map-js through 1.2.1 Event Loop Denial of Service","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93749"},{"cve":"CVE-2026-93750","month":"2026-09","title":"http-cache-semantics through 4.2.0 Cross-Client Cache Disclosure via Vary Wildcard","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-436"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93750"},{"cve":"CVE-2026-93782","month":"2026-09","title":"vhost-scsi: flush backend after device ioctls","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93782"},{"cve":"CVE-2026-93786","month":"2026-09","title":"ksmbd: preserve VFS inherited POSIX ACL mask","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93786"},{"cve":"CVE-2026-93808","month":"2026-09","title":"ALSA: usb-audio: caiaq: validate EP1 reply lengths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93808"},{"cve":"CVE-2026-93810","month":"2026-09","title":"cachefiles: Fix double fput","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93810"},{"cve":"CVE-2026-93811","month":"2026-09","title":"ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93811"},{"cve":"CVE-2026-93812","month":"2026-09","title":"ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93812"},{"cve":"CVE-2026-93815","month":"2026-09","title":"net: au1000: move free_irq out of the close-time spinlocked section","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93815"},{"cve":"CVE-2026-93816","month":"2026-09","title":"f2fs: validate inline dentry name lengths before conversion","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93816"},{"cve":"CVE-2026-93818","month":"2026-09","title":"PCI: plda: Protect root bus removal with rescan lock","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93818"},{"cve":"CVE-2026-93828","month":"2026-09","title":"exfat: fix handling of damaged volume in exfat_create_upcase_table()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93828"},{"cve":"CVE-2026-97407","month":"2026-09","title":"ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97407"},{"cve":"CVE-2026-97411","month":"2026-09","title":"net: ibm: emac: mal: fix potential system hang in mal_remove()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97411"},{"cve":"CVE-2026-97412","month":"2026-09","title":"pds_core: quiesce DMA before freeing resources","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97412"},{"cve":"CVE-2026-97413","month":"2026-09","title":"RDMA/rtrs-srv: Fix integer underflow in process_read and process_write","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97413"},{"cve":"CVE-2026-97418","month":"2026-09","title":"ALSA: es18xx: check control allocation before private data setup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97418"},{"cve":"CVE-2026-97423","month":"2026-09","title":"cxl/region: Validate partition index before array access","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97423"},{"cve":"CVE-2026-97434","month":"2026-09","title":"dpaa2-switch: fix handling of NAPI on the remove path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97434"},{"cve":"CVE-2026-97436","month":"2026-09","title":"dpaa2-switch: rework FDB management on the bridge leave path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97436"},{"cve":"CVE-2026-97438","month":"2026-09","title":"fs/ntfs3: validate index entry key bounds","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97438"},{"cve":"CVE-2026-97439","month":"2026-09","title":"fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97439"},{"cve":"CVE-2026-97442","month":"2026-09","title":"wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.8,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97442"},{"cve":"CVE-2026-97475","month":"2026-09","title":"thermal/drivers/tegra/soctherma: Switch to devm cooling device registration","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97475"},{"cve":"CVE-2026-97478","month":"2026-09","title":"virt: acrn: Fix irqfd use-after-free during eventfd shutdown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97478"},{"cve":"CVE-2026-97482","month":"2026-09","title":"usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97482"},{"cve":"CVE-2026-97485","month":"2026-09","title":"omfs: handle set_blocksize failures","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97485"},{"cve":"CVE-2026-97486","month":"2026-09","title":"hpfs: handle set_blocksize failures","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97486"},{"cve":"CVE-2026-97487","month":"2026-09","title":"jfs: handle set_blocksize failures","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97487"},{"cve":"CVE-2026-97488","month":"2026-09","title":"qnx4: handle set_blocksize failures","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97488"},{"cve":"CVE-2026-97489","month":"2026-09","title":"bfs: handle set_blocksize failures","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97489"},{"cve":"CVE-2026-97490","month":"2026-09","title":"affs: handle set_blocksize failures","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97490"},{"cve":"CVE-2026-97499","month":"2026-09","title":"coresight: perf: Retrieve path and source from event data","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97499"},{"cve":"CVE-2026-97500","month":"2026-09","title":"wifi: rtw89: phy: check length before parsing PHY status IE","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97500"},{"cve":"CVE-2026-97502","month":"2026-09","title":"mmc: davinci: avoid NULL deref of host->data in IRQ handler","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97502"},{"cve":"CVE-2026-97504","month":"2026-09","title":"watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97504"},{"cve":"CVE-2026-97506","month":"2026-09","title":"crypto: ixp4xx - fix buffer chain unwind on allocation failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97506"},{"cve":"CVE-2026-97507","month":"2026-09","title":"media: dm1105: fix missing error check for dma_alloc_coherent","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97507"},{"cve":"CVE-2026-97508","month":"2026-09","title":"thunderbolt: Set tb->root_switch to NULL when domain is stopped","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97508"},{"cve":"CVE-2026-97509","month":"2026-09","title":"thunderbolt: Keep XDomain reference during the lifetime of a service","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97509"},{"cve":"CVE-2026-97510","month":"2026-09","title":"thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97510"},{"cve":"CVE-2026-97513","month":"2026-09","title":"media: chips-media: wave5: Release m2m_ctx after Instance Removed from List","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97513"},{"cve":"CVE-2026-97514","month":"2026-09","title":"media: chips-media: wave5: Fix Reports from Kernel Lock Validator","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97514"},{"cve":"CVE-2026-97515","month":"2026-09","title":"i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97515"},{"cve":"CVE-2026-97519","month":"2026-09","title":"drm/xe: Fix null pointer dereference in devcoredump cleanup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97519"},{"cve":"CVE-2026-97520","month":"2026-09","title":"gfs2: move quota_init qc iterator increment","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97520"},{"cve":"CVE-2026-97521","month":"2026-09","title":"gfs2: fix quota init duplicate scan","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97521"},{"cve":"CVE-2026-61548","month":"2026-09","title":"Rsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured data","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61548"},{"cve":"CVE-2026-79705","month":"2026-09","title":"Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79705"},{"cve":"CVE-2026-87776","month":"2026-09","title":"compression vulnerable to Denial of Service via memory leak on premature response close","family":"Other","component":"Mariner","cna":"openjs","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87776"},{"cve":"CVE-2026-89161","month":"2026-09","title":"In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-590"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89161"},{"cve":"CVE-2025-24890","month":"2026-09","title":"gix-sec safe.directory protections absent for elevated administrators","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","cwe":["CWE-283"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24890"},{"cve":"CVE-2026-6485","month":"2026-09","title":"UEFI BIOS embedded Shell can be used to bypass Secure Boot","family":"Other","component":"Mariner","cna":"Insyde","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-489"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-6485"},{"cve":"CVE-2026-80231","month":"2026-09","title":"native CA store conn reuse","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80231"},{"cve":"CVE-2026-80921","month":"2026-09","title":"KVM: s390: vsie: zero stale crypto bits","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80921"},{"cve":"CVE-2026-82209","month":"2026-09","title":"domain-scoped PSL domain cookie","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82209"},{"cve":"CVE-2026-56143","month":"2026-09","title":"Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service","family":"Open Source Software","component":"Mariner","cna":"elastic","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56143"},{"cve":"CVE-2026-72649","month":"2026-09","title":"Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution","family":"Open Source Software","component":"Mariner","cna":"elastic","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72649"},{"cve":"CVE-2026-78607","month":"2026-09","title":"Missing Authorization in Elasticsearch Leading to Information Disclosure","family":"Open Source Software","component":"Mariner","cna":"elastic","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78607"},{"cve":"CVE-2026-80768","month":"2026-09","title":"HID: ft260: fix stack-use-after-return write in I2C read race","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.6,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80768"},{"cve":"CVE-2026-80770","month":"2026-09","title":"HID: nintendo: stop device IO before hid_hw_stop on probe failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.0,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80770"},{"cve":"CVE-2026-80771","month":"2026-09","title":"HID: nintendo: register input device after capabilities are set","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80771"},{"cve":"CVE-2026-80772","month":"2026-09","title":"HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80772"},{"cve":"CVE-2026-80780","month":"2026-09","title":"HID: pidff: fix OOB write when hid->inputs is empty","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80780"},{"cve":"CVE-2026-80790","month":"2026-09","title":"nvmet-fc: fix invalid free in LS IOD error path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80790"},{"cve":"CVE-2026-80791","month":"2026-09","title":"nvmet-auth: zero the AUTH_RECEIVE response buffer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80791"},{"cve":"CVE-2026-80794","month":"2026-09","title":"nfc: nci: fix uninit-value in the RF discover/activated NTF handlers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80794"},{"cve":"CVE-2026-80796","month":"2026-09","title":"nfc: nci: add data_len bound checks to activation parameter extractors","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80796"},{"cve":"CVE-2026-80797","month":"2026-09","title":"nfc: pn533: purge fragmented skbs during cleanup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80797"},{"cve":"CVE-2026-80798","month":"2026-09","title":"nfc: llcp: reject PDUs shorter than the LLCP header","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80798"},{"cve":"CVE-2026-80799","month":"2026-09","title":"nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80799"},{"cve":"CVE-2026-80800","month":"2026-09","title":"nfc: llcp: bound the connect_sn TLV walk to the skb","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80800"},{"cve":"CVE-2026-80801","month":"2026-09","title":"nfc: microread: validate target discovery payload lengths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80801"},{"cve":"CVE-2026-80802","month":"2026-09","title":"nfc: fdp: bound the device-reported read length and fix an skb leak","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80802"},{"cve":"CVE-2026-80803","month":"2026-09","title":"nfc: digital: clamp SENSF_RES length to the destination buffer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80803"},{"cve":"CVE-2026-80807","month":"2026-09","title":"nilfs2: reject invalid block index in GC ioctl","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80807"},{"cve":"CVE-2026-80809","month":"2026-09","title":"ocfs2: fix missing metadata reservation for large xattrs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80809"},{"cve":"CVE-2026-80820","month":"2026-09","title":"xfs: don't livelock in scrub on a circular unlinked list","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80820"},{"cve":"CVE-2026-80823","month":"2026-09","title":"nfc: st21nfca: validate ATR_REQ length against the received frame","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80823"},{"cve":"CVE-2026-80832","month":"2026-09","title":"crypto: qce - fix CCM AAD buffer underallocation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80832"},{"cve":"CVE-2026-80833","month":"2026-09","title":"crypto: sun8i-ss - Remove crypto_rng interface","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80833"},{"cve":"CVE-2026-80834","month":"2026-09","title":"crypto: sun8i-ce - Remove crypto_rng interface","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80834"},{"cve":"CVE-2026-80846","month":"2026-09","title":"xfrm: drop ESP-in-TCP packets with no ingress device","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80846"},{"cve":"CVE-2026-80848","month":"2026-09","title":"xfrm: espintcp: fix UAF during close","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80848"},{"cve":"CVE-2026-80851","month":"2026-09","title":"gtp: serialize PDP context updates","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80851"},{"cve":"CVE-2026-80854","month":"2026-09","title":"usb: gadget: f_tcm: keep port count until LUN teardown completes","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80854"},{"cve":"CVE-2026-80872","month":"2026-09","title":"ALSA: hda/tas2781: Cancel async firmware request at unbind","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80872"},{"cve":"CVE-2026-80889","month":"2026-09","title":"can: isotp: fix timer drain order, wakeup handling and tx_gen ordering","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80889"},{"cve":"CVE-2026-80891","month":"2026-09","title":"KVM: s390: pci: Validate AIBV and AISB before pinning guest pages","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80891"},{"cve":"CVE-2026-80892","month":"2026-09","title":"erofs: cap LZMA stream pool size","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80892"},{"cve":"CVE-2026-80910","month":"2026-09","title":"ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80910"},{"cve":"CVE-2026-82208","month":"2026-09","title":"wolfSSL CA-cache hit overrides callback","family":"Other","component":"Mariner","cna":"curl","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82208"},{"cve":"CVE-2026-83605","month":"2026-09","title":"xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-91"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83605"},{"cve":"CVE-2026-83607","month":"2026-09","title":"xmldom: Element name injection via createElement() bypasses requireWellFormed","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-91"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83607"},{"cve":"CVE-2026-83608","month":"2026-09","title":"xmldom: DocType `name` Injection Bypasses requireWellFormed","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-91"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83608"},{"cve":"CVE-2026-83610","month":"2026-09","title":"xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-116"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83610"},{"cve":"CVE-2026-83611","month":"2026-09","title":"xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-1286"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83611"},{"cve":"CVE-2026-83613","month":"2026-09","title":"xmldom: Quadratic-time attribute deduplication","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83613"},{"cve":"CVE-2026-83614","month":"2026-09","title":"xmldom: Quadratic-time parsing via the malformed-input recovery path \u2014 `parseElementStartPart` re-scan and `normalize()` adjacent-text merge","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83614"},{"cve":"CVE-2026-83615","month":"2026-09","title":"xmldom: Quadratic-memory consumption","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83615"},{"cve":"CVE-2026-83616","month":"2026-09","title":"xmldom: Processing Instruction Target Injection Bypasses requireWellFormed","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-91"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83616"},{"cve":"CVE-2026-83619","month":"2026-09","title":"xmldom: End-tag Whitespace-Trim Regex ReDoS \u2014 quadratic backtracking in the 0.8.x end-tag parser","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83619"},{"cve":"CVE-2026-84303","month":"2026-09","title":"gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-178"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84303"},{"cve":"CVE-2026-85062","month":"2026-09","title":"Colord: Slow rejection of oversized malformed color strings","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-1333"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85062"},{"cve":"CVE-2026-85393","month":"2026-09","title":"node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85393"},{"cve":"CVE-2026-85396","month":"2026-09","title":"rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85396"},{"cve":"CVE-2026-86139","month":"2026-09","title":"In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86139"},{"cve":"CVE-2026-86141","month":"2026-09","title":"xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-252"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86141"},{"cve":"CVE-2026-102342","month":"2026-10","title":"ammonia allows stored XSS through unsanitized SVG animate and set attributes","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102342"},{"cve":"CVE-2026-102404","month":"2026-10","title":"Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service","family":"Other","component":"Mariner","cna":"elastic","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102404"},{"cve":"CVE-2026-102407","month":"2026-10","title":"Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream Modification","family":"Other","component":"Mariner","cna":"elastic","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102407"},{"cve":"CVE-2026-102411","month":"2026-10","title":"Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service","family":"Other","component":"Mariner","cna":"elastic","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102411"},{"cve":"CVE-2026-102554","month":"2026-10","title":"Denial of Service via Eager Array Allocation During Deserialization in Guava","family":"Other","component":"Mariner","cna":"Google","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102554"},{"cve":"CVE-2026-103006","month":"2026-10","title":"Uncontrolled Recursion in Elasticsearch Leading to Denial of Service","family":"Other","component":"Mariner","cna":"elastic","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103006"},{"cve":"CVE-2026-103531","month":"2026-10","title":"OpenSC card-setcos.c setcos_construct_fci_44 stack-based overflow","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103531"},{"cve":"CVE-2026-103658","month":"2026-10","title":"GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes its capacity check with a signed int ((int)s + 1), so a requested size of 0x7FFFFFFF wraps negative and the backing buffer is never grown. ReadOnlyDict::load() in modules/speller/default/readonly_ws.cpp passes the unvalidated 32-bit size fields from a .rws dictionary header into this path, so a crafted .rws file with a valid endian marker (12345678) and an oversized length field (e.g. lang_name_size = 0x7FFFFFFF) causes attacker-controlled data to be written out of bounds past an undersized heap allocation. An attacker who induces a victim to load a malicious dictionary \u2014 for example via aspell dump master <file> \u2014 can corrupt heap memory, resulting in denial of service and potentially code execution. Fixed in b830b6e and will be fixed in release 0.60.8.3.","family":"Other","component":"Mariner","cna":"Anthropic","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103658"},{"cve":"CVE-2026-104252","month":"2026-10","title":"Vitess vttablet /twopcz reflected XSS","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-104252"},{"cve":"CVE-2026-105326","month":"2026-10","title":"Cups: cups: argument injection in mailto notifier via notify-recipient-uri","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":["CWE-88"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105326"},{"cve":"CVE-2026-105712","month":"2026-10","title":"gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with --directory (aka -C) into an existing directory containing a pre-existing symlink, gpgtar can follow that symlink and create or overwrite a file outside the selected extraction directory. The write is limited by the extraction user's filesystem permissions. An archive extracted into a fresh empty directory does not have this risk.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U","cwe":["CWE-61"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105712"},{"cve":"CVE-2026-105773","month":"2026-10","title":"Canimaan Software ClamXAV local privilege escalation","family":"Other","component":"Mariner","cna":"cisa-cg","label":"(none)","labels":[],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105773"},{"cve":"CVE-2026-106454","month":"2026-10","title":"Twisted: IMAP wildcardToRegexp() ReDoS","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-1333"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106454"},{"cve":"CVE-2026-106547","month":"2026-10","title":"HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata","family":"Other","component":"Mariner","cna":"HDFG","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106547"},{"cve":"CVE-2026-106552","month":"2026-10","title":"In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106552"},{"cve":"CVE-2026-106553","month":"2026-10","title":"In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-669"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106553"},{"cve":"CVE-2026-106555","month":"2026-10","title":"In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","cwe":["CWE-669"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106555"},{"cve":"CVE-2026-106582","month":"2026-10","title":"In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 \"Crossing the Streams\" findings.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-514"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106582"},{"cve":"CVE-2026-106583","month":"2026-10","title":"In ssh in OpenSSH before 10.6, a $ or \\ character can occur in a command-line username, leading to injection.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-99"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106583"},{"cve":"CVE-2026-106584","month":"2026-10","title":"In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","cwe":["CWE-193"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106584"},{"cve":"CVE-2026-106585","month":"2026-10","title":"In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-409"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106585"},{"cve":"CVE-2026-106586","month":"2026-10","title":"In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-670"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106586"},{"cve":"CVE-2026-106587","month":"2026-10","title":"In sshd in OpenSSH before 10.6, the value \"none\" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":3.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106587"},{"cve":"CVE-2026-106589","month":"2026-10","title":"In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged allocation of PTY devices.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-272"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106589"},{"cve":"CVE-2026-107161","month":"2026-10","title":"Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107161"},{"cve":"CVE-2026-107296","month":"2026-10","title":"msgpack5: Decoding negative int64 values mutates the input buffer","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-471"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107296"},{"cve":"CVE-2026-107297","month":"2026-10","title":"msgpack5: Quadratic parsing in the streaming decoder","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107297"},{"cve":"CVE-2026-107298","month":"2026-10","title":"msgpack5: Deeply nested input can exhaust the decoder stack","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107298"},{"cve":"CVE-2026-107299","month":"2026-10","title":"msgpack5: Reserved byte can cause unbounded stream buffering","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-228"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107299"},{"cve":"CVE-2026-107300","month":"2026-10","title":"msgpack5: Many buffered values can exhaust the streaming decoder stack","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107300"},{"cve":"CVE-2026-107301","month":"2026-10","title":"msgpack5: Partial options disable prototype protection","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","cwe":["CWE-1321"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107301"},{"cve":"CVE-2026-107302","month":"2026-10","title":"msgpack5: Truncated map32 headers throw an unexpected error","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107302"},{"cve":"CVE-2026-107324","month":"2026-10","title":"Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver","family":"Other","component":"Mariner","cna":"mongodb","label":"(none)","labels":[],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107324"},{"cve":"CVE-2026-107325","month":"2026-10","title":"Application denial of service via missing BSON array length validation in MongoDB Go Driver","family":"Other","component":"Mariner","cna":"mongodb","label":"(none)","labels":[],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-129"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107325"},{"cve":"CVE-2026-107655","month":"2026-10","title":"Cups: null pointer dereference via embedded job ticket comments allows remote denial of service","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Low","cvss":4.0,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107655"},{"cve":"CVE-2026-107708","month":"2026-10","title":"MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107708"},{"cve":"CVE-2026-107718","month":"2026-10","title":"AdonisJS: Unencoded route parameters can produce open redirects","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-601"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107718"},{"cve":"CVE-2026-107778","month":"2026-10","title":"MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred()","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107778"},{"cve":"CVE-2026-107885","month":"2026-10","title":"OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107885"},{"cve":"CVE-2026-107886","month":"2026-10","title":"OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, add_class() frees pclass->printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer; CUPS-Delete-Class subsequently frees the same allocation in cupsdDeletePrinter(). A client authorized to modify and delete classes can cause scheduler-wide denial of service. The default policy requires @SYSTEM privileges.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107886"},{"cve":"CVE-2026-107888","month":"2026-10","title":"OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. Temporary-printer cleanup can remove the destination without canceling its held jobs, and the scheduler dereferences the NULL result of cupsdFindDest() while checking holding_new_jobs. This terminates cupsd and interrupts all queues managed by that process. In some plausible scenarios, an unprivileged submission can trigger this.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107888"},{"cve":"CVE-2026-107890","month":"2026-10","title":"OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes with IPP_TAG_ZERO, but add_job() converts these separators to IPP_TAG_JOB. During job startup, get_options()/ipp_length() subsequently calls strlen() on a NULL attribute name, terminating cupsd and disrupting all queues. A single crafted Print-Job request can trigger the crash when the client can reach the scheduler and submit jobs to an accepting, enabled queue supporting the submitted document format. Anonymous submission is possible when permitted by listener and access-control configuration.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-107890"},{"cve":"CVE-2026-108119","month":"2026-10","title":"Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108119"},{"cve":"CVE-2026-108266","month":"2026-10","title":"Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108266"},{"cve":"CVE-2026-108267","month":"2026-10","title":"Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108267"},{"cve":"CVE-2026-108976","month":"2026-10","title":"GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-184"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108976"},{"cve":"CVE-2026-108985","month":"2026-10","title":"ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array(). The caller-supplied maxsize value is not honored.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108985"},{"cve":"CVE-2026-109349","month":"2026-10","title":"gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Header","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-617"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109349"},{"cve":"CVE-2026-109828","month":"2026-10","title":"libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable","family":"Other","component":"Mariner","cna":"VulDB","label":"(none)","labels":[],"severity":"Low","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C","cwe":["CWE-457"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109828"},{"cve":"CVE-2026-19029","month":"2026-10","title":"HDF5 scale-offset filter heap buffer over-read via crafted chunk","family":"Other","component":"Mariner","cna":"HDFG","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19029"},{"cve":"CVE-2026-19585","month":"2026-10","title":"Go-getter vulnerable to a path traversal in S3/GCS directory download handling","family":"Other","component":"Mariner","cna":"HashiCorp","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-19585"},{"cve":"CVE-2026-42356","month":"2026-10","title":"Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U","cwe":["CWE-430"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42356"},{"cve":"CVE-2026-42528","month":"2026-10","title":"Apache HTTP Server: mod_dav shared lock overflow","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42528"},{"cve":"CVE-2026-42616","month":"2026-10","title":"In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42616"},{"cve":"CVE-2026-42617","month":"2026-10","title":"In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_to_ib() in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42617"},{"cve":"CVE-2026-42618","month":"2026-10","title":"In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42618"},{"cve":"CVE-2026-46569","month":"2026-10","title":"In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46569"},{"cve":"CVE-2026-46570","month":"2026-10","title":"In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file metadata.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46570"},{"cve":"CVE-2026-46571","month":"2026-10","title":"In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46571"},{"cve":"CVE-2026-46572","month":"2026-10","title":"In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a specially crafted directory.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46572"},{"cve":"CVE-2026-46729","month":"2026-10","title":"Apache HTTP Server: mod_heartmonitor denial of service","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-46729"},{"cve":"CVE-2026-47360","month":"2026-10","title":"Apache HTTP Server: mod_session: Session cookie not removed during internal redirect","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47360"},{"cve":"CVE-2026-48005","month":"2026-10","title":"Apache HTTP Server: mod_auth_digest reauthentication attack","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48005"},{"cve":"CVE-2026-49264","month":"2026-10","title":"OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49264"},{"cve":"CVE-2026-49265","month":"2026-10","title":"OAuthLib: Timing Attack Vulnerability in PKCE code_verifier Comparison","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","cwe":["CWE-208"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49265"},{"cve":"CVE-2026-56153","month":"2026-10","title":"Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56153"},{"cve":"CVE-2026-56154","month":"2026-10","title":"Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56154"},{"cve":"CVE-2026-56449","month":"2026-10","title":"Apache HTTP Server: mod_proxy_html: crash in dump_content","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56449"},{"cve":"CVE-2026-56851","month":"2026-10","title":"Panic parsing crafted input in x/text/secure/precis in golang.org/x/text","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56851"},{"cve":"CVE-2026-56857","month":"2026-10","title":"Root.Mkdir(All) can follow junctions out of the root on Windows in os","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-1386"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56857"},{"cve":"CVE-2026-56866","month":"2026-10","title":"HTTP/1 client connection desynchronization after CONNECT rejection in net/http","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56866"},{"cve":"CVE-2026-57941","month":"2026-10","title":"Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57941"},{"cve":"CVE-2026-58415","month":"2026-10","title":"Apache HTTP Server: mod_dav_fs property database read access","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":["CWE-552"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58415"},{"cve":"CVE-2026-59685","month":"2026-10","title":"Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L/E:U","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59685"},{"cve":"CVE-2026-59797","month":"2026-10","title":"Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-269"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59797"},{"cve":"CVE-2026-61373","month":"2026-10","title":"Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61373"},{"cve":"CVE-2026-61374","month":"2026-10","title":"Apache Thrift: Java TSaslTransport post-auth data-frame missing size limit","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61374"},{"cve":"CVE-2026-61801","month":"2026-10","title":"github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61801"},{"cve":"CVE-2026-63045","month":"2026-10","title":"Apache HTTP Server: mod_proxy_ftp PASV address handling","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63045"},{"cve":"CVE-2026-63292","month":"2026-10","title":"Apache HTTP Server: mod_vhost_alias stack overflow","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63292"},{"cve":"CVE-2026-63686","month":"2026-10","title":"Apache HTTP Server: mod_xml2enc crash on charset conversion failure","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63686"},{"cve":"CVE-2026-63718","month":"2026-10","title":"Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U","cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63718"},{"cve":"CVE-2026-63772","month":"2026-10","title":"Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63772"},{"cve":"CVE-2026-66054","month":"2026-10","title":"Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66054"},{"cve":"CVE-2026-66055","month":"2026-10","title":"Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language)","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66055"},{"cve":"CVE-2026-66081","month":"2026-10","title":"Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-824"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66081"},{"cve":"CVE-2026-66331","month":"2026-10","title":"Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66331"},{"cve":"CVE-2026-66837","month":"2026-10","title":"Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66837"},{"cve":"CVE-2026-66858","month":"2026-10","title":"Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml)","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66858"},{"cve":"CVE-2026-66859","month":"2026-10","title":"Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66859"},{"cve":"CVE-2026-67693","month":"2026-10","title":"An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and Extended Key Usage (EKU)","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67693"},{"cve":"CVE-2026-73636","month":"2026-10","title":"Apache HTTP Server: mod_auth_digest one-time-nonce replay attack","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-294"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73636"},{"cve":"CVE-2026-73637","month":"2026-10","title":"Apache HTTP Server: mod_auth_digest DoS attack","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73637"},{"cve":"CVE-2026-75818","month":"2026-10","title":"Heap Buffer Overflow in GNU Aspell's prezip utility","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-75818"},{"cve":"CVE-2026-75819","month":"2026-10","title":"Out-of-bounds Read in GNU Aspell","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-75819"},{"cve":"CVE-2026-75820","month":"2026-10","title":"Integer Truncation Leading to Heap Corruption in GNU Aspell","family":"Other","component":"Mariner","cna":"CERT-PL","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-75820"},{"cve":"CVE-2026-77206","month":"2026-10","title":"IKEv2 pre-authentication Null Pointer Dereference in EAP code","family":"Other","component":"Mariner","cna":"libreswan","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77206"},{"cve":"CVE-2026-77207","month":"2026-10","title":"Null Pointer Dereference in PKCS#7 bundle with no certificates","family":"Other","component":"Mariner","cna":"libreswan","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77207"},{"cve":"CVE-2026-77214","month":"2026-10","title":"libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer","family":"Other","component":"Mariner","cna":"VulnCheck","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77214"},{"cve":"CVE-2026-78659","month":"2026-10","title":"HTTP/2 server memory exhaustion due to Trailer headers in net/http","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":["CWE-405"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78659"},{"cve":"CVE-2026-78660","month":"2026-10","title":"HTTP/2 transport accepts malformed framing-related headers in net/http","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78660"},{"cve":"CVE-2026-78663","month":"2026-10","title":"Double flow control refund on HTTP/2 server streams in net/http","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Critical","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cwe":["CWE-675"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78663"},{"cve":"CVE-2026-78669","month":"2026-10","title":"Excessive CPU consumption from repeated initial window changes in net/http","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-405"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78669"},{"cve":"CVE-2026-79768","month":"2026-10","title":"Apache HTTP Server: mod_userdir information disclosure","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-55"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-79768"},{"cve":"CVE-2026-82458","month":"2026-10","title":"Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes available","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82458"},{"cve":"CVE-2026-82459","month":"2026-10","title":"Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82459"},{"cve":"CVE-2026-83632","month":"2026-10","title":"Apache Thrift: C++ THttpTransport grows its line buffer without bound","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Critical","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83632"},{"cve":"CVE-2026-83663","month":"2026-10","title":"Apache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go)","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83663"},{"cve":"CVE-2026-83745","month":"2026-10","title":"Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D)","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83745"},{"cve":"CVE-2026-85086","month":"2026-10","title":"Apache Thrift: Perl TLS client disables certificate verification by default","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85086"},{"cve":"CVE-2026-85087","month":"2026-10","title":"Apache Thrift: Python \u22653.12 host-name check silently becomes a no-op","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85087"},{"cve":"CVE-2026-85088","month":"2026-10","title":"Apache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries are present but do not match","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85088"},{"cve":"CVE-2026-85476","month":"2026-10","title":"Apache Thrift: c_glib `read_all` spins when the underlying read returns 0","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85476"},{"cve":"CVE-2026-85483","month":"2026-10","title":"Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85483"},{"cve":"CVE-2026-85493","month":"2026-10","title":"Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME)","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85493"},{"cve":"CVE-2026-85494","month":"2026-10","title":"Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a peer-declared length without a limit (multi-language)","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-130"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85494"},{"cve":"CVE-2026-86535","month":"2026-10","title":"Apache Thrift: A JSON member name can stall the Node server's event loop indefinitely","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86535"},{"cve":"CVE-2026-86536","month":"2026-10","title":"Apache Thrift, Apache Thrift, Apache Thrift: A map key from the wire can replace a decoded object's prototype in generated JavaScript","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-1321"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86536"},{"cve":"CVE-2026-86537","month":"2026-10","title":"Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-248"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-86537"},{"cve":"CVE-2026-87117","month":"2026-10","title":"Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87117"},{"cve":"CVE-2026-88647","month":"2026-10","title":"A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-297"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88647"},{"cve":"CVE-2026-88648","month":"2026-10","title":"Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Moderate","cvss":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88648"},{"cve":"CVE-2026-89091","month":"2026-10","title":"Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89091"},{"cve":"CVE-2026-90440","month":"2026-10","title":"Apache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthenticated remote attacker to deny service","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-248"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90440"},{"cve":"CVE-2026-91135","month":"2026-10","title":"Apache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction)","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91135"},{"cve":"CVE-2026-91137","month":"2026-10","title":"Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-91137"},{"cve":"CVE-2026-92542","month":"2026-10","title":"Blind VXLAN injection into encrypted overlay networks from cluster peer","family":"Other","component":"Mariner","cna":"Docker","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-290"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92542"},{"cve":"CVE-2026-92543","month":"2026-10","title":"Docker Engine insecure-registry fallback via malicious DNS responses","family":"Other","component":"Mariner","cna":"Docker","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92543"},{"cve":"CVE-2026-92834","month":"2026-10","title":"Apache Thrift: C++ WebSocket server transport does not read a full request length","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92834"},{"cve":"CVE-2026-93318","month":"2026-10","title":"Cache poisoning via unvalidated image layer DiffIDs","family":"Other","component":"Mariner","cna":"Docker","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-354"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93318"},{"cve":"CVE-2026-93319","month":"2026-10","title":"A malicious frontend can cause a daemon panic","family":"Other","component":"Mariner","cna":"Docker","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-567"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93319"},{"cve":"CVE-2026-93320","month":"2026-10","title":"BuildKit improperly handles special files in build snapshots","family":"Other","component":"Mariner","cna":"Docker","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-441"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93320"},{"cve":"CVE-2026-93321","month":"2026-10","title":"Malformed LLB file operation can crash buildkitd","family":"Other","component":"Mariner","cna":"Docker","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-129"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93321"},{"cve":"CVE-2026-93322","month":"2026-10","title":"Malformed MergeOp can crash the BuildKit daemon","family":"Other","component":"Mariner","cna":"Docker","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-129"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93322"},{"cve":"CVE-2026-93323","month":"2026-10","title":"Oversized Dockerfile or .dockerignore can exhaust buildkitd memory","family":"Other","component":"Mariner","cna":"Docker","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93323"},{"cve":"CVE-2026-93326","month":"2026-10","title":"Crafted Git build source can bypass certain policy validation","family":"Other","component":"Mariner","cna":"Docker","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-180"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93326"},{"cve":"CVE-2026-93546","month":"2026-10","title":"Apache HTTP Server: mod_dav_fs namespace overflow","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93546"},{"cve":"CVE-2026-93925","month":"2026-10","title":"Apache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93925"},{"cve":"CVE-2026-93926","month":"2026-10","title":"Apache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93926"},{"cve":"CVE-2026-94440","month":"2026-10","title":"Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94440"},{"cve":"CVE-2026-94444","month":"2026-10","title":"Checksum bypass for golang.org/fips140 in cmd/go","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94444"},{"cve":"CVE-2026-94447","month":"2026-10","title":"Checksum database bypass for golang.org/toolchain in cmd/go","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94447"},{"cve":"CVE-2026-94448","month":"2026-10","title":"Reset context tracking on consecutive template expressions in html/template","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94448"},{"cve":"CVE-2026-94453","month":"2026-10","title":"IKEv2 Use-After-Free bug when using IKE-over-TCP","family":"Other","component":"Mariner","cna":"libreswan","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94453"},{"cve":"CVE-2026-94633","month":"2026-10","title":"Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94633"},{"cve":"CVE-2026-94634","month":"2026-10","title":"Apache Thrift: Python `TJSONProtocol` has a string length limit that is off by default","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94634"},{"cve":"CVE-2026-94635","month":"2026-10","title":"Apache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94635"},{"cve":"CVE-2026-94636","month":"2026-10","title":"Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-409"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94636"},{"cve":"CVE-2026-94637","month":"2026-10","title":"Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-409"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94637"},{"cve":"CVE-2026-94638","month":"2026-10","title":"Apache Thrift: PHP `thrift_protocol` C extension ignores the configured `maxStringSize`","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94638"},{"cve":"CVE-2026-94639","month":"2026-10","title":"Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget)","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-755"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94639"},{"cve":"CVE-2026-94642","month":"2026-10","title":"Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-248"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94642"},{"cve":"CVE-2026-94644","month":"2026-10","title":"Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94644"},{"cve":"CVE-2026-94645","month":"2026-10","title":"Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-1284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94645"},{"cve":"CVE-2026-94646","month":"2026-10","title":"Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers)","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-248"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94646"},{"cve":"CVE-2026-94648","month":"2026-10","title":"Apache Thrift: dart `TJsonProtocol`/`TJSONProtocol` has no string size bound","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94648"},{"cve":"CVE-2026-94650","month":"2026-10","title":"Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion)","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94650"},{"cve":"CVE-2026-94651","month":"2026-10","title":"Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-755"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94651"},{"cve":"CVE-2026-94652","month":"2026-10","title":"Apache Thrift: C++ `TEvhttpServer` leaks its `RequestContext` when the processor throws before calling back","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Low","cvss":null,"vector":null,"cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94652"},{"cve":"CVE-2026-94653","month":"2026-10","title":"Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic)","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94653"},{"cve":"CVE-2026-94654","month":"2026-10","title":"Apache Thrift: Python `TNonblockingServer` busy-loops and stops selecting all fds after an 8192-byte-boundary frame","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-835"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94654"},{"cve":"CVE-2026-94655","month":"2026-10","title":"Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94655"},{"cve":"CVE-2026-94656","month":"2026-10","title":"Apache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size bound","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94656"},{"cve":"CVE-2026-94657","month":"2026-10","title":"Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94657"},{"cve":"CVE-2026-94658","month":"2026-10","title":"Apache Thrift: Lua `TFramedTransport`/`THttpTransport` re-slice the buffer on every read (quadratic)","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94658"},{"cve":"CVE-2026-95184","month":"2026-10","title":"Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service (DoS).","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95184"},{"cve":"CVE-2026-95209","month":"2026-10","title":"An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS).","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95209"},{"cve":"CVE-2026-95210","month":"2026-10","title":"Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions.","family":"Other","component":"Mariner","cna":"mitre","label":"(none)","labels":[],"severity":"Low","cvss":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95210"},{"cve":"CVE-2026-95512","month":"2026-10","title":"Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader","family":"Other","component":"Mariner","cna":"redhat","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95512"},{"cve":"CVE-2026-95838","month":"2026-10","title":"containerd: Unpack DoS via repeated opaque whiteouts","family":"Other","component":"Mariner","cna":"GitHub_M","label":"(none)","labels":[],"severity":"Moderate","cvss":null,"vector":null,"cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95838"},{"cve":"CVE-2026-96277","month":"2026-10","title":"Apache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exception","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-248"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96277"},{"cve":"CVE-2026-96286","month":"2026-10","title":"Apache Thrift: Perl servers end `serve()` when serving one connection fails","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-248"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96286"},{"cve":"CVE-2026-96287","month":"2026-10","title":"Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic)","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96287"},{"cve":"CVE-2026-96288","month":"2026-10","title":"Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory)","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96288"},{"cve":"CVE-2026-96289","month":"2026-10","title":"Apache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96289"},{"cve":"CVE-2026-96292","month":"2026-10","title":"Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic)","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-1333"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96292"},{"cve":"CVE-2026-96294","month":"2026-10","title":"Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-248"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96294"},{"cve":"CVE-2026-96990","month":"2026-10","title":"Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound","family":"Other","component":"Mariner","cna":"apache","label":"(none)","labels":[],"severity":"Important","cvss":null,"vector":null,"cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96990"},{"cve":"CVE-2026-97031","month":"2026-10","title":"Reject malformed ECH outer extension references in crypto/tls","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-405"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97031"},{"cve":"CVE-2026-97032","month":"2026-10","title":"HTTP/2 server crash due to HPACK encoder race in net/http","family":"Other","component":"Mariner","cna":"Go","label":"(none)","labels":[],"severity":"Moderate","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97032"},{"cve":"CVE-2026-98167","month":"2026-10","title":"smb: client: fix server->total_read for compound encrypted PDUs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98167"},{"cve":"CVE-2026-98168","month":"2026-10","title":"smb: client: fix reparse buffer bounds in cifs_query_reparse_point()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98168"},{"cve":"CVE-2026-98169","month":"2026-10","title":"smb: client: fix potential OOB read in smb3_enum_snapshots()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98169"},{"cve":"CVE-2026-98170","month":"2026-10","title":"smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98170"},{"cve":"CVE-2026-98171","month":"2026-10","title":"smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98171"},{"cve":"CVE-2026-98172","month":"2026-10","title":"smb: client: fix smbd_connection leak on cifs_get_tcp_session() error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98172"},{"cve":"CVE-2026-98173","month":"2026-10","title":"smb: client: fix use-after-free of iface in cifs_try_adding_channels()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98173"},{"cve":"CVE-2026-98174","month":"2026-10","title":"smb: client: fix rlist race and missing initialization","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98174"},{"cve":"CVE-2026-98175","month":"2026-10","title":"smb: client: cancel reconnect work in clean_demultiplex_info()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98175"},{"cve":"CVE-2026-98176","month":"2026-10","title":"drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98176"},{"cve":"CVE-2026-98177","month":"2026-10","title":"drm/amdkfd: Avoid integer underflow in EOP ring size calculation.","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98177"},{"cve":"CVE-2026-98179","month":"2026-10","title":"drm/amdgpu: fix rmmio iounmap skipped on device removal","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98179"},{"cve":"CVE-2026-98180","month":"2026-10","title":"drm/msm: RCU-free the scheduler-containing ring and VM objects","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98180"},{"cve":"CVE-2026-98181","month":"2026-10","title":"drm/gud: fix out-of-bounds write in gud_plane_atomic_check()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98181"},{"cve":"CVE-2026-98182","month":"2026-10","title":"wifi: mac80211: refuse to make a monitor active when it has no queue","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98182"},{"cve":"CVE-2026-98185","month":"2026-10","title":"wifi: mwifiex: validate scan response extents","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98185"},{"cve":"CVE-2026-98186","month":"2026-10","title":"wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98186"},{"cve":"CVE-2026-98187","month":"2026-10","title":"wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98187"},{"cve":"CVE-2026-98188","month":"2026-10","title":"wifi: p54: validate curve data length in the calibration curve converters","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98188"},{"cve":"CVE-2026-98189","month":"2026-10","title":"wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98189"},{"cve":"CVE-2026-98190","month":"2026-10","title":"wifi: wilc1000: fix out-of-bounds read in P2P public action frames","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98190"},{"cve":"CVE-2026-98191","month":"2026-10","title":"wifi: wlcore: release runtime PM ref on regdomain config failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98191"},{"cve":"CVE-2026-98192","month":"2026-10","title":"wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98192"},{"cve":"CVE-2026-98193","month":"2026-10","title":"wifi: libipw: reject TKIP frames without a full MIC","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98193"},{"cve":"CVE-2026-98194","month":"2026-10","title":"wifi: libertas_tf: fix UAF in lbtf_free_adapter()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98194"},{"cve":"CVE-2026-98195","month":"2026-10","title":"wifi: iwlegacy: fix broadcast stations deallocation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98195"},{"cve":"CVE-2026-98197","month":"2026-10","title":"hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98197"},{"cve":"CVE-2026-98198","month":"2026-10","title":"hwmon: (pwm-fan) Stop RPM timer before freeing tach data","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98198"},{"cve":"CVE-2026-98199","month":"2026-10","title":"hwmon: (pmbus/core) increase number of phases and add new mask","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98199"},{"cve":"CVE-2026-98200","month":"2026-10","title":"hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98200"},{"cve":"CVE-2026-98201","month":"2026-10","title":"Input: zero ff_effect before compat copy in input_ff_effect_from_user","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98201"},{"cve":"CVE-2026-98202","month":"2026-10","title":"Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98202"},{"cve":"CVE-2026-98203","month":"2026-10","title":"Input: soc_button_array - check btns_desc->package.count","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98203"},{"cve":"CVE-2026-98204","month":"2026-10","title":"Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98204"},{"cve":"CVE-2026-98205","month":"2026-10","title":"Input: evdev - zero absinfo before partial copy in EVIOCSABS","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98205"},{"cve":"CVE-2026-98206","month":"2026-10","title":"Input: cyttsp5 - clamp the HID report size before memcpy","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98206"},{"cve":"CVE-2026-98207","month":"2026-10","title":"mmc: spi: reset bytes_xfered before retrying CRC failures","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98207"},{"cve":"CVE-2026-98208","month":"2026-10","title":"mmc: sdio_uart: fix xmit_fifo leak when the port table is full","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98208"},{"cve":"CVE-2026-98209","month":"2026-10","title":"mmc: sdhci-of-aspeed: Remove children before releasing SDC resources","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98209"},{"cve":"CVE-2026-98210","month":"2026-10","title":"mmc: mxcmmc: cancel data work and watchdog on remove","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98210"},{"cve":"CVE-2026-98211","month":"2026-10","title":"mmc: mmci: Fix use-after-free in busy-timeout work","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98211"},{"cve":"CVE-2026-98212","month":"2026-10","title":"mmc: hsq: Fix use-after-free in retry work","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98212"},{"cve":"CVE-2026-98213","month":"2026-10","title":"mmc: core: Cancel SDIO IRQ work before freeing host","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98213"},{"cve":"CVE-2026-98214","month":"2026-10","title":"selinux: recheck intermediate backing files on mprotect()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98214"},{"cve":"CVE-2026-98215","month":"2026-10","title":"selinux: preserve user SID across nested backing files","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98215"},{"cve":"CVE-2026-98216","month":"2026-10","title":"IB/hfi1: Fix the PIO_CRED credit-return mmap","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98216"},{"cve":"CVE-2026-98217","month":"2026-10","title":"IB/mlx4: Fix use-after-free on pkey sysfs registration failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98217"},{"cve":"CVE-2026-98218","month":"2026-10","title":"i2c: atr: fix dangling adapter pointer on add failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98218"},{"cve":"CVE-2026-98221","month":"2026-10","title":"KEYS: trusted: Fix tpm2_load_cmd() boundary check","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98221"},{"cve":"CVE-2026-98222","month":"2026-10","title":"KEYS: encrypted: fix integer overflow of datablob_len","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98222"},{"cve":"CVE-2026-98227","month":"2026-10","title":"memstick: ms_block: destroy io_queue workqueue on removal","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98227"},{"cve":"CVE-2026-98229","month":"2026-10","title":"xfrm: save input state data before secpath resets","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98229"},{"cve":"CVE-2026-98231","month":"2026-10","title":"xfrm: serialize state GC with device state flush","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98231"},{"cve":"CVE-2026-98232","month":"2026-10","title":"scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98232"},{"cve":"CVE-2026-98233","month":"2026-10","title":"net/packet: clear RX owner on VNET header error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98233"},{"cve":"CVE-2026-98234","month":"2026-10","title":"net/sched: hhf: cap hh_flows_limit at change time","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98234"},{"cve":"CVE-2026-98236","month":"2026-10","title":"net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98236"},{"cve":"CVE-2026-98237","month":"2026-10","title":"net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98237"},{"cve":"CVE-2026-98238","month":"2026-10","title":"net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98238"},{"cve":"CVE-2026-98239","month":"2026-10","title":"net: lan743x: fix RX checksum use-after-free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98239"},{"cve":"CVE-2026-98241","month":"2026-10","title":"ipv6: xfrm: use full sockets in local error paths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98241"},{"cve":"CVE-2026-98245","month":"2026-10","title":"btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98245"},{"cve":"CVE-2026-98246","month":"2026-10","title":"Bluetooth: hci_sync: Serialize local codec list cleanup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98246"},{"cve":"CVE-2026-98247","month":"2026-10","title":"Bluetooth: hci_codec: validate vendor codec count length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98247"},{"cve":"CVE-2026-98248","month":"2026-10","title":"arm64: percpu: Fix LSE operations on {8,16}-bit types","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98248"},{"cve":"CVE-2026-98249","month":"2026-10","title":"arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98249"},{"cve":"CVE-2026-98251","month":"2026-10","title":"openvswitch: avoid reallocating confirmed conntrack labels","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98251"},{"cve":"CVE-2026-98252","month":"2026-10","title":"RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98252"},{"cve":"CVE-2026-98253","month":"2026-10","title":"RDMA/ucma: Serialize join and leave on copy_to_user failure","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98253"},{"cve":"CVE-2026-98254","month":"2026-10","title":"swiotlb: use the adjusted address for the highmem page lookup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98254"},{"cve":"CVE-2026-98255","month":"2026-10","title":"tcp: exclude old ACKs from tcp fast path","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98255"},{"cve":"CVE-2026-98257","month":"2026-10","title":"rds: ib: use rds_conn_drop() on protocol version mismatch","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98257"},{"cve":"CVE-2026-98260","month":"2026-10","title":"exec: Cleanup POSIX timers right after de_thread()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98260"},{"cve":"CVE-2026-98261","month":"2026-10","title":"cifs: Fix server use-after-free in cifs_chan_skip_or_disable()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98261"},{"cve":"CVE-2026-98262","month":"2026-10","title":"ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98262"},{"cve":"CVE-2026-98263","month":"2026-10","title":"ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98263"},{"cve":"CVE-2026-98264","month":"2026-10","title":"ALSA: virtio: reset device before deleting virtqueues","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98264"},{"cve":"CVE-2026-98265","month":"2026-10","title":"ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98265"},{"cve":"CVE-2026-98266","month":"2026-10","title":"ALSA: core: Fix potential UAF after asynchronous card release","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98266"},{"cve":"CVE-2026-98269","month":"2026-10","title":"btrfs: abort transaction on failure to update inode for hole punching and reflinking","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98269"},{"cve":"CVE-2026-98270","month":"2026-10","title":"drm/amdgpu: check ras and obj before dereference","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98270"},{"cve":"CVE-2026-98271","month":"2026-10","title":"net: skbuff: do not leave stale header offsets after pskb_carve()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98271"},{"cve":"CVE-2026-98272","month":"2026-10","title":"net: mvpp2: prevent buffer overflow in page_pool allocation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98272"},{"cve":"CVE-2026-98273","month":"2026-10","title":"x86/kprobes: Fix crash when probing CS CALL instructions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98273"},{"cve":"CVE-2026-98275","month":"2026-10","title":"net: ethernet: cortina: Ack RX overrun interrupt correctly","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98275"},{"cve":"CVE-2026-98276","month":"2026-10","title":"net: lock the socket in sock_gettstamp()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98276"},{"cve":"CVE-2026-98279","month":"2026-10","title":"btrfs: handle lack of space when cleaning up verity items","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98279"},{"cve":"CVE-2026-98282","month":"2026-10","title":"powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98282"},{"cve":"CVE-2026-98283","month":"2026-10","title":"KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98283"},{"cve":"CVE-2026-98284","month":"2026-10","title":"netlink: do not free nlk->groups while lockless readers can use it","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98284"},{"cve":"CVE-2026-98285","month":"2026-10","title":"net: bridge: vlan: fix bugs caused by switchdev deletion errors","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98285"},{"cve":"CVE-2026-98286","month":"2026-10","title":"drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98286"},{"cve":"CVE-2026-98287","month":"2026-10","title":"pppoatm: ensure a writable skb header and linear data","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98287"},{"cve":"CVE-2026-98288","month":"2026-10","title":"net: stmmac: fix TSO header length truncation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98288"},{"cve":"CVE-2026-98289","month":"2026-10","title":"af_unix: Unify scc_index when finalising SCC in __unix_walk_scc().","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98289"},{"cve":"CVE-2026-98290","month":"2026-10","title":"Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98290"},{"cve":"CVE-2026-98292","month":"2026-10","title":"Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98292"},{"cve":"CVE-2026-98293","month":"2026-10","title":"Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98293"},{"cve":"CVE-2026-98294","month":"2026-10","title":"Bluetooth: hci_qca: Do not write to the serial port after it is closed","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98294"},{"cve":"CVE-2026-98295","month":"2026-10","title":"Bluetooth: coredump: Quiesce dump work on unregister","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98295"},{"cve":"CVE-2026-98298","month":"2026-10","title":"dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98298"},{"cve":"CVE-2026-98299","month":"2026-10","title":"tcp: do not let tcp_rmem be set below 4096","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98299"},{"cve":"CVE-2026-98300","month":"2026-10","title":"tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv().","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98300"},{"cve":"CVE-2026-98301","month":"2026-10","title":"net: bridge: mst: move switchdev call outside rcu","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98301"},{"cve":"CVE-2026-98302","month":"2026-10","title":"net: fddi: skfp: fix NULL deref when setting the MAC address while down","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98302"},{"cve":"CVE-2026-98303","month":"2026-10","title":"ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98303"},{"cve":"CVE-2026-98304","month":"2026-10","title":"net: bcmgenet: restore the hardware filters on open","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98304"},{"cve":"CVE-2026-98306","month":"2026-10","title":"seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98306"},{"cve":"CVE-2026-98307","month":"2026-10","title":"wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98307"},{"cve":"CVE-2026-98308","month":"2026-10","title":"ALSA: hda: trace PCM open only after assigning a stream","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98308"},{"cve":"CVE-2026-98309","month":"2026-10","title":"drm/vc4: Use managed KMS polling to fix UAF on unbind","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98309"},{"cve":"CVE-2026-98311","month":"2026-10","title":"wifi: virt_wifi: don't transfer operstate before register","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98311"},{"cve":"CVE-2026-98312","month":"2026-10","title":"ALSA: 6fire: fix OOB write from device-reported iso length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98312"},{"cve":"CVE-2026-98314","month":"2026-10","title":"ALSA: pcm: set timer->private_data before registering the PCM timer","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98314"},{"cve":"CVE-2026-98316","month":"2026-10","title":"ALSA: bcd2000: Fix race between rawmidi and disconnect","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98316"},{"cve":"CVE-2026-98317","month":"2026-10","title":"neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS.","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98317"},{"cve":"CVE-2026-98319","month":"2026-10","title":"drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98319"},{"cve":"CVE-2026-98320","month":"2026-10","title":"netfilter: flowtable: hold reference on ct until flow is released","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98320"},{"cve":"CVE-2026-98321","month":"2026-10","title":"netfilter: nf_nat: unregister and release hooks on error","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98321"},{"cve":"CVE-2026-98322","month":"2026-10","title":"netfilter: nft_nat: fully initialise new_addr in netmap setup","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98322"},{"cve":"CVE-2026-98323","month":"2026-10","title":"RDMA/siw: Bound fragmented header copies by the remaining length","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98323"},{"cve":"CVE-2026-98325","month":"2026-10","title":"wifi: mac80211: set up the TX info early to fix failure paths","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98325"},{"cve":"CVE-2026-98326","month":"2026-10","title":"wifi: mac80211: mesh: release the channel if start fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98326"},{"cve":"CVE-2026-98327","month":"2026-10","title":"wifi: mac80211: mesh: reset the CSA state when leaving","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98327"},{"cve":"CVE-2026-98328","month":"2026-10","title":"wifi: mac80211: add HE 6 GHz capability in the scan elems len","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98328"},{"cve":"CVE-2026-98329","month":"2026-10","title":"wifi: mac80211: don't allow injecting frames wider than the chanctx","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98329"},{"cve":"CVE-2026-98330","month":"2026-10","title":"wifi: cfg80211: get the wiphy out of a dying network namespace","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98330"},{"cve":"CVE-2026-98331","month":"2026-10","title":"wifi: mac80211: unlist vifs when their netdev is unregistered","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98331"},{"cve":"CVE-2026-98332","month":"2026-10","title":"wifi: mac80211: only operate on TDLS peers in the TDLS code","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98332"},{"cve":"CVE-2026-98333","month":"2026-10","title":"wifi: mac80211: reset the LED state when ifup fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98333"},{"cve":"CVE-2026-98334","month":"2026-10","title":"wifi: mac80211: reset state when starting AP fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98334"},{"cve":"CVE-2026-98335","month":"2026-10","title":"wifi: mac80211: abort chanswitch when leaving a mesh","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98335"},{"cve":"CVE-2026-98336","month":"2026-10","title":"wifi: mac80211: don't offload TC setup on AP_VLAN interfaces","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98336"},{"cve":"CVE-2026-98337","month":"2026-10","title":"wifi: mac80211: don't start a ROC while scanning","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98337"},{"cve":"CVE-2026-98338","month":"2026-10","title":"wifi: cfg80211: ibss: ref BSS entry for joined event","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98338"},{"cve":"CVE-2026-98339","month":"2026-10","title":"wifi: cfg80211: don't filter by BSS type when removing stale entries","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98339"},{"cve":"CVE-2026-98340","month":"2026-10","title":"wifi: cfg80211: only group hidden BSSes with beacon entries","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98340"},{"cve":"CVE-2026-98341","month":"2026-10","title":"wifi: cfg80211: don't free driver-owned scan requests","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98341"},{"cve":"CVE-2026-98342","month":"2026-10","title":"dmaengine: wait for RCU readers before releasing dma_device","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98342"},{"cve":"CVE-2026-98343","month":"2026-10","title":"dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98343"},{"cve":"CVE-2026-98344","month":"2026-10","title":"dmaengine: Fix device kref underflow in dma_chan_put()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98344"},{"cve":"CVE-2026-98345","month":"2026-10","title":"wifi: cfg80211: check IP header size in cfg80211_classify8021d()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98345"},{"cve":"CVE-2026-98347","month":"2026-10","title":"IB/IPoIB: Avoid restoring OPER_UP after multicast flush","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98347"},{"cve":"CVE-2026-98348","month":"2026-10","title":"wifi: libipw: reject too-short association responses","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98348"},{"cve":"CVE-2026-98349","month":"2026-10","title":"wifi: libipw: reject too-short beacon and probe responses","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98349"},{"cve":"CVE-2026-98351","month":"2026-10","title":"wifi: virt_wifi: free skb when disconnected","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98351"},{"cve":"CVE-2026-98352","month":"2026-10","title":"RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98352"},{"cve":"CVE-2026-98353","month":"2026-10","title":"RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98353"},{"cve":"CVE-2026-98354","month":"2026-10","title":"RDMA/mad: Fix receive buffer leak when PKey enforcement fails","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98354"},{"cve":"CVE-2026-98355","month":"2026-10","title":"RDMA/rtrs: guard against null kobj name","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98355"},{"cve":"CVE-2026-98357","month":"2026-10","title":"IB/isert: wait for deferred control PDU completions before releasing the connection","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98357"},{"cve":"CVE-2026-98358","month":"2026-10","title":"IB/iser: reject a remote invalidation of an unregistered direction","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98358"},{"cve":"CVE-2026-98359","month":"2026-10","title":"RDMA/core: Reject unregistering netdevs in ib_get_eth_speed","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98359"},{"cve":"CVE-2026-98360","month":"2026-10","title":"RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98360"},{"cve":"CVE-2026-98362","month":"2026-10","title":"clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98362"},{"cve":"CVE-2026-98363","month":"2026-10","title":"firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98363"},{"cve":"CVE-2026-98364","month":"2026-10","title":"xfrm: hold net_device reference under RCU in bundle creation","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98364"},{"cve":"CVE-2026-98365","month":"2026-10","title":"RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98365"},{"cve":"CVE-2026-98366","month":"2026-10","title":"RDMA/rxe: validate access flags before swapping the MR's PD","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98366"},{"cve":"CVE-2026-98367","month":"2026-10","title":"RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98367"},{"cve":"CVE-2026-98368","month":"2026-10","title":"esp: downgrade zerocopy managed frags before mutating skb frags","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98368"},{"cve":"CVE-2026-98369","month":"2026-10","title":"xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98369"},{"cve":"CVE-2026-98370","month":"2026-10","title":"xfrm: fix compat ALLOCSPI request use-after-free","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98370"},{"cve":"CVE-2026-98374","month":"2026-10","title":"tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98374"},{"cve":"CVE-2026-98377","month":"2026-10","title":"vlan: require the MAC header to be present in __vlan_insert_inner_tag()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98377"},{"cve":"CVE-2026-98378","month":"2026-10","title":"bpf: Skip unsettled links in link iterator","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98378"},{"cve":"CVE-2026-98379","month":"2026-10","title":"netfilter: ip6t_rpfilter: reject routes without inet6_dev","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98379"},{"cve":"CVE-2026-98380","month":"2026-10","title":"net/sched: reject IDR error pointers when deleting actions","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98380"},{"cve":"CVE-2026-98381","month":"2026-10","title":"veth: manage XDP program pointers during channel resize","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98381"},{"cve":"CVE-2026-98382","month":"2026-10","title":"bpf: Reject dev-bound-only programs on other devices","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Moderate","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98382"},{"cve":"CVE-2026-98383","month":"2026-10","title":"bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98383"},{"cve":"CVE-2026-98384","month":"2026-10","title":"bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()","family":"Other","component":"Mariner","cna":"Linux","label":"(none)","labels":[],"severity":"Low","cvss":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98384"},{"cve":"ADV260001","month":"2026-10","title":"ADV260001 Hardening changes for ReFS volumes on removable media","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Not a Vulnerability","labels":["Not a Vulnerability"],"severity":"(none)","cvss":null,"vector":null,"cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"no_cvss","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/ADV260001"},{"cve":"CVE-2026-100200","month":"2026-10","title":"Windows Update Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100200"},{"cve":"CVE-2026-100201","month":"2026-10","title":"Windows Client License Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Client License Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100201"},{"cve":"CVE-2026-100202","month":"2026-10","title":"Windows Message Queuing Queue Manager Remote Code Execution Vulnerability","family":"Windows","component":"Windows Message Queuing Queue Manager","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100202"},{"cve":"CVE-2026-100203","month":"2026-10","title":"Windows Update Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100203"},{"cve":"CVE-2026-100205","month":"2026-10","title":"SysInternals Elevation of Privilege Vulnerability","family":"Developer Tools","component":"SysInternals","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100205"},{"cve":"CVE-2026-100207","month":"2026-10","title":"Azure CycleCloud Remote Code Execution Vulnerability","family":"Azure","component":"Azure CycleCloud","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-78"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100207"},{"cve":"CVE-2026-100209","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100209"},{"cve":"CVE-2026-100210","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100210"},{"cve":"CVE-2026-100211","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100211"},{"cve":"CVE-2026-100212","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100212"},{"cve":"CVE-2026-100214","month":"2026-10","title":"Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability","family":"Microsoft Dynamics","component":"Dynamics Business Central","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100214"},{"cve":"CVE-2026-100215","month":"2026-10","title":"Microsoft Graphics Component Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100215"},{"cve":"CVE-2026-100216","month":"2026-10","title":"Windows Storage Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100216"},{"cve":"CVE-2026-100217","month":"2026-10","title":"Windows Group Policy Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Group Policy","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100217"},{"cve":"CVE-2026-100218","month":"2026-10","title":"Remote Desktop Gateway Service Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Gateway Service","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100218"},{"cve":"CVE-2026-100219","month":"2026-10","title":"Microsoft QUIC Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft QUIC","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100219"},{"cve":"CVE-2026-100220","month":"2026-10","title":"Windows Media Video Decoder Remote Code Execution Vulnerability","family":"Windows","component":"Windows Media Video Decoder","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100220"},{"cve":"CVE-2026-100222","month":"2026-10","title":"Network Policy Server (NPS) Remote Code Execution Vulnerability","family":"Windows","component":"Network Policy Server (NPS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100222"},{"cve":"CVE-2026-100225","month":"2026-10","title":"Windows Storage Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100225"},{"cve":"CVE-2026-102186","month":"2026-10","title":"Windows Network File System Information Disclosure Vulnerability","family":"Windows","component":"Windows Network File System","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102186"},{"cve":"CVE-2026-102187","month":"2026-10","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102187"},{"cve":"CVE-2026-102188","month":"2026-10","title":"Windows Storage Port Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage Port Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102188"},{"cve":"CVE-2026-102189","month":"2026-10","title":"Windows Storage Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102189"},{"cve":"CVE-2026-102191","month":"2026-10","title":"Windows Storage Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102191"},{"cve":"CVE-2026-102192","month":"2026-10","title":"Windows Failover Cluster Denial of Service Vulnerability","family":"Windows","component":"Windows Failover Cluster","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102192"},{"cve":"CVE-2026-102193","month":"2026-10","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102193"},{"cve":"CVE-2026-102194","month":"2026-10","title":"Windows Graphics Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Graphics Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102194"},{"cve":"CVE-2026-102195","month":"2026-10","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102195"},{"cve":"CVE-2026-102196","month":"2026-10","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102196"},{"cve":"CVE-2026-102197","month":"2026-10","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102197"},{"cve":"CVE-2026-102198","month":"2026-10","title":"Windows Remote Desktop Protocol Information Disclosure Vulnerability","family":"Windows","component":"Windows Remote Desktop Protocol","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102198"},{"cve":"CVE-2026-102199","month":"2026-10","title":"Microsoft Windows Codecs Library Denial of Service Vulnerability","family":"Windows","component":"Microsoft Windows Codecs Library","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102199"},{"cve":"CVE-2026-102201","month":"2026-10","title":"Microsoft Windows Media Foundation Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102201"},{"cve":"CVE-2026-102202","month":"2026-10","title":"Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Container Isolation FS Filter Driver (unionfs.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102202"},{"cve":"CVE-2026-102203","month":"2026-10","title":"RPC Runtime Remote Code Execution Vulnerability","family":"Windows","component":"RPC Runtime","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102203"},{"cve":"CVE-2026-102204","month":"2026-10","title":"Microsoft Microsoft Defender for Endpoint Elevation of Privilege Vulnerability","family":"System Center","component":"Microsoft Defender for Endpoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102204"},{"cve":"CVE-2026-102205","month":"2026-10","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102205"},{"cve":"CVE-2026-102206","month":"2026-10","title":"Windows Portable Device MTP Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Portable Device MTP Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102206"},{"cve":"CVE-2026-102207","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102207"},{"cve":"CVE-2026-102208","month":"2026-10","title":"Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102208"},{"cve":"CVE-2026-102209","month":"2026-10","title":"Microsoft Graphics Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102209"},{"cve":"CVE-2026-102210","month":"2026-10","title":"Windows Text Shaping Remote Code Execution Vulnerability","family":"Windows","component":"Windows Text Shaping","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102210"},{"cve":"CVE-2026-102211","month":"2026-10","title":"Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Virtualization-Based Security (VBS) Enclave","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102211"},{"cve":"CVE-2026-102214","month":"2026-10","title":"Windows Hyper-V Remote Code Execution Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102214"},{"cve":"CVE-2026-102215","month":"2026-10","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102215"},{"cve":"CVE-2026-102216","month":"2026-10","title":"Windows StateRepository API Elevation of Privilege Vulnerability","family":"Windows","component":"Windows StateRepository API","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102216"},{"cve":"CVE-2026-102217","month":"2026-10","title":"WebDAV Elevation of Privilege Vulnerability","family":"Windows","component":"WebDAV","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-41"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102217"},{"cve":"CVE-2026-102218","month":"2026-10","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102218"},{"cve":"CVE-2026-102220","month":"2026-10","title":"Windows VHD miniport driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows VHD miniport driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102220"},{"cve":"CVE-2026-102221","month":"2026-10","title":"Secure Boot Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Secure Boot","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-299"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102221"},{"cve":"CVE-2026-102225","month":"2026-10","title":"Windows Text Shaping Remote Code Execution Vulnerability","family":"Windows","component":"Windows Text Shaping","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102225"},{"cve":"CVE-2026-102226","month":"2026-10","title":"Dynamics Business Central Elevation of Privilege Vulnerability","family":"Microsoft Dynamics","component":"Dynamics Business Central","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102226"},{"cve":"CVE-2026-102227","month":"2026-10","title":"Windows Resilient File System (ReFS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102227"},{"cve":"CVE-2026-102229","month":"2026-10","title":"Visual Studio Code Information Disclosure Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102229"},{"cve":"CVE-2026-102231","month":"2026-10","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-41"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102231"},{"cve":"CVE-2026-102232","month":"2026-10","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102232"},{"cve":"CVE-2026-102233","month":"2026-10","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102233"},{"cve":"CVE-2026-102234","month":"2026-10","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-807"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102234"},{"cve":"CVE-2026-102235","month":"2026-10","title":"Visual Studio Code Remote Code Execution Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-116"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102235"},{"cve":"CVE-2026-102238","month":"2026-10","title":"Visual Studio Code Remote Code Execution Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102238"},{"cve":"CVE-2026-102849","month":"2026-10","title":"Microsoft Office Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102849"},{"cve":"CVE-2026-102850","month":"2026-10","title":"Microsoft Office Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102850"},{"cve":"CVE-2026-102851","month":"2026-10","title":"Visual Studio Code Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-266"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102851"},{"cve":"CVE-2026-102855","month":"2026-10","title":"Microsoft Office Visio Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Visio","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102855"},{"cve":"CVE-2026-102856","month":"2026-10","title":"Microsoft Office Visio Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Visio","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102856"},{"cve":"CVE-2026-102857","month":"2026-10","title":"Microsoft Office Visio Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Visio","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-193"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102857"},{"cve":"CVE-2026-102858","month":"2026-10","title":"Microsoft Office OneNote Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office OneNote","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102858"},{"cve":"CVE-2026-102859","month":"2026-10","title":"Microsoft Office SharePoint Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102859"},{"cve":"CVE-2026-102860","month":"2026-10","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102860"},{"cve":"CVE-2026-102861","month":"2026-10","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102861"},{"cve":"CVE-2026-102862","month":"2026-10","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102862"},{"cve":"CVE-2026-102863","month":"2026-10","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102863"},{"cve":"CVE-2026-102864","month":"2026-10","title":"Microsoft Office SharePoint Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102864"},{"cve":"CVE-2026-102865","month":"2026-10","title":"Microsoft Office SharePoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102865"},{"cve":"CVE-2026-102866","month":"2026-10","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102866"},{"cve":"CVE-2026-102867","month":"2026-10","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service","Information Disclosure"],"severity":"Low","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102867"},{"cve":"CVE-2026-102869","month":"2026-10","title":".NET and Visual Studio Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET and Visual Studio","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102869"},{"cve":"CVE-2026-102870","month":"2026-10","title":"ASP.NET Core Remote Code Execution Vulnerability","family":"Other","component":"ASP.NET Core","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102870"},{"cve":"CVE-2026-103553","month":"2026-10","title":"Windows Partition Management Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Partition Management Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103553"},{"cve":"CVE-2026-103554","month":"2026-10","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103554"},{"cve":"CVE-2026-103555","month":"2026-10","title":"Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Virtual Hard Disk (VHD) Miniport Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103555"},{"cve":"CVE-2026-103558","month":"2026-10","title":"Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-833"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103558"},{"cve":"CVE-2026-103560","month":"2026-10","title":"Role: DNS Server Tampering Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103560"},{"cve":"CVE-2026-103565","month":"2026-10","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103565"},{"cve":"CVE-2026-103567","month":"2026-10","title":"Windows Broadcast DVR User Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103567"},{"cve":"CVE-2026-103568","month":"2026-10","title":"Windows Credential Providers Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Credential Providers","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103568"},{"cve":"CVE-2026-103569","month":"2026-10","title":"Windows IKE Extension Information Disclosure Vulnerability","family":"Windows","component":"Windows IKE Extension","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103569"},{"cve":"CVE-2026-103572","month":"2026-10","title":"Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability","family":"Developer Tools","component":"Visual Studio Tools for Applications and SQL Server Management Studio","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572"},{"cve":"CVE-2026-103575","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103575"},{"cve":"CVE-2026-103576","month":"2026-10","title":"Active Directory Federation Services (AD FS) Spoofing Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-601"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103576"},{"cve":"CVE-2026-103577","month":"2026-10","title":"Microsoft QUIC Security Feature Bypass Vulnerability","family":"Windows","component":"Microsoft QUIC","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H/E:U/RL:O/RC:C","cwe":["CWE-453"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103577"},{"cve":"CVE-2026-103578","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103578"},{"cve":"CVE-2026-105003","month":"2026-10","title":"HID Class Driver Elevation of Privilege Vulnerability","family":"Windows","component":"HID class driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105003"},{"cve":"CVE-2026-105004","month":"2026-10","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105004"},{"cve":"CVE-2026-105005","month":"2026-10","title":"Windows Schannel Remote Code Execution Vulnerability","family":"Windows","component":"Windows Schannel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105005"},{"cve":"CVE-2026-105006","month":"2026-10","title":"HID Class Driver Elevation of Privilege Vulnerability","family":"Windows","component":"HID class driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.4,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105006"},{"cve":"CVE-2026-105007","month":"2026-10","title":"Windows NDIS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NDIS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105007"},{"cve":"CVE-2026-105008","month":"2026-10","title":"Windows Schannel Spoofing Vulnerability","family":"Windows","component":"Windows Schannel","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":9.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105008"},{"cve":"CVE-2026-105009","month":"2026-10","title":"Windows Server Update Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Server Update Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-276"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105009"},{"cve":"CVE-2026-105010","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105010"},{"cve":"CVE-2026-105013","month":"2026-10","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105013"},{"cve":"CVE-2026-105016","month":"2026-10","title":"Microsoft QUIC Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft QUIC","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105016"},{"cve":"CVE-2026-105591","month":"2026-10","title":"Microsoft Office Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105591"},{"cve":"CVE-2026-105592","month":"2026-10","title":"Microsoft Office Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105592"},{"cve":"CVE-2026-105593","month":"2026-10","title":"Microsoft Office Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105593"},{"cve":"CVE-2026-105595","month":"2026-10","title":"Microsoft Office Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105595"},{"cve":"CVE-2026-105596","month":"2026-10","title":"Microsoft Office Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105596"},{"cve":"CVE-2026-105597","month":"2026-10","title":"Microsoft Office Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105597"},{"cve":"CVE-2026-105598","month":"2026-10","title":"Microsoft Office Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105598"},{"cve":"CVE-2026-105599","month":"2026-10","title":"Microsoft Office PowerPoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105599"},{"cve":"CVE-2026-105713","month":"2026-10","title":"Microsoft Office SharePoint Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105713"},{"cve":"CVE-2026-105714","month":"2026-10","title":"Microsoft Office Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105714"},{"cve":"CVE-2026-105715","month":"2026-10","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105715"},{"cve":"CVE-2026-105716","month":"2026-10","title":"Microsoft Office Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105716"},{"cve":"CVE-2026-105717","month":"2026-10","title":"Microsoft Office Access Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105717"},{"cve":"CVE-2026-105718","month":"2026-10","title":"Microsoft Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105718"},{"cve":"CVE-2026-105719","month":"2026-10","title":"Microsoft SharePoint Server Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105719"},{"cve":"CVE-2026-105720","month":"2026-10","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105720"},{"cve":"CVE-2026-105722","month":"2026-10","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105722"},{"cve":"CVE-2026-105723","month":"2026-10","title":"Windows Distributed File System (DFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Distributed File System (DFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105723"},{"cve":"CVE-2026-105725","month":"2026-10","title":"Windows Security App Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Security App","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105725"},{"cve":"CVE-2026-105726","month":"2026-10","title":"Microsoft Defender Information Disclosure Vulnerability","family":"System Center","component":"Microsoft Defender","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105726"},{"cve":"CVE-2026-105727","month":"2026-10","title":"Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability","family":"Microsoft Dynamics","component":"Dynamics Business Central","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105727"},{"cve":"CVE-2026-105728","month":"2026-10","title":"Dynamics Business Central Information Disclosure Vulnerability","family":"Microsoft Dynamics","component":"Dynamics Business Central","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105728"},{"cve":"CVE-2026-105729","month":"2026-10","title":"SysInternals Elevation of Privilege Vulnerability","family":"Developer Tools","component":"SysInternals","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105729"},{"cve":"CVE-2026-105731","month":"2026-10","title":"Microsoft Office Graphics Component Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105731"},{"cve":"CVE-2026-105732","month":"2026-10","title":"SysInternals Elevation of Privilege Vulnerability","family":"Developer Tools","component":"SysInternals","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105732"},{"cve":"CVE-2026-105733","month":"2026-10","title":"Windows Hyper-V Remote Code Execution Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1419"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105733"},{"cve":"CVE-2026-108127","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108127"},{"cve":"CVE-2026-108128","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108128"},{"cve":"CVE-2026-108129","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108129"},{"cve":"CVE-2026-108130","month":"2026-10","title":"Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Virtualization-Based Security (VBS) Enclave","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108130"},{"cve":"CVE-2026-108131","month":"2026-10","title":"Active Directory Federation Services (AD FS) Spoofing Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108131"},{"cve":"CVE-2026-108132","month":"2026-10","title":"Windows Kerberos Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108132"},{"cve":"CVE-2026-108133","month":"2026-10","title":"Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Modern Device Management (MDM)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-763"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108133"},{"cve":"CVE-2026-108134","month":"2026-10","title":"Windows Autopilot Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Autopilot","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108134"},{"cve":"CVE-2026-108135","month":"2026-10","title":"Windows Backup Engine Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Backup Engine","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108135"},{"cve":"CVE-2026-108136","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108136"},{"cve":"CVE-2026-108396","month":"2026-10","title":"Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Modern Device Management (MDM)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108396"},{"cve":"CVE-2026-108398","month":"2026-10","title":".NET Framework Security Feature Bypass Vulnerability","family":"Developer Tools","component":".NET Framework","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-426"],"exploited":false,"disclosed":true,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108398"},{"cve":"CVE-2026-108399","month":"2026-10","title":"Windows Hyper-V Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.2,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108399"},{"cve":"CVE-2026-108400","month":"2026-10","title":"HEVC Video Extensions Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Codecs Library","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108400"},{"cve":"CVE-2026-108457","month":"2026-10","title":"Microsoft Windows PDF Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows PDF","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108457"},{"cve":"CVE-2026-108458","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108458"},{"cve":"CVE-2026-108460","month":"2026-10","title":"Windows Message Queuing Remote Code Execution Vulnerability","family":"Windows","component":"Windows Message Queuing","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108460"},{"cve":"CVE-2026-108461","month":"2026-10","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108461"},{"cve":"CVE-2026-108462","month":"2026-10","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108462"},{"cve":"CVE-2026-108463","month":"2026-10","title":"Windows SmartScreen Security Feature Bypass Vulnerability","family":"Windows","component":"Windows SmartScreen","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-41"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108463"},{"cve":"CVE-2026-108464","month":"2026-10","title":"Software Protection Platform (SPP) Elevation of Privilege Vulnerability","family":"Windows","component":"Software Protection Platform (SPP)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108464"},{"cve":"CVE-2026-108465","month":"2026-10","title":"Windows Update Delivery Optimization Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update Delivery Optimization","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108465"},{"cve":"CVE-2026-108466","month":"2026-10","title":"Windows Kernel Denial of Service Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108466"},{"cve":"CVE-2026-108467","month":"2026-10","title":"Microsoft PostScript Printer Driver Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft PostScript Printer Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108467"},{"cve":"CVE-2026-108468","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108468"},{"cve":"CVE-2026-108471","month":"2026-10","title":"Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Virtualization-Based Security (VBS) Enclave","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108471"},{"cve":"CVE-2026-109453","month":"2026-10","title":"Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Virtual Hard Disk (VHD) Miniport Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109453"},{"cve":"CVE-2026-21413","month":"2026-10","title":"Raw Image Extension Remote Code Execution Vulnerability","family":"Windows","component":"Windows Raw Image Extension","cna":"Cisco Talos","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21413"},{"cve":"CVE-2026-49785","month":"2026-10","title":"UEFI Secure Boot Security Feature Bypass Vulnerability","family":"Windows","component":"Windows UEFI","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-404"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49785"},{"cve":"CVE-2026-58280","month":"2026-10","title":".NET Denial of Service Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-674"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58280"},{"cve":"CVE-2026-59116","month":"2026-10","title":"Windows Remote Desktop Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Remote Desktop","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-327"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59116"},{"cve":"CVE-2026-61931","month":"2026-10","title":"Windows Perception Simulation Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Perception Simulation Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61931"},{"cve":"CVE-2026-62687","month":"2026-10","title":"Windows Backup Engine Information Disclosure Vulnerability","family":"Windows","component":"Windows Backup Engine","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62687"},{"cve":"CVE-2026-62840","month":"2026-10","title":"Linux Kernel Elevation of Privilege Vulnerability","family":"Other","component":"Linux Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62840"},{"cve":"CVE-2026-62879","month":"2026-10","title":"Windows SmartScreen Tampering Vulnerability","family":"Windows","component":"Windows SmartScreen","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62879"},{"cve":"CVE-2026-65674","month":"2026-10","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65674"},{"cve":"CVE-2026-66822","month":"2026-10","title":".NET Information Disclosure Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-201"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66822"},{"cve":"CVE-2026-67625","month":"2026-10","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67625"},{"cve":"CVE-2026-67626","month":"2026-10","title":"Microsoft SQL Server Denial of Service Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67626"},{"cve":"CVE-2026-67628","month":"2026-10","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67628"},{"cve":"CVE-2026-68836","month":"2026-10","title":"Windows kernel32.dll Elevation of Privilege Vulnerability","family":"Windows","component":"Windows kernel32.dll","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68836"},{"cve":"CVE-2026-68883","month":"2026-10","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68883"},{"cve":"CVE-2026-69326","month":"2026-10","title":"Graphic Fonts Remote Code Execution Vulnerability","family":"Windows","component":"Graphic Fonts","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69326"},{"cve":"CVE-2026-69354","month":"2026-10","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69354"},{"cve":"CVE-2026-69363","month":"2026-10","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69363"},{"cve":"CVE-2026-69370","month":"2026-10","title":"Visual Studio Code Remote Code Execution Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69370"},{"cve":"CVE-2026-69387","month":"2026-10","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69387"},{"cve":"CVE-2026-69435","month":"2026-10","title":"Azure SRE Agent Elevation of Privilege Vulnerability","family":"Azure","component":"Azure SRE Agent","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69435"},{"cve":"CVE-2026-69452","month":"2026-10","title":"Windows Enterprise App Management Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Enterprise App Management","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69452"},{"cve":"CVE-2026-69454","month":"2026-10","title":"Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Azure Attestation service and Device Health Attestation Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69454"},{"cve":"CVE-2026-69471","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69471"},{"cve":"CVE-2026-69506","month":"2026-10","title":"Windows Key Storage Provider Information Disclosure Vulnerability","family":"Windows","component":"Windows Key Storage Provider","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69506"},{"cve":"CVE-2026-69521","month":"2026-10","title":"Windows iSCSI Remote Code Execution Vulnerability","family":"Windows","component":"Windows iSCSI","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69521"},{"cve":"CVE-2026-69577","month":"2026-10","title":"Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Azure Attestation service and Device Health Attestation Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69577"},{"cve":"CVE-2026-69596","month":"2026-10","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Program Compatibility Assistant Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69596"},{"cve":"CVE-2026-69633","month":"2026-10","title":"Windows Update Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69633"},{"cve":"CVE-2026-69634","month":"2026-10","title":"Windows iSCSI Remote Code Execution Vulnerability","family":"Windows","component":"Windows iSCSI","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69634"},{"cve":"CVE-2026-69635","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69635"},{"cve":"CVE-2026-69639","month":"2026-10","title":"Windows libarchive Remote Code Execution Vulnerability","family":"Windows","component":"Windows Libarchive","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69639"},{"cve":"CVE-2026-69640","month":"2026-10","title":"Windows Key Distribution Center Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Key Distribution Center","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69640"},{"cve":"CVE-2026-69644","month":"2026-10","title":"Windows iSCSI Information Disclosure Vulnerability","family":"Windows","component":"Windows iSCSI","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69644"},{"cve":"CVE-2026-69650","month":"2026-10","title":"Windows Key Distribution Center Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Key Distribution Center","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69650"},{"cve":"CVE-2026-69651","month":"2026-10","title":".NET Denial of Service Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69651"},{"cve":"CVE-2026-69673","month":"2026-10","title":"Windows Update Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69673"},{"cve":"CVE-2026-69675","month":"2026-10","title":"Windows Network File System Information Disclosure Vulnerability","family":"Windows","component":"Windows Network File System","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69675"},{"cve":"CVE-2026-69705","month":"2026-10","title":"Windows iSCSI Remote Code Execution Vulnerability","family":"Windows","component":"Windows iSCSI","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69705"},{"cve":"CVE-2026-69718","month":"2026-10","title":"Windows Update Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69718"},{"cve":"CVE-2026-69721","month":"2026-10","title":"Windows iSCSI Information Disclosure Vulnerability","family":"Windows","component":"Windows iSCSI","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69721"},{"cve":"CVE-2026-69733","month":"2026-10","title":"Windows Update Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69733"},{"cve":"CVE-2026-69736","month":"2026-10","title":"Windows Credential Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Credential Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69736"},{"cve":"CVE-2026-69743","month":"2026-10","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Program Compatibility Assistant Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69743"},{"cve":"CVE-2026-69763","month":"2026-10","title":"Windows Storage Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69763"},{"cve":"CVE-2026-69765","month":"2026-10","title":"Windows Storport Miniport Driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows Storport Miniport Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69765"},{"cve":"CVE-2026-69766","month":"2026-10","title":"Windows Storage Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69766"},{"cve":"CVE-2026-69783","month":"2026-10","title":"Windows Update Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-73"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69783"},{"cve":"CVE-2026-69789","month":"2026-10","title":"Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability","family":"Windows","component":"Reliable Multicast Transport Driver (RMCAST)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69789"},{"cve":"CVE-2026-69795","month":"2026-10","title":"Windows Clipboard Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Clipboard Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69795"},{"cve":"CVE-2026-69798","month":"2026-10","title":"Windows Wired AutoConfig Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Wired AutoConfig Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69798"},{"cve":"CVE-2026-69802","month":"2026-10","title":"Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability","family":"Windows","component":"Network Device Enrollment Service (NDES)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69802"},{"cve":"CVE-2026-69830","month":"2026-10","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69830"},{"cve":"CVE-2026-69840","month":"2026-10","title":"Windows Certificates Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Certificates","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69840"},{"cve":"CVE-2026-69850","month":"2026-10","title":"Windows Certificates Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Certificates","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69850"},{"cve":"CVE-2026-69856","month":"2026-10","title":"Windows Storage Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69856"},{"cve":"CVE-2026-69867","month":"2026-10","title":"SQLite Elevation of Privilege Vulnerability","family":"Windows","component":"SQLite","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69867"},{"cve":"CVE-2026-69877","month":"2026-10","title":"Azure DevOps Information Disclosure Vulnerability","family":"Azure","component":"Azure DevOps","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69877"},{"cve":"CVE-2026-69880","month":"2026-10","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69880"},{"cve":"CVE-2026-69882","month":"2026-10","title":"Windows Update Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69882"},{"cve":"CVE-2026-69883","month":"2026-10","title":"Windows iSCSI Remote Code Execution Vulnerability","family":"Windows","component":"Windows iSCSI","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69883"},{"cve":"CVE-2026-69884","month":"2026-10","title":"Windows GDI Elevation of Privilege Vulnerability","family":"Windows","component":"Windows GDI","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69884"},{"cve":"CVE-2026-69886","month":"2026-10","title":"Windows Imaging Component Remote Code Execution Vulnerability","family":"Windows","component":"Windows Imaging Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69886"},{"cve":"CVE-2026-69898","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69898"},{"cve":"CVE-2026-69902","month":"2026-10","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69902"},{"cve":"CVE-2026-69905","month":"2026-10","title":"Windows AppX Deployment Service Tampering Vulnerability","family":"Windows","component":"Windows AppX Deployment Service","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69905"},{"cve":"CVE-2026-69909","month":"2026-10","title":"Microsoft COM for Windows Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft COM for Windows","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69909"},{"cve":"CVE-2026-69913","month":"2026-10","title":"Windows TCP/IP Remote Code Execution Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69913"},{"cve":"CVE-2026-69914","month":"2026-10","title":"Windows AppX Deployment Service Information Disclosure Vulnerability","family":"Windows","component":"Windows AppX Deployment Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69914"},{"cve":"CVE-2026-69915","month":"2026-10","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69915"},{"cve":"CVE-2026-69916","month":"2026-10","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69916"},{"cve":"CVE-2026-69918","month":"2026-10","title":"Windows Core Messaging Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Core Messaging","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69918"},{"cve":"CVE-2026-69919","month":"2026-10","title":"Windows Cryptographic Services Information Disclosure Vulnerability","family":"Windows","component":"Windows Cryptographic Services","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69919"},{"cve":"CVE-2026-69922","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69922"},{"cve":"CVE-2026-69923","month":"2026-10","title":"Windows AI Elevation of Privilege Vulnerability","family":"Windows","component":"Windows AI","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-427"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69923"},{"cve":"CVE-2026-69926","month":"2026-10","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69926"},{"cve":"CVE-2026-69931","month":"2026-10","title":"Windows Storage Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69931"},{"cve":"CVE-2026-69934","month":"2026-10","title":"Windows Spaceport.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69934"},{"cve":"CVE-2026-69935","month":"2026-10","title":"Windows Storage Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69935"},{"cve":"CVE-2026-69940","month":"2026-10","title":"Windows Client for NFS Information Disclosure Vulnerability","family":"Windows","component":"Windows Client for NFS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69940"},{"cve":"CVE-2026-69942","month":"2026-10","title":"Windows Overlay Filter Remote Code Execution Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69942"},{"cve":"CVE-2026-69943","month":"2026-10","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69943"},{"cve":"CVE-2026-69945","month":"2026-10","title":"Windows AppX Deployment Extensions Elevation of Privilege Vulnerability","family":"Windows","component":"Windows AppX Deployment Extensions","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69945"},{"cve":"CVE-2026-69947","month":"2026-10","title":"Windows Overlay Filter Remote Code Execution Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69947"},{"cve":"CVE-2026-69949","month":"2026-10","title":"Windows Client for NFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Client for NFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69949"},{"cve":"CVE-2026-69950","month":"2026-10","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69950"},{"cve":"CVE-2026-69952","month":"2026-10","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69952"},{"cve":"CVE-2026-69953","month":"2026-10","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69953"},{"cve":"CVE-2026-69954","month":"2026-10","title":"Windows Overlay Filter Information Disclosure Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69954"},{"cve":"CVE-2026-69955","month":"2026-10","title":"Windows Client for NFS Information Disclosure Vulnerability","family":"Windows","component":"Windows Client for NFS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69955"},{"cve":"CVE-2026-69957","month":"2026-10","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69957"},{"cve":"CVE-2026-69958","month":"2026-10","title":"Windows Overlay Filter Remote Code Execution Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69958"},{"cve":"CVE-2026-69959","month":"2026-10","title":"Windows Overlay Filter Remote Code Execution Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69959"},{"cve":"CVE-2026-69963","month":"2026-10","title":"Kernel Streaming Service Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Streaming Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69963"},{"cve":"CVE-2026-69964","month":"2026-10","title":"Kernel Streaming Service Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Streaming Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69964"},{"cve":"CVE-2026-69966","month":"2026-10","title":"Kernel Streaming Service Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Streaming Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69966"},{"cve":"CVE-2026-69967","month":"2026-10","title":"Windows Overlay Filter Information Disclosure Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69967"},{"cve":"CVE-2026-69968","month":"2026-10","title":"Windows libarchive Tampering Vulnerability","family":"Windows","component":"Windows Libarchive","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69968"},{"cve":"CVE-2026-69969","month":"2026-10","title":"Windows AppX Deployment Service Information Disclosure Vulnerability","family":"Windows","component":"Windows AppX Deployment Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69969"},{"cve":"CVE-2026-69970","month":"2026-10","title":"Kernel Streaming Service Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Streaming Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69970"},{"cve":"CVE-2026-69971","month":"2026-10","title":"Windows Kernel-Mode Drivers Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel-Mode Drivers","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69971"},{"cve":"CVE-2026-69973","month":"2026-10","title":"Windows libarchive Tampering Vulnerability","family":"Windows","component":"Windows Libarchive","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69973"},{"cve":"CVE-2026-69974","month":"2026-10","title":"Desktop Window Manager Information Disclosure Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69974"},{"cve":"CVE-2026-69976","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69976"},{"cve":"CVE-2026-69977","month":"2026-10","title":"Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability","family":"Windows","component":"Quality Windows Audio/Video Experience (QWAVE) service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69977"},{"cve":"CVE-2026-69978","month":"2026-10","title":"Microsoft Windows VMSwitch Denial of Service Vulnerability","family":"Windows","component":"Windows VMSwitch","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69978"},{"cve":"CVE-2026-69979","month":"2026-10","title":"Windows AppX Deployment Service Security Feature Bypass Vulnerability","family":"Windows","component":"Windows AppX Deployment Service","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-424"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69979"},{"cve":"CVE-2026-69982","month":"2026-10","title":"Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69982"},{"cve":"CVE-2026-69984","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69984"},{"cve":"CVE-2026-69985","month":"2026-10","title":"Windows libarchive Remote Code Execution Vulnerability","family":"Windows","component":"Windows Libarchive","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69985"},{"cve":"CVE-2026-69986","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69986"},{"cve":"CVE-2026-69987","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69987"},{"cve":"CVE-2026-69988","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69988"},{"cve":"CVE-2026-69991","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69991"},{"cve":"CVE-2026-69992","month":"2026-10","title":"Remote Desktop Services\u00a0Remote Code Execution Vulnerability","family":"Windows","component":"Windows Remote Desktop Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69992"},{"cve":"CVE-2026-69994","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69994"},{"cve":"CVE-2026-69995","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69995"},{"cve":"CVE-2026-69996","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69996"},{"cve":"CVE-2026-69997","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69997"},{"cve":"CVE-2026-69998","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69998"},{"cve":"CVE-2026-69999","month":"2026-10","title":"Windows Update Information Disclosure Vulnerability","family":"Windows","component":"Windows Update","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69999"},{"cve":"CVE-2026-70004","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70004"},{"cve":"CVE-2026-70005","month":"2026-10","title":"Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70005"},{"cve":"CVE-2026-70006","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70006"},{"cve":"CVE-2026-70007","month":"2026-10","title":".NET Framework Remote Code Execution Vulnerability","family":"Developer Tools","component":".NET Framework","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70007"},{"cve":"CVE-2026-70008","month":"2026-10","title":"Windows IP Over USB Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows IP Over USB Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70008"},{"cve":"CVE-2026-70010","month":"2026-10","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70010"},{"cve":"CVE-2026-70011","month":"2026-10","title":"Windows IP Over USB Service Information Disclosure Vulnerability","family":"Windows","component":"Windows IP Over USB Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70011"},{"cve":"CVE-2026-70012","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70012"},{"cve":"CVE-2026-70013","month":"2026-10","title":"Windows iSCSI Remote Code Execution Vulnerability","family":"Windows","component":"Windows iSCSI","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70013"},{"cve":"CVE-2026-70014","month":"2026-10","title":"Windows Cryptographic Services Remote Code Execution Vulnerability","family":"Windows","component":"Windows Cryptographic Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70014"},{"cve":"CVE-2026-70015","month":"2026-10","title":"Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Local Security Authority Subsystem Service (LSASS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70015"},{"cve":"CVE-2026-70017","month":"2026-10","title":"Windows Secure Kernel Mode Information Disclosure Vulnerability","family":"Windows","component":"Windows Secure Kernel Mode","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70017"},{"cve":"CVE-2026-70021","month":"2026-10","title":"Windows Direct Composition Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Direct Composition","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70021"},{"cve":"CVE-2026-70023","month":"2026-10","title":"Windows Hyper-V Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70023"},{"cve":"CVE-2026-70024","month":"2026-10","title":"Windows Internet Information Services Remote Code Execution Vulnerability","family":"Windows","component":"Windows Internet Information Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70024"},{"cve":"CVE-2026-70025","month":"2026-10","title":"Windows Netlogon Denial of Service Vulnerability","family":"Windows","component":"Windows Netlogon","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70025"},{"cve":"CVE-2026-70026","month":"2026-10","title":"Windows Secure Kernel Mode Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Secure Kernel Mode","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70026"},{"cve":"CVE-2026-70027","month":"2026-10","title":"Windows Subsystem for Linux Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Subsystem for Linux","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70027"},{"cve":"CVE-2026-70031","month":"2026-10","title":"Windows iSCSI Denial of Service Vulnerability","family":"Windows","component":"Windows iSCSI","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70031"},{"cve":"CVE-2026-70033","month":"2026-10","title":"Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability","family":"Windows","component":"Remote Desktop Gateway Service","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70033"},{"cve":"CVE-2026-70035","month":"2026-10","title":".NET Framework Remote Code Execution Vulnerability","family":"Developer Tools","component":".NET Framework","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70035"},{"cve":"CVE-2026-70038","month":"2026-10","title":"Windows iSCSI Remote Code Execution Vulnerability","family":"Windows","component":"Windows iSCSI","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70038"},{"cve":"CVE-2026-70041","month":"2026-10","title":"Windows CD-ROM Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows CD-ROM Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70041"},{"cve":"CVE-2026-70044","month":"2026-10","title":"Microsoft Windows Media Foundation Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70044"},{"cve":"CVE-2026-70045","month":"2026-10","title":"Windows Work Folders Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Work Folders","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70045"},{"cve":"CVE-2026-70048","month":"2026-10","title":"Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70048"},{"cve":"CVE-2026-70049","month":"2026-10","title":"Microsoft Configuration Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Configuration Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70049"},{"cve":"CVE-2026-70051","month":"2026-10","title":"Windows SmartScreen Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SmartScreen","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70051"},{"cve":"CVE-2026-70052","month":"2026-10","title":"Microsoft PowerShell Remote Code Execution Vulnerability","family":"Windows","component":"Windows PowerShell","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70052"},{"cve":"CVE-2026-70054","month":"2026-10","title":"Windows NetBIOS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NetBIOS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70054"},{"cve":"CVE-2026-70055","month":"2026-10","title":"Windows Cryptographic Services Information Disclosure Vulnerability","family":"Windows","component":"Windows Cryptographic Services","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70055"},{"cve":"CVE-2026-70056","month":"2026-10","title":"Windows Update Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70056"},{"cve":"CVE-2026-70057","month":"2026-10","title":"Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70057"},{"cve":"CVE-2026-70058","month":"2026-10","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70058"},{"cve":"CVE-2026-70059","month":"2026-10","title":"Windows OLE Elevation of Privilege Vulnerability","family":"Windows","component":"Windows OLE","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70059"},{"cve":"CVE-2026-70060","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70060"},{"cve":"CVE-2026-70062","month":"2026-10","title":"Windows libarchive Remote Code Execution Vulnerability","family":"Windows","component":"Windows Libarchive","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70062"},{"cve":"CVE-2026-70063","month":"2026-10","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70063"},{"cve":"CVE-2026-70064","month":"2026-10","title":"Windows Kerberos Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70064"},{"cve":"CVE-2026-70066","month":"2026-10","title":"Windows DHCP Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70066"},{"cve":"CVE-2026-70067","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70067"},{"cve":"CVE-2026-70068","month":"2026-10","title":"Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Client-Side Caching (CSC) Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70068"},{"cve":"CVE-2026-70069","month":"2026-10","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70069"},{"cve":"CVE-2026-70071","month":"2026-10","title":"Role: DNS Server Tampering Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70071"},{"cve":"CVE-2026-70072","month":"2026-10","title":"Windows Netlogon Denial of Service Vulnerability","family":"Windows","component":"Windows Netlogon","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70072"},{"cve":"CVE-2026-70074","month":"2026-10","title":"Windows DNS Information Disclosure Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70074"},{"cve":"CVE-2026-70075","month":"2026-10","title":"Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Virtualization-Based Security (VBS) Enclave","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70075"},{"cve":"CVE-2026-70076","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70076"},{"cve":"CVE-2026-70077","month":"2026-10","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70077"},{"cve":"CVE-2026-70079","month":"2026-10","title":"Windows DNS Denial of Service Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-841"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70079"},{"cve":"CVE-2026-70082","month":"2026-10","title":"Windows DNS Denial of Service Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-248"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70082"},{"cve":"CVE-2026-70083","month":"2026-10","title":"Role: DNS Server Tampering Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70083"},{"cve":"CVE-2026-70084","month":"2026-10","title":"Windows Projected File System Information Disclosure Vulnerability","family":"Windows","component":"Windows Projected File System","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70084"},{"cve":"CVE-2026-70085","month":"2026-10","title":"Role: DNS Server Tampering Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70085"},{"cve":"CVE-2026-70086","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70086"},{"cve":"CVE-2026-70087","month":"2026-10","title":"Role: DNS Server Security Feature Bypass Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70087"},{"cve":"CVE-2026-70089","month":"2026-10","title":"Windows GDI Remote Code Execution Vulnerability","family":"Windows","component":"Windows GDI","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70089"},{"cve":"CVE-2026-70090","month":"2026-10","title":"Windows Netlogon Information Disclosure Vulnerability","family":"Windows","component":"Windows Netlogon","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70090"},{"cve":"CVE-2026-70092","month":"2026-10","title":"Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft PostScript Printer Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70092"},{"cve":"CVE-2026-70093","month":"2026-10","title":"Windows Rich Text Edit Control Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Rich Text Edit Control","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70093"},{"cve":"CVE-2026-70095","month":"2026-10","title":"Windows iSCSI Remote Code Execution Vulnerability","family":"Windows","component":"Windows iSCSI","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70095"},{"cve":"CVE-2026-70096","month":"2026-10","title":"Windows Rich Text Edit Control Remote Code Execution Vulnerability","family":"Windows","component":"Windows Rich Text Edit Control","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70096"},{"cve":"CVE-2026-70097","month":"2026-10","title":"Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability","family":"Windows","component":"Windows Virtualization-Based Security (VBS) Enclave","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70097"},{"cve":"CVE-2026-70098","month":"2026-10","title":"Visual Studio Code Remote Code Execution Vulnerability","family":"Developer Tools","component":"Visual Studio Code","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70098"},{"cve":"CVE-2026-70102","month":"2026-10","title":"Windows Spaceport.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70102"},{"cve":"CVE-2026-70103","month":"2026-10","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70103"},{"cve":"CVE-2026-70104","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70104"},{"cve":"CVE-2026-70106","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70106"},{"cve":"CVE-2026-70108","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70108"},{"cve":"CVE-2026-70109","month":"2026-10","title":"Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft PostScript Printer Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70109"},{"cve":"CVE-2026-70110","month":"2026-10","title":"Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft PostScript Printer Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70110"},{"cve":"CVE-2026-70111","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70111"},{"cve":"CVE-2026-70112","month":"2026-10","title":"Windows Spaceport.sys Remote Code Execution Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70112"},{"cve":"CVE-2026-70113","month":"2026-10","title":"Windows Client for NFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Client for NFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70113"},{"cve":"CVE-2026-70114","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70114"},{"cve":"CVE-2026-70115","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70115"},{"cve":"CVE-2026-70116","month":"2026-10","title":"Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS)","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":4.2,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70116"},{"cve":"CVE-2026-70117","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70117"},{"cve":"CVE-2026-70118","month":"2026-10","title":"Windows Audio Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Audio Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70118"},{"cve":"CVE-2026-70119","month":"2026-10","title":"Windows DNS Remote Code Execution Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70119"},{"cve":"CVE-2026-70121","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70121"},{"cve":"CVE-2026-70122","month":"2026-10","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70122"},{"cve":"CVE-2026-70123","month":"2026-10","title":"Microsoft Graphics Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70123"},{"cve":"CVE-2026-70126","month":"2026-10","title":"Windows Bluetooth Port Driver Remote Code Execution","family":"Windows","component":"Windows Bluetooth Port Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70126"},{"cve":"CVE-2026-70127","month":"2026-10","title":"Windows  Domain Name Service Remote Code Execution Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70127"},{"cve":"CVE-2026-70128","month":"2026-10","title":"HID Parser Library Information Disclosure Vulnerability","family":"Windows","component":"HID Parser Library","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70128"},{"cve":"CVE-2026-70131","month":"2026-10","title":"Microsoft Windows Media Foundation Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70131"},{"cve":"CVE-2026-70132","month":"2026-10","title":"Windows Portable Device File System Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Portable Device File System Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70132"},{"cve":"CVE-2026-70133","month":"2026-10","title":"Windows SMB Server Denial of Service Vulnerability","family":"Windows","component":"Windows SMB Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70133"},{"cve":"CVE-2026-70134","month":"2026-10","title":"Windows Event Tracing Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Event Tracing","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70134"},{"cve":"CVE-2026-70135","month":"2026-10","title":"Windows Remote POS Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows Remote POS Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70135"},{"cve":"CVE-2026-70136","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70136"},{"cve":"CVE-2026-70137","month":"2026-10","title":"Windows Remote Access Connection Manager Information Disclosure Vulnerability","family":"Windows","component":"Windows Remote Access Connection Manager","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70137"},{"cve":"CVE-2026-70138","month":"2026-10","title":"Windows OLE Elevation of Privilege Vulnerability","family":"Windows","component":"Windows OLE","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70138"},{"cve":"CVE-2026-70139","month":"2026-10","title":"Windows Update Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70139"},{"cve":"CVE-2026-70140","month":"2026-10","title":"Windows Audio Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Audio Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70140"},{"cve":"CVE-2026-70141","month":"2026-10","title":"Microsoft Windows Search Component Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70141"},{"cve":"CVE-2026-70142","month":"2026-10","title":"Windows Update Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70142"},{"cve":"CVE-2026-70143","month":"2026-10","title":"Windows Network File System Remote Code Execution Vulnerability","family":"Windows","component":"Windows Network File System","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70143"},{"cve":"CVE-2026-70144","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70144"},{"cve":"CVE-2026-70147","month":"2026-10","title":"Microsoft PostScript Printer Driver Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft PostScript Printer Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70147"},{"cve":"CVE-2026-70148","month":"2026-10","title":"Windows Broadcast DVR User Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-441"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70148"},{"cve":"CVE-2026-70149","month":"2026-10","title":"Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Client Side Caching driver (csc.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70149"},{"cve":"CVE-2026-70150","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70150"},{"cve":"CVE-2026-70151","month":"2026-10","title":"Windows Direct Composition Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Direct Composition","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70151"},{"cve":"CVE-2026-70153","month":"2026-10","title":"Microsoft PostScript Printer Driver Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft PostScript Printer Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70153"},{"cve":"CVE-2026-70155","month":"2026-10","title":"Windows DNS Denial of Service Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70155"},{"cve":"CVE-2026-70156","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70156"},{"cve":"CVE-2026-70157","month":"2026-10","title":"Windows System Information Console Remote Code Execution Vulnerability","family":"Windows","component":"Windows System Information Console","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70157"},{"cve":"CVE-2026-70158","month":"2026-10","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70158"},{"cve":"CVE-2026-70159","month":"2026-10","title":"ASP.NET Core Denial of Service Vulnerability","family":"Other","component":"ASP.NET Core","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70159"},{"cve":"CVE-2026-70160","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70160"},{"cve":"CVE-2026-70161","month":"2026-10","title":".NET Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70161"},{"cve":"CVE-2026-70162","month":"2026-10","title":".NET Denial of Service Vulnerability","family":"Other","component":".NET","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-405"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70162"},{"cve":"CVE-2026-70163","month":"2026-10","title":"Microsoft OpenSSH for Windows Denial of Service Vulnerability","family":"Windows","component":"OpenSSH for Windows","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70163"},{"cve":"CVE-2026-70164","month":"2026-10","title":"Windows TCP/IP Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70164"},{"cve":"CVE-2026-70165","month":"2026-10","title":".NET Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70165"},{"cve":"CVE-2026-70166","month":"2026-10","title":"Windows DNS Denial of Service Vulnerability","family":"Windows","component":"Windows DNS","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70166"},{"cve":"CVE-2026-70167","month":"2026-10","title":"Windows  Domain Name Service Remote Code Execution Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843","CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70167"},{"cve":"CVE-2026-70168","month":"2026-10","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70168"},{"cve":"CVE-2026-70169","month":"2026-10","title":"Windows Connected Devices Platform Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Connected Devices Platform Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70169"},{"cve":"CVE-2026-70170","month":"2026-10","title":"Windows Kernel Denial of Service Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70170"},{"cve":"CVE-2026-70172","month":"2026-10","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70172"},{"cve":"CVE-2026-70173","month":"2026-10","title":"Microsoft Windows Search Component Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70173"},{"cve":"CVE-2026-70174","month":"2026-10","title":".NET Remote Code Execution Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-358"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70174"},{"cve":"CVE-2026-70175","month":"2026-10","title":"ASP.NET Core Elevation of Privilege Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-640"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70175"},{"cve":"CVE-2026-70176","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70176"},{"cve":"CVE-2026-70177","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70177"},{"cve":"CVE-2026-70179","month":"2026-10","title":"ASP.NET Core Elevation of Privilege Vulnerability","family":"Other","component":"ASP.NET Core","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-290"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70179"},{"cve":"CVE-2026-70181","month":"2026-10","title":"ASP.NET Core Denial of Service Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70181"},{"cve":"CVE-2026-70183","month":"2026-10","title":"ASP.NET Core Elevation of Privilege Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70183"},{"cve":"CVE-2026-70184","month":"2026-10","title":"Windows Backup Engine Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Backup Engine","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-41"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70184"},{"cve":"CVE-2026-70185","month":"2026-10","title":"Microsoft PowerShell Security Feature Bypass Vulnerability","family":"Windows","component":"Windows PowerShell","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-639"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70185"},{"cve":"CVE-2026-70186","month":"2026-10","title":"ASP.NET Core Denial of Service Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-833"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70186"},{"cve":"CVE-2026-70187","month":"2026-10","title":"Windows Remote Desktop Services Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Gateway Service","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70187"},{"cve":"CVE-2026-70188","month":"2026-10","title":"ASP.NET Core Security Feature Bypass Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70188"},{"cve":"CVE-2026-70189","month":"2026-10","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70189"},{"cve":"CVE-2026-70190","month":"2026-10","title":".NET Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70190"},{"cve":"CVE-2026-70194","month":"2026-10","title":".NET Framework Security Feature Bypass Vulnerability","family":"Developer Tools","component":".NET Framework","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70194"},{"cve":"CVE-2026-70195","month":"2026-10","title":"Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70195"},{"cve":"CVE-2026-70196","month":"2026-10","title":"ASP.NET Core Denial of Service Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70196"},{"cve":"CVE-2026-70197","month":"2026-10","title":".NET Remote Code Execution Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70197"},{"cve":"CVE-2026-70198","month":"2026-10","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70198"},{"cve":"CVE-2026-70199","month":"2026-10","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70199"},{"cve":"CVE-2026-70201","month":"2026-10","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70201"},{"cve":"CVE-2026-70202","month":"2026-10","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70202"},{"cve":"CVE-2026-70205","month":"2026-10","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70205"},{"cve":"CVE-2026-70206","month":"2026-10","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70206"},{"cve":"CVE-2026-70207","month":"2026-10","title":"Network Policy Server (NPS) Remote Code Execution Vulnerability","family":"Windows","component":"Network Policy Server (NPS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70207"},{"cve":"CVE-2026-70208","month":"2026-10","title":"HTTP.sys Information Disclosure Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70208"},{"cve":"CVE-2026-70209","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70209"},{"cve":"CVE-2026-70210","month":"2026-10","title":"Windows OLE DB Elevation of Privilege Vulnerability","family":"Windows","component":"Windows OLE DB","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70210"},{"cve":"CVE-2026-70211","month":"2026-10","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70211"},{"cve":"CVE-2026-70212","month":"2026-10","title":"Windows Security Center Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Security Center","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-923"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70212"},{"cve":"CVE-2026-70213","month":"2026-10","title":"Microsoft Power Apps Remote Code Execution Vulnerability","family":"Apps","component":"Microsoft Power Apps","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70213"},{"cve":"CVE-2026-70214","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70214"},{"cve":"CVE-2026-70215","month":"2026-10","title":"Microsoft Office PowerPoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70215"},{"cve":"CVE-2026-70216","month":"2026-10","title":"Windows Mobile Device Management Tampering Vulnerability","family":"Windows","component":"Windows Mobile Device Management","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-1220"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70216"},{"cve":"CVE-2026-70217","month":"2026-10","title":"Microsoft Office SharePoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-284"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70217"},{"cve":"CVE-2026-70218","month":"2026-10","title":"Windows StateRepository API Elevation of Privilege Vulnerability","family":"Windows","component":"Windows StateRepository API","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1220","CWE-285"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70218"},{"cve":"CVE-2026-70219","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70219"},{"cve":"CVE-2026-70220","month":"2026-10","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70220"},{"cve":"CVE-2026-70222","month":"2026-10","title":"Windows Shell Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70222"},{"cve":"CVE-2026-70223","month":"2026-10","title":"Windows Console Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Console Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70223"},{"cve":"CVE-2026-70225","month":"2026-10","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70225"},{"cve":"CVE-2026-70227","month":"2026-10","title":"Windows Device Association Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70227"},{"cve":"CVE-2026-70228","month":"2026-10","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70228"},{"cve":"CVE-2026-70229","month":"2026-10","title":"Windows Active Directory Domain Services Remote Code Execution Vulnerability","family":"Windows","component":"Active Directory Domain Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70229"},{"cve":"CVE-2026-70230","month":"2026-10","title":"Windows Audio Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Audio Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70230"},{"cve":"CVE-2026-70232","month":"2026-10","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70232"},{"cve":"CVE-2026-70233","month":"2026-10","title":"Windows Common Log File System Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Common Log File System Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70233"},{"cve":"CVE-2026-70234","month":"2026-10","title":"Desktop Window Manager Information Disclosure Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70234"},{"cve":"CVE-2026-70235","month":"2026-10","title":"Windows Event Tracing Spoofing Vulnerability","family":"Windows","component":"Windows Event Tracing","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70235"},{"cve":"CVE-2026-70236","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70236"},{"cve":"CVE-2026-70237","month":"2026-10","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70237"},{"cve":"CVE-2026-70238","month":"2026-10","title":"Windows Storage Spaces Controller Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage Spaces Controller","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70238"},{"cve":"CVE-2026-70241","month":"2026-10","title":"Windows Kerberos Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70241"},{"cve":"CVE-2026-70242","month":"2026-10","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70242"},{"cve":"CVE-2026-70243","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70243"},{"cve":"CVE-2026-70244","month":"2026-10","title":"Windows DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70244"},{"cve":"CVE-2026-70245","month":"2026-10","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70245"},{"cve":"CVE-2026-70246","month":"2026-10","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70246"},{"cve":"CVE-2026-70247","month":"2026-10","title":"HTTP.sys Remote Code Execution Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70247"},{"cve":"CVE-2026-70248","month":"2026-10","title":"Windows Hyper-V Denial of Service Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70248"},{"cve":"CVE-2026-70249","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70249"},{"cve":"CVE-2026-70250","month":"2026-10","title":"Windows DHCP Client Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70250"},{"cve":"CVE-2026-70251","month":"2026-10","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70251"},{"cve":"CVE-2026-70252","month":"2026-10","title":"Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability","family":"Windows","component":"Virtual Hard Disk (VHD) Miniport Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70252"},{"cve":"CVE-2026-70253","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70253"},{"cve":"CVE-2026-70254","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70254"},{"cve":"CVE-2026-70255","month":"2026-10","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70255"},{"cve":"CVE-2026-70256","month":"2026-10","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70256"},{"cve":"CVE-2026-70257","month":"2026-10","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70257"},{"cve":"CVE-2026-70258","month":"2026-10","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70258"},{"cve":"CVE-2026-70259","month":"2026-10","title":"Microsoft Office SharePoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70259"},{"cve":"CVE-2026-70260","month":"2026-10","title":"Microsoft Trace Data Helper Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Trace Data Helper","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70260"},{"cve":"CVE-2026-70261","month":"2026-10","title":"Microsoft Trace Data Helper Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Trace Data Helper","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70261"},{"cve":"CVE-2026-70262","month":"2026-10","title":"WebDAV Elevation of Privilege Vulnerability","family":"Windows","component":"WebDAV","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70262"},{"cve":"CVE-2026-70263","month":"2026-10","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70263"},{"cve":"CVE-2026-70264","month":"2026-10","title":"Microsoft Defender Information Disclosure Vulnerability","family":"System Center","component":"Microsoft Defender","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70264"},{"cve":"CVE-2026-70266","month":"2026-10","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70266"},{"cve":"CVE-2026-70267","month":"2026-10","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-829"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70267"},{"cve":"CVE-2026-70268","month":"2026-10","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70268"},{"cve":"CVE-2026-70269","month":"2026-10","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70269"},{"cve":"CVE-2026-70270","month":"2026-10","title":"Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Container Isolation FS Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70270"},{"cve":"CVE-2026-70271","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70271"},{"cve":"CVE-2026-70272","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70272"},{"cve":"CVE-2026-70273","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70273"},{"cve":"CVE-2026-70274","month":"2026-10","title":"Windows Bind Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bind Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70274"},{"cve":"CVE-2026-70275","month":"2026-10","title":"Windows CD-ROM File System Driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows CD-ROM Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70275"},{"cve":"CVE-2026-70276","month":"2026-10","title":"Microsoft Office Click-To-Run Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office Click-To-Run","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70276"},{"cve":"CVE-2026-70277","month":"2026-10","title":"Windows Fast FAT File System Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows Fast FAT Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70277"},{"cve":"CVE-2026-70278","month":"2026-10","title":"Microsoft Windows Media Foundation Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70278"},{"cve":"CVE-2026-70279","month":"2026-10","title":"Microsoft Exchange Server Spoofing Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70279"},{"cve":"CVE-2026-70280","month":"2026-10","title":"Windows Hello Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70280"},{"cve":"CVE-2026-70281","month":"2026-10","title":"Microsoft Office Outlook Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70281"},{"cve":"CVE-2026-70282","month":"2026-10","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70282"},{"cve":"CVE-2026-70284","month":"2026-10","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70284"},{"cve":"CVE-2026-70285","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70285"},{"cve":"CVE-2026-70286","month":"2026-10","title":"Windows Graphics Component Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - GRFX","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70286"},{"cve":"CVE-2026-70287","month":"2026-10","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70287"},{"cve":"CVE-2026-70288","month":"2026-10","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70288"},{"cve":"CVE-2026-70291","month":"2026-10","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70291"},{"cve":"CVE-2026-70292","month":"2026-10","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70292"},{"cve":"CVE-2026-70293","month":"2026-10","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70293"},{"cve":"CVE-2026-70294","month":"2026-10","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70294"},{"cve":"CVE-2026-70295","month":"2026-10","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70295"},{"cve":"CVE-2026-70297","month":"2026-10","title":"Skype for Business Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Skype for Business and Microsoft Lync","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-36"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70297"},{"cve":"CVE-2026-70298","month":"2026-10","title":"Microsoft Office SharePoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70298"},{"cve":"CVE-2026-70299","month":"2026-10","title":"Windows Bind Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bind Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70299"},{"cve":"CVE-2026-70300","month":"2026-10","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70300"},{"cve":"CVE-2026-70301","month":"2026-10","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70301"},{"cve":"CVE-2026-70302","month":"2026-10","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70302"},{"cve":"CVE-2026-70303","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70303"},{"cve":"CVE-2026-70343","month":"2026-10","title":"Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft MPEG-2 Video Extension","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70343"},{"cve":"CVE-2026-70566","month":"2026-10","title":"Windows Schannel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Schannel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70566"},{"cve":"CVE-2026-70571","month":"2026-10","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70571"},{"cve":"CVE-2026-70580","month":"2026-10","title":"Windows Credential Guard Spoofing Vulnerability","family":"Windows","component":"Windows Credential Guard","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70580"},{"cve":"CVE-2026-71347","month":"2026-10","title":"Windows Security Center Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Security Center","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71347"},{"cve":"CVE-2026-72934","month":"2026-10","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Program Compatibility Assistant Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72934"},{"cve":"CVE-2026-72955","month":"2026-10","title":"Windows Application Compatibility Cache Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Application Compatibility Cache","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72955"},{"cve":"CVE-2026-72968","month":"2026-10","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Program Compatibility Assistant Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72968"},{"cve":"CVE-2026-72969","month":"2026-10","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Program Compatibility Assistant Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72969"},{"cve":"CVE-2026-73027","month":"2026-10","title":"Windows Setup Files Cleanup Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Setup Files Cleanup","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-15"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73027"},{"cve":"CVE-2026-77496","month":"2026-10","title":"Windows Imaging Component Remote Code Execution Vulnerability","family":"Windows","component":"Windows Imaging Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77496"},{"cve":"CVE-2026-77900","month":"2026-10","title":"Azure App Service Remote Code Execution Vulnerability","family":"Azure","component":"Azure App Service","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77900"},{"cve":"CVE-2026-77902","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77902"},{"cve":"CVE-2026-77910","month":"2026-10","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77910"},{"cve":"CVE-2026-78459","month":"2026-10","title":"Microsoft Internet Information Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Internet Information Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78459"},{"cve":"CVE-2026-81964","month":"2026-10","title":"Windows Update Orchestrator Service Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Update Orchestrator Service","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-798"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81964"},{"cve":"CVE-2026-81969","month":"2026-10","title":"Windows Server Update Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Server Update Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1220"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81969"},{"cve":"CVE-2026-81971","month":"2026-10","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81971"},{"cve":"CVE-2026-83499","month":"2026-10","title":"Windows Server Update Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Server Update Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1220"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83499"},{"cve":"CVE-2026-83500","month":"2026-10","title":"Windows BitLocker Security Feature Bypass Vulnerability","family":"Windows","component":"Windows BitLocker","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-601"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83500"},{"cve":"CVE-2026-83504","month":"2026-10","title":"Windows SmartScreen Information Disclosure Vulnerability","family":"Windows","component":"Windows SmartScreen","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83504"},{"cve":"CVE-2026-83505","month":"2026-10","title":"Windows Setup Files Cleanup Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Setup Files Cleanup","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367","CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83505"},{"cve":"CVE-2026-83506","month":"2026-10","title":"Servicing Stack Updates Elevation of Privilege Vulnerability","family":"Windows","component":"Servicing Stack Updates","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83506"},{"cve":"CVE-2026-83507","month":"2026-10","title":"Windows Update Orchestrator Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Update Orchestrator Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83507"},{"cve":"CVE-2026-83508","month":"2026-10","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83508"},{"cve":"CVE-2026-83509","month":"2026-10","title":"Windows Setup Files Cleanup Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Setup Files Cleanup","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-426"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83509"},{"cve":"CVE-2026-83510","month":"2026-10","title":"Windows Setup Files Cleanup Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Setup Files Cleanup","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83510"},{"cve":"CVE-2026-83511","month":"2026-10","title":"Active Directory Federation Services (AD FS) Spoofing Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83511"},{"cve":"CVE-2026-83513","month":"2026-10","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83513"},{"cve":"CVE-2026-83514","month":"2026-10","title":"Windows Partition Management Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Partition Management Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83514"},{"cve":"CVE-2026-83515","month":"2026-10","title":"RPC Runtime Information Disclosure Vulnerability","family":"Windows","component":"RPC Runtime","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83515"},{"cve":"CVE-2026-83516","month":"2026-10","title":"Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability","family":"Windows","component":"Windows Local Security Authority Subsystem Service (LSASS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83516"},{"cve":"CVE-2026-83517","month":"2026-10","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83517"},{"cve":"CVE-2026-83518","month":"2026-10","title":"RPC Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"RPC Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83518"},{"cve":"CVE-2026-83519","month":"2026-10","title":"Windows Error Reporting Remote Code Execution Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83519"},{"cve":"CVE-2026-83520","month":"2026-10","title":".NET Remote Code Execution Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83520"},{"cve":"CVE-2026-83521","month":"2026-10","title":"Windows IKE Extension Information Disclosure Vulnerability","family":"Windows","component":"Windows IKE Extension","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83521"},{"cve":"CVE-2026-83522","month":"2026-10","title":"Windows IKE Extension Spoofing Vulnerability","family":"Windows","component":"Windows IKE Extension","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-807"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83522"},{"cve":"CVE-2026-83523","month":"2026-10","title":"Windows Image Acquisition Remote Code Execution Vulnerability","family":"Windows","component":"Windows Image Acquisition","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83523"},{"cve":"CVE-2026-83564","month":"2026-10","title":"Windows Search Service Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83564"},{"cve":"CVE-2026-83565","month":"2026-10","title":"Windows Encrypting File System (EFS) Information Disclosure Vulnerability","family":"Windows","component":"Windows Encrypting File System (EFS)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83565"},{"cve":"CVE-2026-83566","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - ICOMP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83566"},{"cve":"CVE-2026-83567","month":"2026-10","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83567"},{"cve":"CVE-2026-83568","month":"2026-10","title":"Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel-Mode Drivers","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83568"},{"cve":"CVE-2026-83569","month":"2026-10","title":"HID Parser Library Elevation of Privilege Vulnerability","family":"Windows","component":"HID Parser Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83569"},{"cve":"CVE-2026-83570","month":"2026-10","title":"Windows Search Service Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83570"},{"cve":"CVE-2026-83571","month":"2026-10","title":"Windows Audio Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Audio Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83571"},{"cve":"CVE-2026-83573","month":"2026-10","title":"Windows Kernel-Mode Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel Mode Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83573"},{"cve":"CVE-2026-83574","month":"2026-10","title":"Windows Search Service Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83574"},{"cve":"CVE-2026-83575","month":"2026-10","title":"Windows Search Service Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83575"},{"cve":"CVE-2026-83578","month":"2026-10","title":"Microsoft PowerShell Remote Code Execution Vulnerability","family":"Windows","component":"Windows PowerShell","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83578"},{"cve":"CVE-2026-83579","month":"2026-10","title":"Windows Smart Card Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Smart Card","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83579"},{"cve":"CVE-2026-83580","month":"2026-10","title":"Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Client-Side Caching (CSC) Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83580"},{"cve":"CVE-2026-83582","month":"2026-10","title":"Windows Graphics Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Graphics Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83582"},{"cve":"CVE-2026-83583","month":"2026-10","title":"Windows Geotag Broker Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Geotag Broker","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83583"},{"cve":"CVE-2026-83584","month":"2026-10","title":"Windows Smart Card Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Smart Card","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83584"},{"cve":"CVE-2026-83585","month":"2026-10","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-134"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83585"},{"cve":"CVE-2026-83586","month":"2026-10","title":"Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Resilient File System (ReFS) Deduplication Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83586"},{"cve":"CVE-2026-83587","month":"2026-10","title":"Windows Core Messaging Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Core Messaging","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83587"},{"cve":"CVE-2026-83588","month":"2026-10","title":"Windows USB Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83588"},{"cve":"CVE-2026-83634","month":"2026-10","title":"Windows BitLocker Elevation of Privilege Vulnerability","family":"Windows","component":"Windows BitLocker","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83634"},{"cve":"CVE-2026-83635","month":"2026-10","title":"Role: DNS Server Denial of Service Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83635"},{"cve":"CVE-2026-83636","month":"2026-10","title":"Windows Hyper-V Denial of Service Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83636"},{"cve":"CVE-2026-83637","month":"2026-10","title":"Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel-Mode Drivers","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83637"},{"cve":"CVE-2026-83638","month":"2026-10","title":"Windows USB Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83638"},{"cve":"CVE-2026-83639","month":"2026-10","title":"Windows Sensor Data Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Sensor Data Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83639"},{"cve":"CVE-2026-83640","month":"2026-10","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83640"},{"cve":"CVE-2026-83641","month":"2026-10","title":"Windows Media Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83641"},{"cve":"CVE-2026-83642","month":"2026-10","title":"Windows  Domain Name Service Remote Code Execution Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83642"},{"cve":"CVE-2026-83643","month":"2026-10","title":"Windows Error Reporting Remote Code Execution Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83643"},{"cve":"CVE-2026-83644","month":"2026-10","title":"Windows Audio Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Audio Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83644"},{"cve":"CVE-2026-83645","month":"2026-10","title":"Active Directory Federation Services (AD FS) Denial of Service Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83645"},{"cve":"CVE-2026-83646","month":"2026-10","title":"Active Directory Federation Services (AD FS) Spoofing Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-601"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83646"},{"cve":"CVE-2026-83647","month":"2026-10","title":"Windows Active Directory Domain Services Denial of Service Vulnerability","family":"Windows","component":"Active Directory Domain Services","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83647"},{"cve":"CVE-2026-83648","month":"2026-10","title":"Windows Active Directory Domain Services Denial of Service Vulnerability","family":"Windows","component":"Active Directory Domain Services","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83648"},{"cve":"CVE-2026-83649","month":"2026-10","title":"Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability","family":"Windows","component":"Windows Local Security Authority Subsystem Service (LSASS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83649"},{"cve":"CVE-2026-83650","month":"2026-10","title":"Windows Media Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83650"},{"cve":"CVE-2026-83651","month":"2026-10","title":"Windows GDI Information Disclosure Vulnerability","family":"Windows","component":"Windows GDI","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83651"},{"cve":"CVE-2026-83652","month":"2026-10","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83652"},{"cve":"CVE-2026-83654","month":"2026-10","title":"Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Modern Device Management (MDM)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83654"},{"cve":"CVE-2026-83655","month":"2026-10","title":"Network Policy Server (NPS) Denial of Service Vulnerability","family":"Windows","component":"Network Policy Server (NPS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83655"},{"cve":"CVE-2026-83656","month":"2026-10","title":"Windows Modern Device Management (MDM) Tampering Vulnerability","family":"Windows","component":"Windows Modern Device Management (MDM)","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83656"},{"cve":"CVE-2026-83657","month":"2026-10","title":"Windows Modern Device Management (MDM) Tampering Vulnerability","family":"Windows","component":"Windows Modern Device Management (MDM)","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83657"},{"cve":"CVE-2026-83658","month":"2026-10","title":"Windows Error Reporting Information Disclosure Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83658"},{"cve":"CVE-2026-83659","month":"2026-10","title":"Windows User Profile Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows User Profile Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83659"},{"cve":"CVE-2026-83664","month":"2026-10","title":"Windows Portable Device File System Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows Portable Device File System Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83664"},{"cve":"CVE-2026-83665","month":"2026-10","title":"Windows DHCP Server Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83665"},{"cve":"CVE-2026-83666","month":"2026-10","title":"Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability","family":"Windows","component":"Active Directory Certificate Services (AD CS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83666"},{"cve":"CVE-2026-83667","month":"2026-10","title":"Windows Active Directory Domain Services Denial of Service Vulnerability","family":"Windows","component":"Active Directory Domain Services","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83667"},{"cve":"CVE-2026-83668","month":"2026-10","title":"Windows WLAN Service Information Disclosure Vulnerability","family":"Windows","component":"Windows WLAN Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83668"},{"cve":"CVE-2026-83669","month":"2026-10","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83669"},{"cve":"CVE-2026-83670","month":"2026-10","title":"Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability","family":"Windows","component":"Function Discovery Service (fdwsd.dll)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83670"},{"cve":"CVE-2026-83671","month":"2026-10","title":"Windows Hyper-V Information Disclosure Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83671"},{"cve":"CVE-2026-83672","month":"2026-10","title":"Windows Installer Information Disclosure Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83672"},{"cve":"CVE-2026-83674","month":"2026-10","title":"Active Directory Federation Services (AD FS) Spoofing Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83674"},{"cve":"CVE-2026-83675","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83675"},{"cve":"CVE-2026-83676","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83676"},{"cve":"CVE-2026-83677","month":"2026-10","title":"Windows DHCP Client Denial of Service Vulnerability","family":"Windows","component":"Windows DHCP Client","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-401"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83677"},{"cve":"CVE-2026-83678","month":"2026-10","title":"Windows TCP/IP Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83678"},{"cve":"CVE-2026-83679","month":"2026-10","title":"Windows Defender Firewall Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Defender Firewall Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83679"},{"cve":"CVE-2026-83680","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83680"},{"cve":"CVE-2026-83681","month":"2026-10","title":"Microsoft PowerToys Tampering Vulnerability","family":"Apps","component":"Microsoft PowerToys","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83681"},{"cve":"CVE-2026-83682","month":"2026-10","title":"Windows TCP/IP Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83682"},{"cve":"CVE-2026-83683","month":"2026-10","title":"Windows Encrypting File System (EFS) Information Disclosure Vulnerability","family":"Windows","component":"Windows Encrypting File System (EFS)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-36"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83683"},{"cve":"CVE-2026-83685","month":"2026-10","title":"Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability","family":"Windows","component":"Windows IKE Extension","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83685"},{"cve":"CVE-2026-83686","month":"2026-10","title":"Microsoft Windows Search Component Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83686"},{"cve":"CVE-2026-83687","month":"2026-10","title":"Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Connected User Experiences and Telemetry","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83687"},{"cve":"CVE-2026-83688","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83688"},{"cve":"CVE-2026-83689","month":"2026-10","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83689"},{"cve":"CVE-2026-83690","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83690"},{"cve":"CVE-2026-83691","month":"2026-10","title":"Windows DHCP Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83691"},{"cve":"CVE-2026-83692","month":"2026-10","title":"Windows Bind Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bind Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83692"},{"cve":"CVE-2026-83693","month":"2026-10","title":"Windows Error Reporting Remote Code Execution Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83693"},{"cve":"CVE-2026-83694","month":"2026-10","title":"Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Volume Manager Extension Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83694"},{"cve":"CVE-2026-83695","month":"2026-10","title":"Windows Event Logging Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Event Logging Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83695"},{"cve":"CVE-2026-83696","month":"2026-10","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83696"},{"cve":"CVE-2026-83697","month":"2026-10","title":"Windows Modern Device Management (MDM) Tampering Vulnerability","family":"Windows","component":"Windows Modern Device Management (MDM)","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83697"},{"cve":"CVE-2026-83698","month":"2026-10","title":"Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Client-Side Caching (CSC) Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83698"},{"cve":"CVE-2026-83699","month":"2026-10","title":"Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Client-Side Caching (CSC) Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83699"},{"cve":"CVE-2026-83700","month":"2026-10","title":"Windows Now Playing Session Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Now Playing Session Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83700"},{"cve":"CVE-2026-83701","month":"2026-10","title":"Windows Now Playing Session Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Now Playing Session Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83701"},{"cve":"CVE-2026-83702","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83702"},{"cve":"CVE-2026-83703","month":"2026-10","title":"Windows Wi-Fi Driver Denial of Service Vulnerability","family":"Windows","component":"Windows Wi-Fi Driver","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83703"},{"cve":"CVE-2026-83704","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83704"},{"cve":"CVE-2026-83705","month":"2026-10","title":"HTTP.sys Information Disclosure Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83705"},{"cve":"CVE-2026-83706","month":"2026-10","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83706"},{"cve":"CVE-2026-83707","month":"2026-10","title":"Windows Event Tracing Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Event Tracing","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83707"},{"cve":"CVE-2026-83708","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83708"},{"cve":"CVE-2026-83709","month":"2026-10","title":"Windows NTLM Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTLM","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83709"},{"cve":"CVE-2026-83710","month":"2026-10","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83710"},{"cve":"CVE-2026-83712","month":"2026-10","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83712"},{"cve":"CVE-2026-83713","month":"2026-10","title":"Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83713"},{"cve":"CVE-2026-83714","month":"2026-10","title":"HTTP.sys Information Disclosure Vulnerability","family":"Windows","component":"Windows HTTP.sys","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83714"},{"cve":"CVE-2026-83715","month":"2026-10","title":"Windows Error Reporting Tampering Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83715"},{"cve":"CVE-2026-83716","month":"2026-10","title":"Windows Hyper-V Remote Code Execution Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83716"},{"cve":"CVE-2026-83717","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83717"},{"cve":"CVE-2026-83718","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83718"},{"cve":"CVE-2026-83719","month":"2026-10","title":"Servicing Stack Updates Information Disclosure Vulnerability","family":"Windows","component":"Servicing Stack Updates","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83719"},{"cve":"CVE-2026-83720","month":"2026-10","title":"Windows Kerberos Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kerberos","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83720"},{"cve":"CVE-2026-83721","month":"2026-10","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83721"},{"cve":"CVE-2026-83722","month":"2026-10","title":"Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Local Security Authority Server (lsasrv)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83722"},{"cve":"CVE-2026-83723","month":"2026-10","title":"Windows Event Logging Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Event Logging Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83723"},{"cve":"CVE-2026-83724","month":"2026-10","title":"Windows Management Instrumentation Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Instrumentation","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83724"},{"cve":"CVE-2026-83725","month":"2026-10","title":"Microsoft Windows Search Component Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83725"},{"cve":"CVE-2026-83726","month":"2026-10","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83726"},{"cve":"CVE-2026-83727","month":"2026-10","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83727"},{"cve":"CVE-2026-83728","month":"2026-10","title":"Windows Hyper-V Spoofing Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1286"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83728"},{"cve":"CVE-2026-83732","month":"2026-10","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83732"},{"cve":"CVE-2026-83733","month":"2026-10","title":"Windows Print Spooler Components Information Disclosure Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83733"},{"cve":"CVE-2026-83735","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-763"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83735"},{"cve":"CVE-2026-83736","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83736"},{"cve":"CVE-2026-83737","month":"2026-10","title":"Windows NTFS Information Disclosure Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83737"},{"cve":"CVE-2026-83738","month":"2026-10","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83738"},{"cve":"CVE-2026-83739","month":"2026-10","title":"Windows Bluetooth Service Remote Code Execution Vulnerability","family":"Windows","component":"Windows Bluetooth Service","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83739"},{"cve":"CVE-2026-83740","month":"2026-10","title":"Windows Hello Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83740"},{"cve":"CVE-2026-83741","month":"2026-10","title":"Internet Explorer Elevation of Privilege Vulnerability","family":"Windows","component":"Internet Explorer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83741"},{"cve":"CVE-2026-83746","month":"2026-10","title":"Skype for Business Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Skype for Business and Microsoft Lync","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-36"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83746"},{"cve":"CVE-2026-83747","month":"2026-10","title":"Windows Error Reporting Information Disclosure Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83747"},{"cve":"CVE-2026-83748","month":"2026-10","title":"Windows Error Reporting Remote Code Execution Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83748"},{"cve":"CVE-2026-83749","month":"2026-10","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83749"},{"cve":"CVE-2026-83750","month":"2026-10","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83750"},{"cve":"CVE-2026-83751","month":"2026-10","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","family":"Windows","component":"Windows MIDI Service Module","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83751"},{"cve":"CVE-2026-83752","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83752"},{"cve":"CVE-2026-83753","month":"2026-10","title":"Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Camera Frame Server Monitor","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83753"},{"cve":"CVE-2026-83754","month":"2026-10","title":"Microsoft OpenSSH for Windows Remote Code Execution Vulnerability","family":"Windows","component":"OpenSSH for Windows","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83754"},{"cve":"CVE-2026-83755","month":"2026-10","title":"Win32k Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83755"},{"cve":"CVE-2026-83756","month":"2026-10","title":"Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83756"},{"cve":"CVE-2026-83757","month":"2026-10","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83757"},{"cve":"CVE-2026-83758","month":"2026-10","title":"Windows Error Reporting Remote Code Execution Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83758"},{"cve":"CVE-2026-83759","month":"2026-10","title":"Windows Encrypting File System (EFS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Encrypting File System (EFS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83759"},{"cve":"CVE-2026-83760","month":"2026-10","title":"Microsoft Bluetooth Driver Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Bluetooth Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83760"},{"cve":"CVE-2026-83761","month":"2026-10","title":"Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83761"},{"cve":"CVE-2026-83762","month":"2026-10","title":"Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83762"},{"cve":"CVE-2026-83763","month":"2026-10","title":"Windows Input System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Input System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83763"},{"cve":"CVE-2026-83764","month":"2026-10","title":"Windows Clipboard User Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Clipboard User Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83764"},{"cve":"CVE-2026-83765","month":"2026-10","title":"Windows DWM Core Library Information Disclosure Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83765"},{"cve":"CVE-2026-83766","month":"2026-10","title":"Windows Hyper-V Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":4.2,"vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83766"},{"cve":"CVE-2026-83767","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83767"},{"cve":"CVE-2026-83768","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83768"},{"cve":"CVE-2026-83769","month":"2026-10","title":"Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability","family":"Windows","component":"OpenSSH for Windows","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83769"},{"cve":"CVE-2026-83770","month":"2026-10","title":"Windows Text Shaping Remote Code Execution Vulnerability","family":"Windows","component":"Windows Text Shaping","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83770"},{"cve":"CVE-2026-83771","month":"2026-10","title":"Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Camera Frame Server Monitor","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83771"},{"cve":"CVE-2026-83773","month":"2026-10","title":"Windows MIDI Service Module Information Disclosure Vulnerability","family":"Windows","component":"Windows MIDI Service Module","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83773"},{"cve":"CVE-2026-83774","month":"2026-10","title":"Windows Win32 Kernel Subsystem Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83774"},{"cve":"CVE-2026-83775","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83775"},{"cve":"CVE-2026-83776","month":"2026-10","title":"Windows Bluetooth Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Bluetooth Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83776"},{"cve":"CVE-2026-83777","month":"2026-10","title":"Windows Bluetooth Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bluetooth Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83777"},{"cve":"CVE-2026-83778","month":"2026-10","title":"Microsoft Internet Messaging API Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Internet Messaging API","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83778"},{"cve":"CVE-2026-83779","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83779"},{"cve":"CVE-2026-83780","month":"2026-10","title":"Windows CCFFilter Driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows CCFFilter Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83780"},{"cve":"CVE-2026-83781","month":"2026-10","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Program Compatibility Assistant Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-170"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83781"},{"cve":"CVE-2026-83782","month":"2026-10","title":"Windows Shell Remote Code Execution Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83782"},{"cve":"CVE-2026-83783","month":"2026-10","title":"Windows Management Instrumentation Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Instrumentation","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83783"},{"cve":"CVE-2026-83784","month":"2026-10","title":"Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Encrypting File System (EFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-36"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83784"},{"cve":"CVE-2026-83785","month":"2026-10","title":"Windows COM+ Event System Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows COM+ Event System Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83785"},{"cve":"CVE-2026-83786","month":"2026-10","title":"Windows NTFS Information Disclosure Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-209"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83786"},{"cve":"CVE-2026-83787","month":"2026-10","title":"Windows DHCP Server Security Feature Bypass Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-288"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83787"},{"cve":"CVE-2026-83788","month":"2026-10","title":"Windows rndismp6.sys Information Disclosure Vulnerability","family":"Windows","component":"Windows RNDIS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83788"},{"cve":"CVE-2026-83789","month":"2026-10","title":"Windows SMB Client Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SMB Client","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83789"},{"cve":"CVE-2026-83790","month":"2026-10","title":"Windows Hello Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83790"},{"cve":"CVE-2026-83791","month":"2026-10","title":"Windows Virtual Input Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Virtual Input","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-283"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83791"},{"cve":"CVE-2026-83792","month":"2026-10","title":"Windows Device Install Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Install Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83792"},{"cve":"CVE-2026-83793","month":"2026-10","title":"Windows Update Orchestrator Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update Orchestrator Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83793"},{"cve":"CVE-2026-83794","month":"2026-10","title":"Windows Portable Device MTP Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows Portable Device MTP Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83794"},{"cve":"CVE-2026-83795","month":"2026-10","title":"Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability","family":"Windows","component":"Windows IKE Extension","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83795"},{"cve":"CVE-2026-83796","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83796"},{"cve":"CVE-2026-83797","month":"2026-10","title":"Windows Partition Management Driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows Partition Management Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83797"},{"cve":"CVE-2026-83798","month":"2026-10","title":"Windows Update Stack Spoofing Vulnerability","family":"Windows","component":"Windows Update Stack","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-347","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83798"},{"cve":"CVE-2026-83826","month":"2026-10","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83826"},{"cve":"CVE-2026-83827","month":"2026-10","title":"Windows Bluetooth Port Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bluetooth Port Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83827"},{"cve":"CVE-2026-83828","month":"2026-10","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","family":"Windows","component":"Windows MIDI Service Module","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83828"},{"cve":"CVE-2026-83829","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83829"},{"cve":"CVE-2026-83830","month":"2026-10","title":"Windows COM+ Event System Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows COM+ Event System Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83830"},{"cve":"CVE-2026-83832","month":"2026-10","title":"Windows Spaceport.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83832"},{"cve":"CVE-2026-83833","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83833"},{"cve":"CVE-2026-83834","month":"2026-10","title":"Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel-Mode Drivers","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83834"},{"cve":"CVE-2026-83835","month":"2026-10","title":"Windows Common Log File System Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows Common Log File System Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126","CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83835"},{"cve":"CVE-2026-83836","month":"2026-10","title":"Windows Event Tracing Remote Code Execution Vulnerability","family":"Windows","component":"Windows Event Tracing","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83836"},{"cve":"CVE-2026-83837","month":"2026-10","title":"Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel-Mode Drivers","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-441"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83837"},{"cve":"CVE-2026-83838","month":"2026-10","title":"Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bluetooth A2DP driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83838"},{"cve":"CVE-2026-83839","month":"2026-10","title":"Windows Hyper-V Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83839"},{"cve":"CVE-2026-83840","month":"2026-10","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83840"},{"cve":"CVE-2026-83841","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83841"},{"cve":"CVE-2026-83842","month":"2026-10","title":"Windows TCP/IP Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83842"},{"cve":"CVE-2026-83843","month":"2026-10","title":"Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability","family":"Windows","component":"Windows Internet Key Exchange (IKE) Protocol","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83843"},{"cve":"CVE-2026-83844","month":"2026-10","title":"Windows Paint Remote Code Execution Vulnerability","family":"Apps","component":"Windows Paint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83844"},{"cve":"CVE-2026-83845","month":"2026-10","title":"Windows Internet (wininet.dll) Spoofing Vulnerability","family":"Windows","component":"Windows Internet (wininet.dll)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-290"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83845"},{"cve":"CVE-2026-83846","month":"2026-10","title":"Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability","family":"Windows","component":"Connected Devices Platform Service (Cdpsvc)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83846"},{"cve":"CVE-2026-83847","month":"2026-10","title":"Microsoft Account Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Account","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83847"},{"cve":"CVE-2026-83848","month":"2026-10","title":"Windows COM+ Event System Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows COM+ Event System Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83848"},{"cve":"CVE-2026-83849","month":"2026-10","title":"Windows Hello Information Disclosure Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83849"},{"cve":"CVE-2026-83850","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83850"},{"cve":"CVE-2026-83851","month":"2026-10","title":"Windows Partition Management Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Partition Management Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83851"},{"cve":"CVE-2026-83852","month":"2026-10","title":"Windows Bind Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bind Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83852"},{"cve":"CVE-2026-83853","month":"2026-10","title":"Windows Hello Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83853"},{"cve":"CVE-2026-83854","month":"2026-10","title":"Windows Notification Information Disclosure Vulnerability","family":"Windows","component":"Windows Notification","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83854"},{"cve":"CVE-2026-83855","month":"2026-10","title":"Windows WLAN Service Denial of Service Vulnerability","family":"Windows","component":"Windows WLAN Service","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83855"},{"cve":"CVE-2026-83856","month":"2026-10","title":"Windows Event Logging Service Remote Code Execution Vulnerability","family":"Windows","component":"Windows Event Logging Service","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83856"},{"cve":"CVE-2026-83857","month":"2026-10","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83857"},{"cve":"CVE-2026-83859","month":"2026-10","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83859"},{"cve":"CVE-2026-83860","month":"2026-10","title":"Windows GDI Denial of Service Vulnerability","family":"Windows","component":"Windows GDI","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83860"},{"cve":"CVE-2026-83861","month":"2026-10","title":"Windows Remote Desktop Protocol Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Desktop Protocol","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83861"},{"cve":"CVE-2026-83862","month":"2026-10","title":"Windows Network Load Balancing Remote Code Execution Vulnerability","family":"Windows","component":"Windows Network Load Balancing","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83862"},{"cve":"CVE-2026-83863","month":"2026-10","title":"Servicing Stack Updates Elevation of Privilege Vulnerability","family":"Windows","component":"Servicing Stack Updates","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83863"},{"cve":"CVE-2026-83864","month":"2026-10","title":"Windows NTFS Information Disclosure Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-290"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83864"},{"cve":"CVE-2026-83865","month":"2026-10","title":"Windows Internet (wininet.dll) Tampering Vulnerability","family":"Windows","component":"Windows Internet (wininet.dll)","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83865"},{"cve":"CVE-2026-83866","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83866"},{"cve":"CVE-2026-83867","month":"2026-10","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83867"},{"cve":"CVE-2026-83868","month":"2026-10","title":"Microsoft Bluetooth Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Bluetooth Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83868"},{"cve":"CVE-2026-83869","month":"2026-10","title":"Windows  Domain Name Service Remote Code Execution Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83869"},{"cve":"CVE-2026-83870","month":"2026-10","title":"Windows Aggregated Data Platform Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Aggregated Data Platform Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83870"},{"cve":"CVE-2026-83871","month":"2026-10","title":"Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability","family":"Windows","component":"OpenSSH for Windows","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83871"},{"cve":"CVE-2026-83872","month":"2026-10","title":"Windows TCP/IP Local Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-681"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83872"},{"cve":"CVE-2026-83873","month":"2026-10","title":"Windows Shell Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83873"},{"cve":"CVE-2026-83874","month":"2026-10","title":"Windows Event Tracing Remote Code Execution Vulnerability","family":"Windows","component":"Windows Event Tracing","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83874"},{"cve":"CVE-2026-83875","month":"2026-10","title":"Windows Human Interface Device Information Disclosure Vulnerability","family":"Windows","component":"HID Parser Library","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83875"},{"cve":"CVE-2026-83876","month":"2026-10","title":"Windows Shell Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83876"},{"cve":"CVE-2026-83877","month":"2026-10","title":"Windows Devices Human Interface Elevation of Privilege Vulnerability","family":"Windows","component":"HID Parser Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83877"},{"cve":"CVE-2026-83879","month":"2026-10","title":"Windows Overlay Filter Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83879"},{"cve":"CVE-2026-83881","month":"2026-10","title":"Windows exFAT File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows exFAT File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83881"},{"cve":"CVE-2026-83882","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83882"},{"cve":"CVE-2026-83883","month":"2026-10","title":"Windows Win32k Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83883"},{"cve":"CVE-2026-83884","month":"2026-10","title":"Windows Human Interface Device Information Disclosure Vulnerability","family":"Windows","component":"HID Parser Library","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83884"},{"cve":"CVE-2026-83885","month":"2026-10","title":"Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability","family":"Windows","component":"Windows Virtualization-Based Security (VBS) Enclave","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":5.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-326"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83885"},{"cve":"CVE-2026-83886","month":"2026-10","title":"Windows Update Orchestrator Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update Orchestrator Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83886"},{"cve":"CVE-2026-83887","month":"2026-10","title":"HID Parser Library Information Disclosure Vulnerability","family":"Windows","component":"HID Parser Library","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83887"},{"cve":"CVE-2026-83888","month":"2026-10","title":"Windows CD-ROM Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows CD-ROM Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83888"},{"cve":"CVE-2026-83889","month":"2026-10","title":"Windows DNS Server Remote Code Execution Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-763"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83889"},{"cve":"CVE-2026-83891","month":"2026-10","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83891"},{"cve":"CVE-2026-83892","month":"2026-10","title":"Windows Human Interface Device Information Disclosure Vulnerability","family":"Windows","component":"HID Parser Library","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83892"},{"cve":"CVE-2026-83893","month":"2026-10","title":"Windows Clipboard User Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Clipboard User Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83893"},{"cve":"CVE-2026-83895","month":"2026-10","title":"Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83895"},{"cve":"CVE-2026-83896","month":"2026-10","title":"Windows Direct Composition Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Direct Composition","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83896"},{"cve":"CVE-2026-83897","month":"2026-10","title":"Windows Win32 Kernel Subsystem Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83897"},{"cve":"CVE-2026-83898","month":"2026-10","title":"HID Parser Library Information Disclosure Vulnerability","family":"Windows","component":"HID Parser Library","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83898"},{"cve":"CVE-2026-83899","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83899"},{"cve":"CVE-2026-83900","month":"2026-10","title":"Windows Bind Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bind Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83900"},{"cve":"CVE-2026-83901","month":"2026-10","title":"Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83901"},{"cve":"CVE-2026-83902","month":"2026-10","title":"Windows Direct Composition Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Direct Composition","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83902"},{"cve":"CVE-2026-83903","month":"2026-10","title":"Windows Direct Composition Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Direct Composition","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83903"},{"cve":"CVE-2026-83904","month":"2026-10","title":"HID Parser Library Information Disclosure Vulnerability","family":"Windows","component":"HID Parser Library","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83904"},{"cve":"CVE-2026-83905","month":"2026-10","title":"Windows Shell Information Disclosure Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83905"},{"cve":"CVE-2026-83906","month":"2026-10","title":"Windows Shell Spoofing Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-303"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83906"},{"cve":"CVE-2026-83907","month":"2026-10","title":"Windows Hello Information Disclosure Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83907"},{"cve":"CVE-2026-83908","month":"2026-10","title":"RPC Runtime Elevation of Privilege Vulnerability","family":"Windows","component":"RPC Runtime","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-763"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83908"},{"cve":"CVE-2026-83909","month":"2026-10","title":"Windows Win32 Kernel Subsystem Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83909"},{"cve":"CVE-2026-83910","month":"2026-10","title":"RPC Runtime Library Remote Code Execution Vulnerability","family":"Windows","component":"RPC Runtime","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83910"},{"cve":"CVE-2026-83911","month":"2026-10","title":"Windows Storage Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83911"},{"cve":"CVE-2026-83912","month":"2026-10","title":"Windows Direct Composition Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Direct Composition","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83912"},{"cve":"CVE-2026-83913","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83913"},{"cve":"CVE-2026-83914","month":"2026-10","title":"Microsoft XML Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft XML","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83914"},{"cve":"CVE-2026-83915","month":"2026-10","title":"Windows Diagnostic Policy Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Diagnostic Policy Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83915"},{"cve":"CVE-2026-83916","month":"2026-10","title":"Windows Error Reporting Remote Code Execution Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83916"},{"cve":"CVE-2026-83917","month":"2026-10","title":"Windows ALPC Elevation of Privilege Vulnerability","family":"Windows","component":"Windows ALPC","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83917"},{"cve":"CVE-2026-83918","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83918"},{"cve":"CVE-2026-83919","month":"2026-10","title":"Microsoft Internet Messaging API Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Internet Messaging API","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83919"},{"cve":"CVE-2026-83920","month":"2026-10","title":"Windows Search Service Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83920"},{"cve":"CVE-2026-83921","month":"2026-10","title":"Windows Search Service Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83921"},{"cve":"CVE-2026-83922","month":"2026-10","title":"Windows Direct Composition Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Direct Composition","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83922"},{"cve":"CVE-2026-83923","month":"2026-10","title":"Microsoft OpenSSH for Windows Remote Code Execution Vulnerability","family":"Windows","component":"OpenSSH for Windows","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-23"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83923"},{"cve":"CVE-2026-83924","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83924"},{"cve":"CVE-2026-83925","month":"2026-10","title":"Windows Kernel Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908","CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83925"},{"cve":"CVE-2026-83926","month":"2026-10","title":"Windows Hello Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Hello","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83926"},{"cve":"CVE-2026-83927","month":"2026-10","title":"Windows Registry Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Registry","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83927"},{"cve":"CVE-2026-83928","month":"2026-10","title":"Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Local Security Authority Subsystem Service (LSASS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83928"},{"cve":"CVE-2026-83929","month":"2026-10","title":"Windows GDI Remote Code Execution Vulnerability","family":"Windows","component":"Windows GDI","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83929"},{"cve":"CVE-2026-83930","month":"2026-10","title":"Windows Update Orchestrator Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update Orchestrator Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83930"},{"cve":"CVE-2026-83931","month":"2026-10","title":"Windows Hyper-V Remote Code Execution Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83931"},{"cve":"CVE-2026-83932","month":"2026-10","title":"Windows Group Policy Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Group Policy","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83932"},{"cve":"CVE-2026-83933","month":"2026-10","title":"Windows Update Orchestrator Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Update Orchestrator Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83933"},{"cve":"CVE-2026-83934","month":"2026-10","title":"Windows GDI+ Remote Code Execution Vulnerability","family":"Windows","component":"Windows GDI+","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83934"},{"cve":"CVE-2026-83935","month":"2026-10","title":"Microsoft XML Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft XML","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83935"},{"cve":"CVE-2026-83943","month":"2026-10","title":"Azure API Center Information Disclosure Vulnerability","family":"Azure","component":"Azure API Center","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Critical","cvss":8.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83943"},{"cve":"CVE-2026-83945","month":"2026-10","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83945"},{"cve":"CVE-2026-83947","month":"2026-10","title":"Azure Event Grid Spoofing Vulnerability","family":"Azure","component":"Azure Event Grid","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83947"},{"cve":"CVE-2026-84007","month":"2026-10","title":"Remote Desktop Gateway Service Information Disclosure Vulnerability","family":"Windows","component":"Remote Desktop Gateway Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84007"},{"cve":"CVE-2026-84008","month":"2026-10","title":".NET Denial of Service Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84008"},{"cve":"CVE-2026-84009","month":"2026-10","title":"Windows Projected File System Tampering Vulnerability","family":"Windows","component":"Windows Projected File System","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84009"},{"cve":"CVE-2026-84011","month":"2026-10","title":"Windows SMB Client Security Feature Bypass Vulnerability","family":"Windows","component":"Windows SMB Client","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84011"},{"cve":"CVE-2026-84012","month":"2026-10","title":"Windows Remote Desktop Services Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Gateway Service","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84012"},{"cve":"CVE-2026-84013","month":"2026-10","title":"Windows Telephony Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84013"},{"cve":"CVE-2026-84014","month":"2026-10","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84014"},{"cve":"CVE-2026-84015","month":"2026-10","title":"Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability","family":"Windows","component":"Remote Access Point-to-Point Protocol (PPP) EAP-TLS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84015"},{"cve":"CVE-2026-84016","month":"2026-10","title":"Windows EAPHost Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows EAPHost Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84016"},{"cve":"CVE-2026-84017","month":"2026-10","title":"Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84017"},{"cve":"CVE-2026-84018","month":"2026-10","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84018"},{"cve":"CVE-2026-84019","month":"2026-10","title":"Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Advanced Rasterization Platform","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84019"},{"cve":"CVE-2026-84020","month":"2026-10","title":"Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84020"},{"cve":"CVE-2026-85318","month":"2026-10","title":"Servicing Stack Updates Elevation of Privilege Vulnerability","family":"Windows","component":"Servicing Stack Updates","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85318"},{"cve":"CVE-2026-85319","month":"2026-10","title":"Active Directory Federation Services (AD FS) Denial of Service Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85319"},{"cve":"CVE-2026-85320","month":"2026-10","title":"Windows Print Spooler Components Information Disclosure Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85320"},{"cve":"CVE-2026-85321","month":"2026-10","title":"Active Directory Federation Services (AD FS) Denial of Service Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85321"},{"cve":"CVE-2026-85322","month":"2026-10","title":"Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85322"},{"cve":"CVE-2026-85323","month":"2026-10","title":"Network Device Enrollment Service (NDES) Spoofing Vulnerability","family":"Windows","component":"Network Device Enrollment Service (NDES)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85323"},{"cve":"CVE-2026-85324","month":"2026-10","title":"Active Directory Federation Services (AD FS) Denial of Service Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-789"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85324"},{"cve":"CVE-2026-85327","month":"2026-10","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85327"},{"cve":"CVE-2026-85328","month":"2026-10","title":"Windows Projected File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Projected File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85328"},{"cve":"CVE-2026-85329","month":"2026-10","title":"Microsoft Account Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Account","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85329"},{"cve":"CVE-2026-85331","month":"2026-10","title":"Windows Device Association Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85331"},{"cve":"CVE-2026-85332","month":"2026-10","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85332"},{"cve":"CVE-2026-85333","month":"2026-10","title":"Windows Performance Monitor Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Performance Monitor","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85333"},{"cve":"CVE-2026-85334","month":"2026-10","title":"Windows Message Queuing Queue Manager Information Disclosure Vulnerability","family":"Windows","component":"Windows Message Queuing Queue Manager","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85334"},{"cve":"CVE-2026-85336","month":"2026-10","title":"Windows Device Association Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85336"},{"cve":"CVE-2026-85337","month":"2026-10","title":"Windows Remote Desktop Client Information Disclosure Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85337"},{"cve":"CVE-2026-85338","month":"2026-10","title":"Microsoft Graphics Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85338"},{"cve":"CVE-2026-85339","month":"2026-10","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85339"},{"cve":"CVE-2026-85340","month":"2026-10","title":"Microsoft Office Click-To-Run Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office Click-To-Run","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85340"},{"cve":"CVE-2026-85341","month":"2026-10","title":"Windows USB Video Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Video Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85341"},{"cve":"CVE-2026-85342","month":"2026-10","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85342"},{"cve":"CVE-2026-85343","month":"2026-10","title":"Windows Hyper-V Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85343"},{"cve":"CVE-2026-85352","month":"2026-10","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85352"},{"cve":"CVE-2026-85353","month":"2026-10","title":"Windows Print Spooler Components Information Disclosure Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85353"},{"cve":"CVE-2026-85354","month":"2026-10","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85354"},{"cve":"CVE-2026-85355","month":"2026-10","title":"Windows Common Log File System Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Common Log File System Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-829"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85355"},{"cve":"CVE-2026-85356","month":"2026-10","title":"Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Volume Manager Extension Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85356"},{"cve":"CVE-2026-85357","month":"2026-10","title":"Windows Phone Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Phone Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85357"},{"cve":"CVE-2026-85358","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85358"},{"cve":"CVE-2026-85359","month":"2026-10","title":"Windows Performance Monitor Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Performance Monitor","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85359"},{"cve":"CVE-2026-85361","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85361"},{"cve":"CVE-2026-85362","month":"2026-10","title":"Windows Management Instrumentation Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Instrumentation","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-763"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85362"},{"cve":"CVE-2026-85363","month":"2026-10","title":".NET Framework Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET Framework","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85363"},{"cve":"CVE-2026-85364","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85364"},{"cve":"CVE-2026-85365","month":"2026-10","title":"Servicing Stack Updates Elevation of Privilege Vulnerability","family":"Windows","component":"Servicing Stack Updates","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85365"},{"cve":"CVE-2026-85366","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85366"},{"cve":"CVE-2026-85367","month":"2026-10","title":"Windows Cash Drawer Protocol Provider Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cash Drawer Protocol Provider","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85367"},{"cve":"CVE-2026-85368","month":"2026-10","title":"Windows TCP/IP Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85368"},{"cve":"CVE-2026-85369","month":"2026-10","title":"Windows Hyper-V Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege","Information Disclosure"],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85369"},{"cve":"CVE-2026-85370","month":"2026-10","title":"WebDAV Elevation of Privilege Vulnerability","family":"Windows","component":"WebDAV","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85370"},{"cve":"CVE-2026-85371","month":"2026-10","title":"Network Policy Server (NPS) Remote Code Execution Vulnerability","family":"Windows","component":"Network Policy Server (NPS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85371"},{"cve":"CVE-2026-85372","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85372"},{"cve":"CVE-2026-85373","month":"2026-10","title":"Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Plug and Play (UPnP) Device Host","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85373"},{"cve":"CVE-2026-85374","month":"2026-10","title":"Windows Installer Information Disclosure Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85374"},{"cve":"CVE-2026-85375","month":"2026-10","title":"Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Plug and Play (UPnP) Device Host","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85375"},{"cve":"CVE-2026-85376","month":"2026-10","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85376"},{"cve":"CVE-2026-85377","month":"2026-10","title":"Windows CD-ROM Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows CD-ROM Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85377"},{"cve":"CVE-2026-85790","month":"2026-10","title":"Microsoft QUIC Information Disclosure Vulnerability","family":"Windows","component":"Microsoft QUIC","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85790"},{"cve":"CVE-2026-85791","month":"2026-10","title":"Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Encrypting File System (EFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85791"},{"cve":"CVE-2026-85792","month":"2026-10","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85792"},{"cve":"CVE-2026-85793","month":"2026-10","title":"Windows Sysmain Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Sysmain Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85793"},{"cve":"CVE-2026-85794","month":"2026-10","title":"Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85794"},{"cve":"CVE-2026-85795","month":"2026-10","title":"Windows Text Services Framework Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Text Services Framework","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85795"},{"cve":"CVE-2026-85796","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-197","CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85796"},{"cve":"CVE-2026-85797","month":"2026-10","title":"Windows GDI Information Disclosure Vulnerability","family":"Windows","component":"Windows GDI","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85797"},{"cve":"CVE-2026-85798","month":"2026-10","title":"Windows Distributed File System (DFS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Distributed File System (DFS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85798"},{"cve":"CVE-2026-85799","month":"2026-10","title":"Network Policy Server (NPS) Remote Code Execution Vulnerability","family":"Windows","component":"Network Policy Server (NPS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85799"},{"cve":"CVE-2026-85800","month":"2026-10","title":"Windows Error Reporting Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85800"},{"cve":"CVE-2026-85802","month":"2026-10","title":"Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85802"},{"cve":"CVE-2026-85803","month":"2026-10","title":"Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Camera Frame Server Monitor","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85803"},{"cve":"CVE-2026-85804","month":"2026-10","title":"Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85804"},{"cve":"CVE-2026-85805","month":"2026-10","title":"Microsoft PowerShell Security Feature Bypass Vulnerability","family":"Windows","component":"Windows PowerShell","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-358"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85805"},{"cve":"CVE-2026-85806","month":"2026-10","title":"Network Policy Server (NPS) Remote Code Execution Vulnerability","family":"Windows","component":"Network Policy Server (NPS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85806"},{"cve":"CVE-2026-85807","month":"2026-10","title":"Windows USB Video Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Video Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85807"},{"cve":"CVE-2026-85808","month":"2026-10","title":"Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85808"},{"cve":"CVE-2026-85809","month":"2026-10","title":"Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85809"},{"cve":"CVE-2026-85810","month":"2026-10","title":"Windows Telephony Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Telephony Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85810"},{"cve":"CVE-2026-85811","month":"2026-10","title":"Network Policy Server (NPS) Remote Code Execution Vulnerability","family":"Windows","component":"Network Policy Server (NPS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85811"},{"cve":"CVE-2026-85812","month":"2026-10","title":"Windows Bind Filter Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows Bind Filter Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-552"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85812"},{"cve":"CVE-2026-85814","month":"2026-10","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85814"},{"cve":"CVE-2026-85815","month":"2026-10","title":"Windows Device Association Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85815"},{"cve":"CVE-2026-85816","month":"2026-10","title":"Windows Wi-Fi Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows Wi-Fi Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85816"},{"cve":"CVE-2026-85817","month":"2026-10","title":"Microsoft PowerShell Remote Code Execution Vulnerability","family":"Windows","component":"Windows PowerShell","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-807"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85817"},{"cve":"CVE-2026-85818","month":"2026-10","title":"Windows Schannel Spoofing Vulnerability","family":"Windows","component":"Windows Schannel","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":9.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85818"},{"cve":"CVE-2026-85820","month":"2026-10","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85820"},{"cve":"CVE-2026-85821","month":"2026-10","title":"Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85821"},{"cve":"CVE-2026-85822","month":"2026-10","title":"Windows exFAT File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows exFAT File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85822"},{"cve":"CVE-2026-85823","month":"2026-10","title":"Windows Composite Image File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Composite Image File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85823"},{"cve":"CVE-2026-85824","month":"2026-10","title":"Windows Composite Image File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Composite Image File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85824"},{"cve":"CVE-2026-85825","month":"2026-10","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85825"},{"cve":"CVE-2026-85826","month":"2026-10","title":"Windows Fast FAT Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Fast FAT Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85826"},{"cve":"CVE-2026-85827","month":"2026-10","title":"WebDAV Elevation of Privilege Vulnerability","family":"Windows","component":"WebDAV","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85827"},{"cve":"CVE-2026-85828","month":"2026-10","title":"WebDAV Elevation of Privilege Vulnerability","family":"Windows","component":"WebDAV","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85828"},{"cve":"CVE-2026-85829","month":"2026-10","title":"Windows Wired AutoConfig Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Wired AutoConfig Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85829"},{"cve":"CVE-2026-85830","month":"2026-10","title":"Windows Installer Information Disclosure Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85830"},{"cve":"CVE-2026-85831","month":"2026-10","title":"Windows Biometric Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Biometric Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85831"},{"cve":"CVE-2026-85832","month":"2026-10","title":"Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Background Intelligent Transfer Service (BITS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85832"},{"cve":"CVE-2026-85833","month":"2026-10","title":"Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Modern Device Management (MDM)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85833"},{"cve":"CVE-2026-85834","month":"2026-10","title":"Windows TCP/IP Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85834"},{"cve":"CVE-2026-85835","month":"2026-10","title":"Servicing Stack Updates Information Disclosure Vulnerability","family":"Windows","component":"Servicing Stack Updates","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85835"},{"cve":"CVE-2026-85836","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85836"},{"cve":"CVE-2026-85837","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85837"},{"cve":"CVE-2026-85840","month":"2026-10","title":"Windows Event Viewer Information Disclosure Vulnerability","family":"Windows","component":"Windows Event Viewer","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-552"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85840"},{"cve":"CVE-2026-85841","month":"2026-10","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85841"},{"cve":"CVE-2026-85842","month":"2026-10","title":"Windows Image Acquisition Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Image Acquisition","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-134"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85842"},{"cve":"CVE-2026-85843","month":"2026-10","title":"Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Background Intelligent Transfer Service (BITS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85843"},{"cve":"CVE-2026-85846","month":"2026-10","title":"Web Account Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Web Account Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85846"},{"cve":"CVE-2026-85847","month":"2026-10","title":"Windows Print Spooler Components Information Disclosure Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85847"},{"cve":"CVE-2026-85848","month":"2026-10","title":"Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Background Intelligent Transfer Service (BITS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85848"},{"cve":"CVE-2026-85849","month":"2026-10","title":"Windows AppX Deployment Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows AppX Deployment Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85849"},{"cve":"CVE-2026-85850","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-763"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85850"},{"cve":"CVE-2026-85851","month":"2026-10","title":"Windows SmartScreen Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SmartScreen","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85851"},{"cve":"CVE-2026-85852","month":"2026-10","title":"Windows Management Instrumentation Information Disclosure Vulnerability","family":"Windows","component":"Windows Management Instrumentation","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85852"},{"cve":"CVE-2026-85853","month":"2026-10","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85853"},{"cve":"CVE-2026-85854","month":"2026-10","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85854"},{"cve":"CVE-2026-85855","month":"2026-10","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85855"},{"cve":"CVE-2026-85856","month":"2026-10","title":"Internet Connection Sharing (ICS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Internet Connection Sharing (ICS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85856"},{"cve":"CVE-2026-85857","month":"2026-10","title":"Windows Kernel-Mode Drivers Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel-Mode Drivers","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-532"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85857"},{"cve":"CVE-2026-85858","month":"2026-10","title":"Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85858"},{"cve":"CVE-2026-85859","month":"2026-10","title":"Windows Message Queuing Queue Manager Denial of Service Vulnerability","family":"Windows","component":"Windows Message Queuing Queue Manager","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85859"},{"cve":"CVE-2026-85860","month":"2026-10","title":"Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Message Queuing Queue Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85860"},{"cve":"CVE-2026-85861","month":"2026-10","title":"Clipboard User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Clipboard User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85861"},{"cve":"CVE-2026-85863","month":"2026-10","title":"Clipboard User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Clipboard User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85863"},{"cve":"CVE-2026-85864","month":"2026-10","title":"Python Elevation of Privilege Vulnerability","family":"Windows","component":"Python","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-641"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85864"},{"cve":"CVE-2026-85865","month":"2026-10","title":"Windows DHCP Server Security Feature Bypass Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-288"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85865"},{"cve":"CVE-2026-85866","month":"2026-10","title":"Windows ALPC Information Disclosure Vulnerability","family":"Windows","component":"Windows ALPC","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85866"},{"cve":"CVE-2026-85867","month":"2026-10","title":"Windows Remote Access Connection Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Access Connection Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85867"},{"cve":"CVE-2026-85868","month":"2026-10","title":"Windows Common Log File System Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Common Log File System Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85868"},{"cve":"CVE-2026-85869","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85869"},{"cve":"CVE-2026-85870","month":"2026-10","title":"Windows Common Log File System Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Common Log File System Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85870"},{"cve":"CVE-2026-85871","month":"2026-10","title":"Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel-Mode Drivers","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85871"},{"cve":"CVE-2026-85872","month":"2026-10","title":"Windows Storage VSP Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage VSP Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85872"},{"cve":"CVE-2026-85873","month":"2026-10","title":"Skype for Business Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Skype for Business and Microsoft Lync","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-639"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85873"},{"cve":"CVE-2026-85874","month":"2026-10","title":"Windows Message Queuing Queue Manager Remote Code Execution Vulnerability","family":"Windows","component":"Windows Message Queuing Queue Manager","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85874"},{"cve":"CVE-2026-85876","month":"2026-10","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85876"},{"cve":"CVE-2026-85879","month":"2026-10","title":"Windows Subsystem for Linux Elevation of Privilege Vulnerability","family":"Open Source Software","component":"Windows Subsystem for Linux","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85879"},{"cve":"CVE-2026-85881","month":"2026-10","title":"Microsoft Office Graphics Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Graphics Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85881"},{"cve":"CVE-2026-85884","month":"2026-10","title":"Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Health and Optimized Experiences Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85884"},{"cve":"CVE-2026-85886","month":"2026-10","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85886"},{"cve":"CVE-2026-85888","month":"2026-10","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85888"},{"cve":"CVE-2026-85891","month":"2026-10","title":"Azure HDInsight Information Disclosure Vulnerability","family":"Azure","component":"Azure HDInsight","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-200"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85891"},{"cve":"CVE-2026-85900","month":"2026-10","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85900"},{"cve":"CVE-2026-85901","month":"2026-10","title":"Windows Graphics Component Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - GRFX","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85901"},{"cve":"CVE-2026-85902","month":"2026-10","title":"Windows Direct Composition Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Direct Composition","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85902"},{"cve":"CVE-2026-85903","month":"2026-10","title":"Windows  Domain Name Service Remote Code Execution Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85903"},{"cve":"CVE-2026-85904","month":"2026-10","title":"Windows Device Association Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85904"},{"cve":"CVE-2026-85905","month":"2026-10","title":"Windows UI Immersive Server API Elevation of Privilege Vulnerability","family":"Windows","component":"Windows UI Immersive Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85905"},{"cve":"CVE-2026-85906","month":"2026-10","title":"Windows Direct Composition Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Direct Composition","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85906"},{"cve":"CVE-2026-85908","month":"2026-10","title":"Windows Graphics Component Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32K - GRFX","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85908"},{"cve":"CVE-2026-85909","month":"2026-10","title":"Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85909"},{"cve":"CVE-2026-85910","month":"2026-10","title":"Windows StateRepository API Information Disclosure Vulnerability","family":"Windows","component":"Windows StateRepository API","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85910"},{"cve":"CVE-2026-85911","month":"2026-10","title":"Windows StateRepository API Elevation of Privilege Vulnerability","family":"Windows","component":"Windows StateRepository API","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85911"},{"cve":"CVE-2026-85912","month":"2026-10","title":"Clipboard User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Clipboard User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85912"},{"cve":"CVE-2026-85914","month":"2026-10","title":"Windows Embedded Mode Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Embedded Mode Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85914"},{"cve":"CVE-2026-85915","month":"2026-10","title":"Windows PCI Bus Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows PCI Bus Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85915"},{"cve":"CVE-2026-85916","month":"2026-10","title":"Azure Active Directory Information Disclosure Vulnerability","family":"Windows","component":"Azure Active Directory","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-359"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85916"},{"cve":"CVE-2026-85918","month":"2026-10","title":"Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Plug and Play (UPnP) Device Host","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85918"},{"cve":"CVE-2026-85919","month":"2026-10","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85919"},{"cve":"CVE-2026-85920","month":"2026-10","title":"Windows BitLocker Elevation of Privilege Vulnerability","family":"Windows","component":"Windows BitLocker","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85920"},{"cve":"CVE-2026-85922","month":"2026-10","title":"Azure Key Vault Security Feature Bypass Vulnerability","family":"Microsoft Office","component":"Azure Key Vault","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85922"},{"cve":"CVE-2026-85925","month":"2026-10","title":"Azure Key Vault Client SDK Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Azure Key Vault","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-923"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85925"},{"cve":"CVE-2026-85926","month":"2026-10","title":"Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Secure Socket Tunneling Protocol (SSTP)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85926"},{"cve":"CVE-2026-85927","month":"2026-10","title":"Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Plug and Play (UPnP) Device Host","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85927"},{"cve":"CVE-2026-85928","month":"2026-10","title":"Windows Volume Manager Extension Driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows Volume Manager Extension Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85928"},{"cve":"CVE-2026-85930","month":"2026-10","title":"Windows Image Acquisition Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Image Acquisition","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85930"},{"cve":"CVE-2026-85931","month":"2026-10","title":"Windows Distributed File System (DFS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Distributed File System (DFS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85931"},{"cve":"CVE-2026-85932","month":"2026-10","title":"Microsoft Office SharePoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-22"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85932"},{"cve":"CVE-2026-85933","month":"2026-10","title":"Windows Print Spooler Components Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Print Spooler Components","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85933"},{"cve":"CVE-2026-85934","month":"2026-10","title":"Windows AppX Deployment Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows AppX Deployment Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85934"},{"cve":"CVE-2026-85935","month":"2026-10","title":"Windows USB Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows USB Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85935"},{"cve":"CVE-2026-85936","month":"2026-10","title":"Windows Shell Remote Code Execution Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85936"},{"cve":"CVE-2026-85938","month":"2026-10","title":"Windows Broadcast DVR User Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85938"},{"cve":"CVE-2026-85939","month":"2026-10","title":"Windows Kernel Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85939"},{"cve":"CVE-2026-85941","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85941"},{"cve":"CVE-2026-85943","month":"2026-10","title":"Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability","family":"Windows","component":"Reliable Multicast Transport Driver (RMCAST)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85943"},{"cve":"CVE-2026-85945","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85945"},{"cve":"CVE-2026-87691","month":"2026-10","title":"Windows Management Services Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Services","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87691"},{"cve":"CVE-2026-87692","month":"2026-10","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87692"},{"cve":"CVE-2026-87693","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87693"},{"cve":"CVE-2026-87694","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87694"},{"cve":"CVE-2026-87695","month":"2026-10","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-829"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87695"},{"cve":"CVE-2026-87696","month":"2026-10","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87696"},{"cve":"CVE-2026-87697","month":"2026-10","title":".NET Remote Code Execution Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87697"},{"cve":"CVE-2026-87698","month":"2026-10","title":"Windows Remote Access Service Infrastructure Information Disclosure Vulnerability","family":"Windows","component":"Windows Remote Access Service Infrastructure","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87698"},{"cve":"CVE-2026-87699","month":"2026-10","title":"Winlogon Elevation of Privilege Vulnerability","family":"Windows","component":"Winlogon","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87699"},{"cve":"CVE-2026-87700","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87700"},{"cve":"CVE-2026-87702","month":"2026-10","title":"Windows Resource Management (MRM) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Resource Management (MRM)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87702"},{"cve":"CVE-2026-87704","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87704"},{"cve":"CVE-2026-87705","month":"2026-10","title":"Windows Hyper-V Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-940"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"vm_escape","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87705"},{"cve":"CVE-2026-87706","month":"2026-10","title":"Windows Storage Spaces Controller Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage Spaces Controller","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87706"},{"cve":"CVE-2026-87707","month":"2026-10","title":"Windows Fax and Scan Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Fax and Scan Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87707"},{"cve":"CVE-2026-87708","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87708"},{"cve":"CVE-2026-87709","month":"2026-10","title":"Windows Host Guardian Service Tampering Vulnerability","family":"Windows","component":"Windows Host Guardian Service","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-250"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87709"},{"cve":"CVE-2026-87710","month":"2026-10","title":"Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Local Security Authority Server (lsasrv)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87710"},{"cve":"CVE-2026-87711","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87711"},{"cve":"CVE-2026-87712","month":"2026-10","title":"Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Quality of Service (QoS) Packet Scheduler","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87712"},{"cve":"CVE-2026-87713","month":"2026-10","title":"Windows Bluetooth Port Driver Remote Code Execution","family":"Windows","component":"Windows Bluetooth Port Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87713"},{"cve":"CVE-2026-87714","month":"2026-10","title":"WebDAV Security Feature Bypass Vulnerability","family":"Windows","component":"WebDAV","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87714"},{"cve":"CVE-2026-87715","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87715"},{"cve":"CVE-2026-87716","month":"2026-10","title":"Windows Storage Spaces Controller Denial of Service Vulnerability","family":"Windows","component":"Windows Storage Spaces Controller","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87716"},{"cve":"CVE-2026-88070","month":"2026-10","title":"Windows BitLocker Elevation of Privilege Vulnerability","family":"Windows","component":"Windows BitLocker","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88070"},{"cve":"CVE-2026-88071","month":"2026-10","title":"Windows Hyper-V Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88071"},{"cve":"CVE-2026-88072","month":"2026-10","title":"Windows Host Guardian Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Host Guardian Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88072"},{"cve":"CVE-2026-88073","month":"2026-10","title":"Windows Graphics Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Graphics Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88073"},{"cve":"CVE-2026-88074","month":"2026-10","title":"Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Virtualization-Based Security (VBS) Enclave","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88074"},{"cve":"CVE-2026-88075","month":"2026-10","title":"Configuration Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Configuration Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-89"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88075"},{"cve":"CVE-2026-88076","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88076"},{"cve":"CVE-2026-88079","month":"2026-10","title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","family":"Windows","component":"Windows MIDI Service Module","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88079"},{"cve":"CVE-2026-88080","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88080"},{"cve":"CVE-2026-88081","month":"2026-10","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88081"},{"cve":"CVE-2026-88082","month":"2026-10","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88082"},{"cve":"CVE-2026-88083","month":"2026-10","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88083"},{"cve":"CVE-2026-88084","month":"2026-10","title":"Microsoft SQL Server Denial of Service Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88084"},{"cve":"CVE-2026-88085","month":"2026-10","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88085"},{"cve":"CVE-2026-88086","month":"2026-10","title":"Microsoft SQL Server Information Disclosure Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88086"},{"cve":"CVE-2026-88088","month":"2026-10","title":"Microsoft SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88088"},{"cve":"CVE-2026-88089","month":"2026-10","title":"Microsoft SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88089"},{"cve":"CVE-2026-88091","month":"2026-10","title":"Windows Management Instrumentation Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Instrumentation","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88091"},{"cve":"CVE-2026-88092","month":"2026-10","title":"ASP.NET Core Tampering Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":9.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-444"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88092"},{"cve":"CVE-2026-88093","month":"2026-10","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88093"},{"cve":"CVE-2026-88094","month":"2026-10","title":"Azure Storage Library Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Storage Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-74"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88094"},{"cve":"CVE-2026-88096","month":"2026-10","title":"Windows DCOM Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DCOM Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88096"},{"cve":"CVE-2026-88098","month":"2026-10","title":"Windows Security Support Provider Interface Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Security Support Provider Interface","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88098"},{"cve":"CVE-2026-88099","month":"2026-10","title":"Windows Failover Cluster Denial of Service Vulnerability","family":"Windows","component":"Windows Failover Cluster","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-248"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88099"},{"cve":"CVE-2026-88100","month":"2026-10","title":"Windows Storage Spaces Controller Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage Spaces Controller","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88100"},{"cve":"CVE-2026-88101","month":"2026-10","title":"Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Input Method Editor (IME)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88101"},{"cve":"CVE-2026-88102","month":"2026-10","title":"Microsoft Failover Cluster Remote Code Execution Vulnerability","family":"Windows","component":"Windows Failover Cluster","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88102"},{"cve":"CVE-2026-88103","month":"2026-10","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88103"},{"cve":"CVE-2026-88105","month":"2026-10","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88105"},{"cve":"CVE-2026-88106","month":"2026-10","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88106"},{"cve":"CVE-2026-88107","month":"2026-10","title":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Cloud Files Mini Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88107"},{"cve":"CVE-2026-88109","month":"2026-10","title":"Microsoft Office Click-To-Run Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office Click-To-Run","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88109"},{"cve":"CVE-2026-88110","month":"2026-10","title":"Windows Graphics Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Graphics Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88110"},{"cve":"CVE-2026-88112","month":"2026-10","title":"Windows  Domain Name Service Remote Code Execution Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88112"},{"cve":"CVE-2026-88113","month":"2026-10","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88113"},{"cve":"CVE-2026-88114","month":"2026-10","title":"Windows  Domain Name Service Remote Code Execution Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88114"},{"cve":"CVE-2026-88115","month":"2026-10","title":"Windows Server for NFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows Server for NFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88115"},{"cve":"CVE-2026-88116","month":"2026-10","title":"Windows  Domain Name Service Remote Code Execution Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88116"},{"cve":"CVE-2026-88117","month":"2026-10","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88117"},{"cve":"CVE-2026-88118","month":"2026-10","title":"Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Background Intelligent Transfer Service (BITS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88118"},{"cve":"CVE-2026-88119","month":"2026-10","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88119"},{"cve":"CVE-2026-88120","month":"2026-10","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88120"},{"cve":"CVE-2026-88121","month":"2026-10","title":"Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Background Intelligent Transfer Service (BITS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88121"},{"cve":"CVE-2026-88122","month":"2026-10","title":"Role: DNS Server Denial of Service Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88122"},{"cve":"CVE-2026-88123","month":"2026-10","title":"Role: DNS Server Denial of Service Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88123"},{"cve":"CVE-2026-88124","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88124"},{"cve":"CVE-2026-88125","month":"2026-10","title":"Role: DNS Server Denial of Service Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88125"},{"cve":"CVE-2026-88126","month":"2026-10","title":"WebDAV Elevation of Privilege Vulnerability","family":"Windows","component":"WebDAV","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88126"},{"cve":"CVE-2026-88127","month":"2026-10","title":"Windows SMB Server Elevation of Privilege Vulnerability","family":"Windows","component":"Windows SMB Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88127"},{"cve":"CVE-2026-88128","month":"2026-10","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88128"},{"cve":"CVE-2026-88129","month":"2026-10","title":"Role: DNS Server Denial of Service Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88129"},{"cve":"CVE-2026-88130","month":"2026-10","title":"Role: DNS Server Denial of Service Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88130"},{"cve":"CVE-2026-88131","month":"2026-10","title":"Microsoft Dataverse Remote Code Execution Vulnerability","family":"Microsoft Dynamics","component":"Microsoft Dataverse","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88131"},{"cve":"CVE-2026-88132","month":"2026-10","title":"Azure Key Vault Information Disclosure Vulnerability","family":"Microsoft Office","component":"Azure Key Vault","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88132"},{"cve":"CVE-2026-88133","month":"2026-10","title":"Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Portable Device Enumerator Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88133"},{"cve":"CVE-2026-88134","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88134"},{"cve":"CVE-2026-88135","month":"2026-10","title":"WebDAV Elevation of Privilege Vulnerability","family":"Windows","component":"WebDAV","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88135"},{"cve":"CVE-2026-88136","month":"2026-10","title":"Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability","family":"Windows","component":"WebDAV","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-41"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88136"},{"cve":"CVE-2026-88137","month":"2026-10","title":"WebDAV Information Disclosure Vulnerability","family":"Windows","component":"WebDAV","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-552"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88137"},{"cve":"CVE-2026-88139","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88139"},{"cve":"CVE-2026-88140","month":"2026-10","title":"Windows Key Storage Provider Information Disclosure Vulnerability","family":"Windows","component":"Windows Key Storage Provider","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88140"},{"cve":"CVE-2026-88141","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88141"},{"cve":"CVE-2026-88142","month":"2026-10","title":"Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Background Intelligent Transfer Service (BITS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88142"},{"cve":"CVE-2026-88143","month":"2026-10","title":"Windows Storage Spaces Controller Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage Spaces Controller","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88143"},{"cve":"CVE-2026-88144","month":"2026-10","title":"Microsoft Office PowerPoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88144"},{"cve":"CVE-2026-88145","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88145"},{"cve":"CVE-2026-88146","month":"2026-10","title":"Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Background Intelligent Transfer Service (BITS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362","CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88146"},{"cve":"CVE-2026-88147","month":"2026-10","title":"Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Secure Socket Tunneling Protocol (SSTP)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88147"},{"cve":"CVE-2026-88149","month":"2026-10","title":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Ancillary Function Driver for WinSock","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88149"},{"cve":"CVE-2026-88150","month":"2026-10","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88150"},{"cve":"CVE-2026-88151","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88151"},{"cve":"CVE-2026-88152","month":"2026-10","title":"Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Background Intelligent Transfer Service (BITS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88152"},{"cve":"CVE-2026-88153","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88153"},{"cve":"CVE-2026-88154","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88154"},{"cve":"CVE-2026-88155","month":"2026-10","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88155"},{"cve":"CVE-2026-88156","month":"2026-10","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88156"},{"cve":"CVE-2026-88157","month":"2026-10","title":"Microsoft OpenSSH for Windows Remote Code Execution Vulnerability","family":"Windows","component":"OpenSSH for Windows","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88157"},{"cve":"CVE-2026-88158","month":"2026-10","title":"Microsoft Digest Authentication Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Digest Authentication","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88158"},{"cve":"CVE-2026-88159","month":"2026-10","title":"Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Background Intelligent Transfer Service (BITS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88159"},{"cve":"CVE-2026-88160","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88160"},{"cve":"CVE-2026-88161","month":"2026-10","title":"Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Local Security Authority (LSA)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88161"},{"cve":"CVE-2026-88162","month":"2026-10","title":"Windows Encrypting File System (EFS) Tampering Vulnerability","family":"Windows","component":"Windows Encrypting File System (EFS)","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88162"},{"cve":"CVE-2026-88163","month":"2026-10","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Not a Vulnerability","labels":["Not a Vulnerability"],"severity":"(none)","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88163"},{"cve":"CVE-2026-88164","month":"2026-10","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88164"},{"cve":"CVE-2026-88165","month":"2026-10","title":"Windows Active Directory Domain Services Remote Code Execution Vulnerability","family":"Windows","component":"Active Directory Domain Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88165"},{"cve":"CVE-2026-88166","month":"2026-10","title":"Microsoft Office SharePoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88166"},{"cve":"CVE-2026-88167","month":"2026-10","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88167"},{"cve":"CVE-2026-88168","month":"2026-10","title":"Windows Bind Filter Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Bind Filter Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88168"},{"cve":"CVE-2026-88169","month":"2026-10","title":"Microsoft Office Word Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88169"},{"cve":"CVE-2026-88171","month":"2026-10","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88171"},{"cve":"CVE-2026-88172","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88172"},{"cve":"CVE-2026-88173","month":"2026-10","title":"Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Background Intelligent Transfer Service (BITS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88173"},{"cve":"CVE-2026-88174","month":"2026-10","title":"Windows Deployment Services Remote Code Execution Vulnerability","family":"Windows","component":"Windows Deployment Services","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88174"},{"cve":"CVE-2026-88175","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88175"},{"cve":"CVE-2026-88177","month":"2026-10","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88177"},{"cve":"CVE-2026-88178","month":"2026-10","title":"Microsoft Office PowerPoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88178"},{"cve":"CVE-2026-88179","month":"2026-10","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88179"},{"cve":"CVE-2026-88180","month":"2026-10","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88180"},{"cve":"CVE-2026-88181","month":"2026-10","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88181"},{"cve":"CVE-2026-88182","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88182"},{"cve":"CVE-2026-88183","month":"2026-10","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88183"},{"cve":"CVE-2026-88184","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88184"},{"cve":"CVE-2026-88185","month":"2026-10","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88185"},{"cve":"CVE-2026-88186","month":"2026-10","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88186"},{"cve":"CVE-2026-88188","month":"2026-10","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88188"},{"cve":"CVE-2026-88189","month":"2026-10","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88189"},{"cve":"CVE-2026-88190","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88190"},{"cve":"CVE-2026-88191","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88191"},{"cve":"CVE-2026-88192","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88192"},{"cve":"CVE-2026-88193","month":"2026-10","title":"Microsoft Scripting Engine Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Scripting Engine","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88193"},{"cve":"CVE-2026-88194","month":"2026-10","title":"Windows DWM Core Library Elevation of Privilege Vulnerability","family":"Windows","component":"Windows DWM Core Library","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88194"},{"cve":"CVE-2026-88195","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126","CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88195"},{"cve":"CVE-2026-88196","month":"2026-10","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88196"},{"cve":"CVE-2026-88197","month":"2026-10","title":"Microsoft Office Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88197"},{"cve":"CVE-2026-88198","month":"2026-10","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88198"},{"cve":"CVE-2026-88200","month":"2026-10","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-270"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88200"},{"cve":"CVE-2026-88201","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88201"},{"cve":"CVE-2026-88202","month":"2026-10","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88202"},{"cve":"CVE-2026-88203","month":"2026-10","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88203"},{"cve":"CVE-2026-88204","month":"2026-10","title":"Microsoft Office SharePoint Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88204"},{"cve":"CVE-2026-88206","month":"2026-10","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88206"},{"cve":"CVE-2026-88207","month":"2026-10","title":"Microsoft Office PowerPoint Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88207"},{"cve":"CVE-2026-88208","month":"2026-10","title":"Microsoft Office SharePoint Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88208"},{"cve":"CVE-2026-88209","month":"2026-10","title":"Microsoft Office SharePoint Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88209"},{"cve":"CVE-2026-88210","month":"2026-10","title":"Microsoft Office Word Security Feature Bypass Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-807"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88210"},{"cve":"CVE-2026-88219","month":"2026-10","title":"RPC Runtime Library Remote Code Execution Vulnerability","family":"Windows","component":"RPC Runtime","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88219"},{"cve":"CVE-2026-88226","month":"2026-10","title":"Windows Storage Port Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows Storage Port Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88226"},{"cve":"CVE-2026-92707","month":"2026-10","title":"MessagePack-CSharp Denial of Service Vulnerability","family":"Other","component":".NET","cna":"GitHub_M","label":"Denial of Service","labels":["Denial of Service"],"severity":"Moderate","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-1325"],"exploited":false,"disclosed":true,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92707"},{"cve":"CVE-2026-94506","month":"2026-10","title":"Microsoft Office Access Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Access","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94506"},{"cve":"CVE-2026-94510","month":"2026-10","title":"Microsoft Bookings Elevation of Privilege Vulnerability","family":"Apps","component":"Microsoft Bookings","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C","cwe":["CWE-639"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94510"},{"cve":"CVE-2026-94512","month":"2026-10","title":"SQL Server Remote Code Execution Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94512"},{"cve":"CVE-2026-94520","month":"2026-10","title":"Microsoft SQL Server Denial of Service Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-134"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94520"},{"cve":"CVE-2026-95904","month":"2026-10","title":"Windows Event Logging Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Event Logging Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95904"},{"cve":"CVE-2026-95943","month":"2026-10","title":"Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability","family":"Windows","component":"Connected Devices Platform Service (Cdpsvc)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95943"},{"cve":"CVE-2026-96044","month":"2026-10","title":"Microsoft Office SharePoint Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":[],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96044"},{"cve":"CVE-2026-96071","month":"2026-10","title":"Windows Media Remote Code Execution Vulnerability","family":"Windows","component":"Windows Media","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96071"},{"cve":"CVE-2026-96096","month":"2026-10","title":"Windows Media Player Remote Code Execution Vulnerability","family":"Windows","component":"Windows Media Player","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96096"},{"cve":"CVE-2026-96108","month":"2026-10","title":"Desktop Window Manager Elevation of Privilege Vulnerability","family":"Windows","component":"Desktop Window Manager","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96108"},{"cve":"CVE-2026-96113","month":"2026-10","title":"Windows  Domain Name Service Remote Code Execution Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96113"},{"cve":"CVE-2026-96118","month":"2026-10","title":"Windows Graphics Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Graphics Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96118"},{"cve":"CVE-2026-96183","month":"2026-10","title":"Windows Health and Optimized Experiences Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Health and Optimized Experiences Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96183"},{"cve":"CVE-2026-96186","month":"2026-10","title":"Microsoft Windows Media Foundation Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-502"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96186"},{"cve":"CVE-2026-96188","month":"2026-10","title":"Microsoft PowerToys Elevation of Privilege Vulnerability","family":"Apps","component":"Microsoft PowerToys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-15"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96188"},{"cve":"CVE-2026-96202","month":"2026-10","title":"Windows Raw Image Extension Remote Code Execution Vulnerability","family":"Windows","component":"Windows Raw Image Extension","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96202"},{"cve":"CVE-2026-96204","month":"2026-10","title":"Azure Arc Elevation of Privilege Vulnerability","family":"Azure","component":"Azure Arc","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C","cwe":["CWE-918"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96204"},{"cve":"CVE-2026-96206","month":"2026-10","title":"Windows Subsystem for Linux Information Disclosure Vulnerability","family":"Open Source Software","component":"Windows Subsystem for Linux","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96206"},{"cve":"CVE-2026-96207","month":"2026-10","title":"Microsoft Partner Center Elevation of Privilege Vulnerability","family":"Azure","component":"Microsoft Partner Center","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96207"},{"cve":"CVE-2026-96209","month":"2026-10","title":"Windows Network File System Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Network File System","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96209"},{"cve":"CVE-2026-96215","month":"2026-10","title":"Windows Autopilot Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Autopilot","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96215"},{"cve":"CVE-2026-96216","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96216"},{"cve":"CVE-2026-96217","month":"2026-10","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96217"},{"cve":"CVE-2026-96218","month":"2026-10","title":"Windows Update Stack Tampering Vulnerability","family":"Windows","component":"Windows Update Stack","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-15"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96218"},{"cve":"CVE-2026-96219","month":"2026-10","title":"Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Local Security Authority Subsystem Service (LSASS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96219"},{"cve":"CVE-2026-96220","month":"2026-10","title":"Windows Assigned Access Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Assigned Access","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-94"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96220"},{"cve":"CVE-2026-96222","month":"2026-10","title":"Active Directory Federation Services (AD FS) Spoofing Vulnerability","family":"Developer Tools","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Critical","cvss":7.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-295"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96222"},{"cve":"CVE-2026-96223","month":"2026-10","title":"Windows Hyper-V Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96223"},{"cve":"CVE-2026-96224","month":"2026-10","title":".NET Remote Code Execution Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96224"},{"cve":"CVE-2026-96225","month":"2026-10","title":".NET Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96225"},{"cve":"CVE-2026-96229","month":"2026-10","title":".NET Information Disclosure Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-183"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96229"},{"cve":"CVE-2026-96230","month":"2026-10","title":"ASP.NET Core Remote Code Execution Vulnerability","family":"Other","component":"ASP.NET Core","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96230"},{"cve":"CVE-2026-96231","month":"2026-10","title":".NET Elevation of Privilege Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96231"},{"cve":"CVE-2026-96232","month":"2026-10","title":".NET Information Disclosure Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96232"},{"cve":"CVE-2026-96233","month":"2026-10","title":"ASP.NET Core Denial of Service Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96233"},{"cve":"CVE-2026-96234","month":"2026-10","title":".NET Information Disclosure Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96234"},{"cve":"CVE-2026-96235","month":"2026-10","title":".NET Remote Code Execution Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96235"},{"cve":"CVE-2026-96236","month":"2026-10","title":"ASP.NET Core Denial of Service Vulnerability","family":"Developer Tools","component":"ASP.NET Core","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96236"},{"cve":"CVE-2026-96237","month":"2026-10","title":".NET Remote Code Execution Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-829"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96237"},{"cve":"CVE-2026-96238","month":"2026-10","title":".NET Security Feature Bypass Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-346"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96238"},{"cve":"CVE-2026-96243","month":"2026-10","title":"Windows WalletService Elevation of Privilege Vulnerability","family":"Windows","component":"Windows WalletService","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96243"},{"cve":"CVE-2026-96244","month":"2026-10","title":"Windows Internal System User Profile Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Internal System User Profile","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96244"},{"cve":"CVE-2026-96245","month":"2026-10","title":"Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96245"},{"cve":"CVE-2026-96246","month":"2026-10","title":"Network Policy Server (NPS) Information Disclosure Vulnerability","family":"Windows","component":"Network Policy Server (NPS)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96246"},{"cve":"CVE-2026-96247","month":"2026-10","title":"Windows Kernel-Mode Drivers Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel-Mode Drivers","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96247"},{"cve":"CVE-2026-96248","month":"2026-10","title":"Windows Host Guardian Service Denial of Service Vulnerability","family":"Windows","component":"Windows Host Guardian Service","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96248"},{"cve":"CVE-2026-96249","month":"2026-10","title":"Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96249"},{"cve":"CVE-2026-96250","month":"2026-10","title":"Windows USB Print Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Print Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96250"},{"cve":"CVE-2026-96251","month":"2026-10","title":"Microsoft PowerShell Remote Code Execution Vulnerability","family":"Developer Tools","component":"Microsoft PowerShell","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-807"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96251"},{"cve":"CVE-2026-96252","month":"2026-10","title":"Active Directory Federation Services (AD FS) Spoofing Vulnerability","family":"Windows","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96252"},{"cve":"CVE-2026-96253","month":"2026-10","title":"Windows USB Print Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Print Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96253"},{"cve":"CVE-2026-96254","month":"2026-10","title":"Windows USB Print Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Print Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96254"},{"cve":"CVE-2026-96300","month":"2026-10","title":"RPC Endpoint Mapper Service Denial of Service Vulnerability","family":"Windows","component":"RPC Endpoint Mapper Service","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96300"},{"cve":"CVE-2026-96301","month":"2026-10","title":"Windows USB Print Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Print Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96301"},{"cve":"CVE-2026-96302","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96302"},{"cve":"CVE-2026-96303","month":"2026-10","title":"Microsoft PowerShell Security Feature Bypass Vulnerability","family":"Developer Tools","component":"Microsoft PowerShell","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-358"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96303"},{"cve":"CVE-2026-96304","month":"2026-10","title":"Windows USB Print Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Print Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96304"},{"cve":"CVE-2026-96305","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96305"},{"cve":"CVE-2026-96306","month":"2026-10","title":"Windows Sysmain Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Sysmain Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96306"},{"cve":"CVE-2026-96307","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96307"},{"cve":"CVE-2026-96308","month":"2026-10","title":"Windows Installer Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Installer","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96308"},{"cve":"CVE-2026-96309","month":"2026-10","title":"Windows Subsystem for Linux Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Subsystem for Linux","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96309"},{"cve":"CVE-2026-96310","month":"2026-10","title":"Windows USB Print Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Print Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96310"},{"cve":"CVE-2026-96311","month":"2026-10","title":"Windows Network List Service Tampering Vulnerability","family":"Windows","component":"Windows Network List Service","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96311"},{"cve":"CVE-2026-96312","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96312"},{"cve":"CVE-2026-96313","month":"2026-10","title":"Windows Push Notifications Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Push Notifications","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96313"},{"cve":"CVE-2026-96314","month":"2026-10","title":"Windows Audio Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Audio Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96314"},{"cve":"CVE-2026-96315","month":"2026-10","title":"Windows Overlay Filter Tampering Vulnerability","family":"Windows","component":"Windows Overlay Filter","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96315"},{"cve":"CVE-2026-96316","month":"2026-10","title":"Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability","family":"Windows","component":"Windows Routing and Remote Access Service (RRAS)","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96316"},{"cve":"CVE-2026-96317","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96317"},{"cve":"CVE-2026-96318","month":"2026-10","title":"Windows Resume Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Resume","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96318"},{"cve":"CVE-2026-96319","month":"2026-10","title":"Windows USB Print Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows USB Print Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96319"},{"cve":"CVE-2026-96320","month":"2026-10","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96320"},{"cve":"CVE-2026-96321","month":"2026-10","title":"Remote Desktop Display Driver Information Disclosure Vulnerability","family":"Windows","component":"Remote Desktop Display Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96321"},{"cve":"CVE-2026-96322","month":"2026-10","title":"Windows Remote Desktop Protocol Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Remote Desktop Protocol","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96322"},{"cve":"CVE-2026-96323","month":"2026-10","title":"Windows Update Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96323"},{"cve":"CVE-2026-96324","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96324"},{"cve":"CVE-2026-96325","month":"2026-10","title":"Windows SMB Server Denial of Service Vulnerability","family":"Windows","component":"Windows SMB Server","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-771"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96325"},{"cve":"CVE-2026-96843","month":"2026-10","title":"WebDAV Elevation of Privilege Vulnerability","family":"Windows","component":"WebDAV","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96843"},{"cve":"CVE-2026-96844","month":"2026-10","title":"Microsoft Bluetooth Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Bluetooth Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"adjacent","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96844"},{"cve":"CVE-2026-96846","month":"2026-10","title":"WebDAV Information Disclosure Vulnerability","family":"Windows","component":"WebDAV","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96846"},{"cve":"CVE-2026-96847","month":"2026-10","title":"WebDAV Elevation of Privilege Vulnerability","family":"Windows","component":"WebDAV","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96847"},{"cve":"CVE-2026-96848","month":"2026-10","title":"Windows Win32 Kernel Subsystem Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96848"},{"cve":"CVE-2026-96849","month":"2026-10","title":"Windows Kernel-Mode Drivers Information Disclosure Vulnerability","family":"Windows","component":"Windows Kernel-Mode Drivers","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96849"},{"cve":"CVE-2026-96850","month":"2026-10","title":"Windows Modern Device Management (MDM) Information Disclosure Vulnerability","family":"Windows","component":"Windows Modern Device Management (MDM)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-908","CWE-170"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96850"},{"cve":"CVE-2026-96851","month":"2026-10","title":"Windows Management Instrumentation Information Disclosure Vulnerability","family":"Windows","component":"Windows Management Instrumentation","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96851"},{"cve":"CVE-2026-96852","month":"2026-10","title":"Windows TCP/IP Elevation of Privilege Vulnerability","family":"Windows","component":"Windows TCP/IP","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96852"},{"cve":"CVE-2026-96853","month":"2026-10","title":"Windows Win32 Kernel Subsystem Information Disclosure Vulnerability","family":"Windows","component":"Windows Win32 Kernel Subsystem","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96853"},{"cve":"CVE-2026-96854","month":"2026-10","title":"Windows Device Association Service Information Disclosure Vulnerability","family":"Windows","component":"Windows Device Association Service","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96854"},{"cve":"CVE-2026-96855","month":"2026-10","title":"Windows Modern Device Management (MDM) Tampering Vulnerability","family":"Windows","component":"Windows Modern Device Management (MDM)","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96855"},{"cve":"CVE-2026-96856","month":"2026-10","title":"Windows Management Instrumentation Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Management Instrumentation","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96856"},{"cve":"CVE-2026-96857","month":"2026-10","title":"Windows Projected File System Information Disclosure Vulnerability","family":"Windows","component":"Windows Projected File System","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-552"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96857"},{"cve":"CVE-2026-96858","month":"2026-10","title":"Windows Security Account Manager Tampering Vulnerability","family":"Windows","component":"Windows Security Account Manager","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96858"},{"cve":"CVE-2026-96859","month":"2026-10","title":"Windows Imaging Component Information Disclosure Vulnerability","family":"Windows","component":"Windows Imaging Component","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96859"},{"cve":"CVE-2026-96860","month":"2026-10","title":"Windows USB Print Driver Information Disclosure Vulnerability","family":"Windows","component":"Windows USB Print Driver","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-170"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96860"},{"cve":"CVE-2026-96861","month":"2026-10","title":"Network Device Enrollment Service (NDES) Denial of Service Vulnerability","family":"Windows","component":"Network Device Enrollment Service (NDES)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96861"},{"cve":"CVE-2026-96862","month":"2026-10","title":"Windows Spaceport.sys Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Spaceport.sys","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96862"},{"cve":"CVE-2026-96863","month":"2026-10","title":"Windows Storage Port Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Storage Port Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"physical","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96863"},{"cve":"CVE-2026-96864","month":"2026-10","title":"Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Failover Cluster Virtual Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96864"},{"cve":"CVE-2026-96865","month":"2026-10","title":"Windows Secure Kernel Mode Information Disclosure Vulnerability","family":"Windows","component":"Windows Secure Kernel Mode","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.6,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96865"},{"cve":"CVE-2026-96866","month":"2026-10","title":"Network Device Enrollment Service (NDES) Denial of Service Vulnerability","family":"Windows","component":"Network Device Enrollment Service (NDES)","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96866"},{"cve":"CVE-2026-96867","month":"2026-10","title":"Windows NTFS Remote Code Execution Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96867"},{"cve":"CVE-2026-96868","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96868"},{"cve":"CVE-2026-96909","month":"2026-10","title":"Windows BitLocker Remote Code Execution Vulnerability","family":"Windows","component":"Windows BitLocker","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96909"},{"cve":"CVE-2026-96910","month":"2026-10","title":"Microsoft Windows Search Component Information Disclosure Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96910"},{"cve":"CVE-2026-96911","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96911"},{"cve":"CVE-2026-96912","month":"2026-10","title":"Windows Client License Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Client License Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96912"},{"cve":"CVE-2026-96913","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96913"},{"cve":"CVE-2026-96914","month":"2026-10","title":"Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Virtualization-Based Security (VBS) Enclave","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96914"},{"cve":"CVE-2026-96915","month":"2026-10","title":"Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel-Mode Drivers","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96915"},{"cve":"CVE-2026-96916","month":"2026-10","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96916"},{"cve":"CVE-2026-96917","month":"2026-10","title":"Windows PCI Bus Driver Elevation of Privilege Vulnerability","family":"Windows","component":"Windows PCI Bus Driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96917"},{"cve":"CVE-2026-96918","month":"2026-10","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-863"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96918"},{"cve":"CVE-2026-96919","month":"2026-10","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96919"},{"cve":"CVE-2026-96920","month":"2026-10","title":"Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Program Compatibility Assistant Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96920"},{"cve":"CVE-2026-96921","month":"2026-10","title":"Windows Message Queuing Queue Manager Information Disclosure Vulnerability","family":"Windows","component":"Windows Message Queuing Queue Manager","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-843"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96921"},{"cve":"CVE-2026-96923","month":"2026-10","title":"Windows Workstation Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Workstation Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96923"},{"cve":"CVE-2026-96924","month":"2026-10","title":"Windows OLE Remote Code Execution Vulnerability","family":"Windows","component":"Windows OLE","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96924"},{"cve":"CVE-2026-96925","month":"2026-10","title":"Windows NTFS Information Disclosure Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96925"},{"cve":"CVE-2026-96926","month":"2026-10","title":"Role: DNS Server Tampering Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-862"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96926"},{"cve":"CVE-2026-96927","month":"2026-10","title":"Windows NTFS Information Disclosure Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96927"},{"cve":"CVE-2026-96928","month":"2026-10","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96928"},{"cve":"CVE-2026-96929","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96929"},{"cve":"CVE-2026-96930","month":"2026-10","title":"Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96930"},{"cve":"CVE-2026-96931","month":"2026-10","title":"Windows NTFS Elevation of Privilege Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96931"},{"cve":"CVE-2026-96932","month":"2026-10","title":"Windows Embedded Mode Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Embedded Mode Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96932"},{"cve":"CVE-2026-96933","month":"2026-10","title":"Windows COM+ Event System Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows COM+ Event System Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-822"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96933"},{"cve":"CVE-2026-96934","month":"2026-10","title":"Windows DHCP Server Remote Code Execution Vulnerability","family":"Windows","component":"Windows DHCP Server","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96934"},{"cve":"CVE-2026-96935","month":"2026-10","title":"Windows NTFS Information Disclosure Vulnerability","family":"Windows","component":"Windows NTFS","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96935"},{"cve":"CVE-2026-96937","month":"2026-10","title":"Microsoft Windows Search Component Elevation of Privilege Vulnerability","family":"Windows","component":"Microsoft Windows Search Component","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96937"},{"cve":"CVE-2026-96938","month":"2026-10","title":"Windows Distributed File System (DFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Distributed File System (DFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96938"},{"cve":"CVE-2026-96939","month":"2026-10","title":"Servicing Stack Updates Elevation of Privilege Vulnerability","family":"Windows","component":"Servicing Stack Updates","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96939"},{"cve":"CVE-2026-96940","month":"2026-10","title":"Microsoft Exchange Server Elevation of Privilege Vulnerability","family":"ESU","component":"Microsoft Exchange Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-1390"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96940"},{"cve":"CVE-2026-96943","month":"2026-10","title":"Windows Raw Image Extension Remote Code Execution Vulnerability","family":"Windows","component":"Windows Raw Image Extension","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96943"},{"cve":"CVE-2026-96944","month":"2026-10","title":"Windows Storage Information Disclosure Vulnerability","family":"Windows","component":"Windows Storage","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-538"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96944"},{"cve":"CVE-2026-96945","month":"2026-10","title":"Windows Failover Cluster Denial of Service Vulnerability","family":"Windows","component":"Windows Failover Cluster","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-248"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96945"},{"cve":"CVE-2026-96946","month":"2026-10","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96946"},{"cve":"CVE-2026-96947","month":"2026-10","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96947"},{"cve":"CVE-2026-96948","month":"2026-10","title":"Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability","family":"Windows","component":"Windows Client Side Caching driver (csc.sys)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96948"},{"cve":"CVE-2026-96949","month":"2026-10","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96949"},{"cve":"CVE-2026-96950","month":"2026-10","title":"Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96950"},{"cve":"CVE-2026-96951","month":"2026-10","title":"Windows Shell Security Feature Bypass Vulnerability","family":"Windows","component":"Windows Shell","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C","cwe":["CWE-77"],"exploited":true,"disclosed":false,"kev":true,"kev_added":"2026-10-13","class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951"},{"cve":"CVE-2026-96952","month":"2026-10","title":"Microsoft Windows Media Foundation Remote Code Execution Vulnerability","family":"Windows","component":"Microsoft Windows Media Foundation","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96952"},{"cve":"CVE-2026-96953","month":"2026-10","title":"Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability","family":"Windows","component":"Windows Universal Disk Format File System Driver (UDFS)","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96953"},{"cve":"CVE-2026-96956","month":"2026-10","title":"SQL Server Elevation of Privilege Vulnerability","family":"SQL Server","component":"SQL Server","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":8.0,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96956"},{"cve":"CVE-2026-96957","month":"2026-10","title":".NET Security Feature Bypass Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Security Feature Bypass","labels":["Security Feature Bypass"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96957"},{"cve":"CVE-2026-96958","month":"2026-10","title":".NET Denial of Service Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-407"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96958"},{"cve":"CVE-2026-96959","month":"2026-10","title":".NET Denial of Service Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-770"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96959"},{"cve":"CVE-2026-96960","month":"2026-10","title":".NET Denial of Service Vulnerability","family":"Developer Tools","component":".NET","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-405"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96960"},{"cve":"CVE-2026-96995","month":"2026-10","title":"Microsoft Office Word Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121","CWE-197"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96995"},{"cve":"CVE-2026-96996","month":"2026-10","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96996"},{"cve":"CVE-2026-96997","month":"2026-10","title":"Microsoft Office OneNote Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office OneNote","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96997"},{"cve":"CVE-2026-97001","month":"2026-10","title":"Microsoft Office Word Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Word","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97001"},{"cve":"CVE-2026-97003","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97003"},{"cve":"CVE-2026-97004","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97004"},{"cve":"CVE-2026-97005","month":"2026-10","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97005"},{"cve":"CVE-2026-97007","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97007"},{"cve":"CVE-2026-97008","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-124"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97008"},{"cve":"CVE-2026-97009","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97009"},{"cve":"CVE-2026-97010","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97010"},{"cve":"CVE-2026-97011","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-908","CWE-763"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97011"},{"cve":"CVE-2026-97012","month":"2026-10","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"mal_server","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97012"},{"cve":"CVE-2026-97014","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97014"},{"cve":"CVE-2026-97016","month":"2026-10","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97016"},{"cve":"CVE-2026-97017","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97017"},{"cve":"CVE-2026-97738","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97738"},{"cve":"CVE-2026-97739","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191","CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97739"},{"cve":"CVE-2026-97740","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-497"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97740"},{"cve":"CVE-2026-97741","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-193"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97741"},{"cve":"CVE-2026-97742","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97742"},{"cve":"CVE-2026-97743","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97743"},{"cve":"CVE-2026-97744","month":"2026-10","title":"Microsoft Office PowerPoint Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office PowerPoint","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_preview","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97744"},{"cve":"CVE-2026-97745","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97745"},{"cve":"CVE-2026-97746","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-191"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97746"},{"cve":"CVE-2026-97747","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97747"},{"cve":"CVE-2026-97748","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97748"},{"cve":"CVE-2026-97749","month":"2026-10","title":"Microsoft Office Outlook Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Outlook","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97749"},{"cve":"CVE-2026-97750","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97750"},{"cve":"CVE-2026-97751","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97751"},{"cve":"CVE-2026-97752","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97752"},{"cve":"CVE-2026-97753","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97753"},{"cve":"CVE-2026-97754","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97754"},{"cve":"CVE-2026-97755","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97755"},{"cve":"CVE-2026-97756","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97756"},{"cve":"CVE-2026-97757","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97757"},{"cve":"CVE-2026-97758","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97758"},{"cve":"CVE-2026-97759","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97759"},{"cve":"CVE-2026-97760","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97760"},{"cve":"CVE-2026-97761","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97761"},{"cve":"CVE-2026-97762","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-787"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97762"},{"cve":"CVE-2026-97763","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97763"},{"cve":"CVE-2026-97765","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97765"},{"cve":"CVE-2026-97766","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97766"},{"cve":"CVE-2026-97767","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415","CWE-476"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97767"},{"cve":"CVE-2026-97768","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97768"},{"cve":"CVE-2026-97769","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97769"},{"cve":"CVE-2026-97770","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-121"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97770"},{"cve":"CVE-2026-97771","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97771"},{"cve":"CVE-2026-97772","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97772"},{"cve":"CVE-2026-97773","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97773"},{"cve":"CVE-2026-97774","month":"2026-10","title":"Microsoft Office Click-To-Run Elevation of Privilege Vulnerability","family":"Microsoft Office","component":"Microsoft Office Click-To-Run","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-367"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97774"},{"cve":"CVE-2026-97775","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416","CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97775"},{"cve":"CVE-2026-97776","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97776"},{"cve":"CVE-2026-97777","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97777"},{"cve":"CVE-2026-97778","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-190"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97778"},{"cve":"CVE-2026-97779","month":"2026-10","title":"Microsoft Office Excel Information Disclosure Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97779"},{"cve":"CVE-2026-97780","month":"2026-10","title":"Microsoft Office Excel Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office Excel","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"file_open","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97780"},{"cve":"CVE-2026-97781","month":"2026-10","title":"Microsoft Office OneNote Remote Code Execution Vulnerability","family":"Microsoft Office","component":"Microsoft Office OneNote","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-77"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97781"},{"cve":"CVE-2026-97782","month":"2026-10","title":"Microsoft Office SharePoint Tampering Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-203"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97782"},{"cve":"CVE-2026-97783","month":"2026-10","title":"Microsoft Office SharePoint Spoofing Vulnerability","family":"Microsoft Office","component":"Microsoft Office SharePoint","cna":"Microsoft","label":"Spoofing","labels":["Spoofing"],"severity":"Important","cvss":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-79"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"web","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97783"},{"cve":"CVE-2026-97787","month":"2026-10","title":"Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Container Isolation FS Filter Driver (unionfs.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-362"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97787"},{"cve":"CVE-2026-97788","month":"2026-10","title":"Active Directory Federation Services (AD FS) Information Disclosure Vulnerability","family":"Developer Tools","component":"Active Directory Federation Services (AD FS)","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-203"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97788"},{"cve":"CVE-2026-97789","month":"2026-10","title":"Remote Desktop Client Remote Code Execution Vulnerability","family":"Windows","component":"Remote Desktop Client","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"user_assist","overstated_rce":true,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97789"},{"cve":"CVE-2026-97790","month":"2026-10","title":"Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability","family":"Windows","component":"Windows Container Isolation FS Filter Driver (unionfs.sys)","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-59"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97790"},{"cve":"CVE-2026-97792","month":"2026-10","title":"Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Container Isolation FS Filter Driver (unionfs.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-732"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97792"},{"cve":"CVE-2026-97793","month":"2026-10","title":"Windows Setup and Deployment Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Setup and Deployment","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-306"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97793"},{"cve":"CVE-2026-97794","month":"2026-10","title":"Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Container Isolation FS Filter Driver (unionfs.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97794"},{"cve":"CVE-2026-97798","month":"2026-10","title":"Windows Error Reporting Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-88"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97798"},{"cve":"CVE-2026-97799","month":"2026-10","title":"Windows Audio Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Audio Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-347"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97799"},{"cve":"CVE-2026-97800","month":"2026-10","title":"Windows Mobile Broadband Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Mobile Broadband","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-732"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97800"},{"cve":"CVE-2026-97801","month":"2026-10","title":".NET Framework Tampering Vulnerability","family":"Developer Tools","component":".NET Framework","cna":"Microsoft","label":"Tampering","labels":["Tampering"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","cwe":["CWE-1287"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97801"},{"cve":"CVE-2026-97803","month":"2026-10","title":"Windows Kernel Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Kernel","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97803"},{"cve":"CVE-2026-97804","month":"2026-10","title":"HID Class Driver Elevation of Privilege Vulnerability","family":"Windows","component":"HID class driver","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97804"},{"cve":"CVE-2026-97805","month":"2026-10","title":"Windows Partition Management Driver Remote Code Execution Vulnerability","family":"Windows","component":"Windows Partition Management Driver","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-125","CWE-20"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97805"},{"cve":"CVE-2026-97806","month":"2026-10","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97806"},{"cve":"CVE-2026-97807","month":"2026-10","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97807"},{"cve":"CVE-2026-97808","month":"2026-10","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97808"},{"cve":"CVE-2026-97809","month":"2026-10","title":"Windows Broadcast DVR User Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Broadcast DVR User Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97809"},{"cve":"CVE-2026-97810","month":"2026-10","title":"Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Container Isolation FS Filter Driver (unionfs.sys)","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97810"},{"cve":"CVE-2026-97811","month":"2026-10","title":"Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability","family":"Windows","component":"OpenSSH for Windows","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415","CWE-400"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97811"},{"cve":"CVE-2026-97812","month":"2026-10","title":"Windows Update Orchestrator Service Elevation of Privilege Vulnerability","family":"Windows","component":"Windows Update Orchestrator Service","cna":"Microsoft","label":"Elevation of Privilege","labels":["Elevation of Privilege"],"severity":"Important","cvss":7.0,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"local","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97812"},{"cve":"CVE-2026-97813","month":"2026-10","title":"Windows Hyper-V Information Disclosure Vulnerability","family":"Windows","component":"Windows Hyper-V","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97813"},{"cve":"CVE-2026-97814","month":"2026-10","title":"Windows Text Shaping Remote Code Execution Vulnerability","family":"Windows","component":"Windows Text Shaping","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Critical","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97814"},{"cve":"CVE-2026-97815","month":"2026-10","title":"Windows Error Reporting Remote Code Execution Vulnerability","family":"Windows","component":"Windows Error Reporting","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97815"},{"cve":"CVE-2026-97816","month":"2026-10","title":"Microsoft OpenSSH for Windows Remote Code Execution Vulnerability","family":"Windows","component":"OpenSSH for Windows","cna":"Microsoft","label":"Remote Code Execution","labels":["Remote Code Execution"],"severity":"Important","cvss":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","cwe":["CWE-416"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97816"},{"cve":"CVE-2026-97817","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-122"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97817"},{"cve":"CVE-2026-97819","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97819"},{"cve":"CVE-2026-97820","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97820"},{"cve":"CVE-2026-97821","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97821"},{"cve":"CVE-2026-97822","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97822"},{"cve":"CVE-2026-97823","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97823"},{"cve":"CVE-2026-97824","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97824"},{"cve":"CVE-2026-97825","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97825"},{"cve":"CVE-2026-97826","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97826"},{"cve":"CVE-2026-97827","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97827"},{"cve":"CVE-2026-97828","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-126"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97828"},{"cve":"CVE-2026-97829","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97829"},{"cve":"CVE-2026-97830","month":"2026-10","title":"Windows Internet Information Services Denial of Service Vulnerability","family":"Windows","component":"Windows Internet Information Services","cna":"Microsoft","label":"Denial of Service","labels":["Denial of Service"],"severity":"Important","cvss":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cwe":["CWE-415"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"zero_click","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97830"},{"cve":"CVE-2026-97831","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97831"},{"cve":"CVE-2026-97832","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97832"},{"cve":"CVE-2026-97833","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97833"},{"cve":"CVE-2026-97834","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97834"},{"cve":"CVE-2026-97835","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97835"},{"cve":"CVE-2026-97836","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97836"},{"cve":"CVE-2026-97837","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97837"},{"cve":"CVE-2026-97838","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97838"},{"cve":"CVE-2026-97839","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97839"},{"cve":"CVE-2026-97840","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97840"},{"cve":"CVE-2026-97841","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97841"},{"cve":"CVE-2026-97842","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97842"},{"cve":"CVE-2026-97843","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97843"},{"cve":"CVE-2026-97844","month":"2026-10","title":"Role: DNS Server Information Disclosure Vulnerability","family":"Windows","component":"Role: DNS Server","cna":"Microsoft","label":"Information Disclosure","labels":["Information Disclosure"],"severity":"Important","cvss":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","cwe":["CWE-125"],"exploited":false,"disclosed":false,"kev":false,"kev_added":null,"class":"auth_net","overstated_rce":false,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97844"}]}