Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

667891 source statements · aliases may refer to the same vulnerability

CVE-2026-88122Published

Role: DNS Server Denial of Service Vulnerability

cve-program ·

Vendor product: Windows Server 2012 · Vendor product: Windows Server 2012 (Server Core installation) · Vendor product: Windows Server 2012 R2

CVSS 3.1 6.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88120Published

Windows DHCP Server Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows Server 2012 · Vendor product: Windows Server 2012 (Server Core installation) · Vendor product: Windows Server 2012 R2

CVSS 3.1 8.1Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88119Published

Windows DHCP Server Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows Server 2012 · Vendor product: Windows Server 2012 (Server Core installation) · Vendor product: Windows Server 2012 R2

CVSS 3.1 8.1Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88117Published

Windows DHCP Server Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows Server 2012 · Vendor product: Windows Server 2012 (Server Core installation) · Vendor product: Windows Server 2012 R2

CVSS 3.1 8.1Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88116Published

Windows Domain Name Service Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88114Published

Windows Domain Name Service Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88112Published

Windows Domain Name Service Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88093Published

Desktop Window Manager Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88092Published

ASP.NET Core Tampering Vulnerability

cve-program ·

Vendor product: ASP.NET Core 10.0 · Vendor product: ASP.NET Core 11.0 · Vendor product: ASP.NET Core 8.0

CVSS 3.1 9.4Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88089Published

Microsoft SQL Server Remote Code Execution Vulnerability

cve-program ·

Vendor product: Microsoft SQL Server 2017 (GDR) · Vendor product: Microsoft SQL Server 2017 for x64-based Systems (CU31) · Vendor product: Microsoft SQL Server 2019 (GDR)

CVSS 3.1 6.7Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88085Published

Microsoft SQL Server Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Microsoft SQL Server 2017 (GDR) · Vendor product: Microsoft SQL Server 2017 for x64-based Systems (CU31) · Vendor product: Microsoft SQL Server 2019 (GDR)

CVSS 3.1 6.4Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88088Published

Microsoft SQL Server Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Microsoft SQL Server 2019 (GDR) · Vendor product: Microsoft SQL Server 2019 for x64-based Systems (CU32) · Vendor product: Microsoft SQL Server 2022 (GDR)

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-85919Published

Microsoft SQL Server Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Microsoft SQL Server 2019 (GDR) · Vendor product: Microsoft SQL Server 2019 for x64-based Systems (CU32) · Vendor product: Microsoft SQL Server 2022 (GDR)

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88086Published

Microsoft SQL Server Information Disclosure Vulnerability

cve-program ·

Vendor product: Microsoft SQL Server 2019 (GDR) · Vendor product: Microsoft SQL Server 2019 for x64-based Systems (CU32) · Vendor product: Microsoft SQL Server 2022 (GDR)

CVSS 3.1 5.3Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88084Published

Microsoft SQL Server Denial of Service Vulnerability

cve-program ·

Vendor product: Microsoft SQL Server 2019 (GDR) · Vendor product: Microsoft SQL Server 2019 for x64-based Systems (CU32) · Vendor product: Microsoft SQL Server 2025 (CU8)

CVSS 3.1 5.3Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-85888Published

Microsoft SQL Server Information Disclosure Vulnerability

cve-program ·

Vendor product: Microsoft SQL Server 2017 (GDR) · Vendor product: Microsoft SQL Server 2017 for x64-based Systems (CU31) · Vendor product: Microsoft SQL Server 2019 (GDR)

CVSS 3.1 7.7Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88081Published

Microsoft SQL Server Information Disclosure Vulnerability

cve-program ·

Vendor product: Microsoft SQL Server 2017 (GDR) · Vendor product: Microsoft SQL Server 2017 for x64-based Systems (CU31) · Vendor product: Microsoft SQL Server 2019 (GDR)

CVSS 3.1 7.7Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88083Published

Microsoft SQL Server Remote Code Execution Vulnerability

cve-program ·

Vendor product: Microsoft SQL Server 2022 (CU 26) · Vendor product: Microsoft SQL Server 2022 (GDR) · Vendor product: Microsoft SQL Server 2022 for x64-based Systems (CU27)

CVSS 3.1 7.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88082Published

Microsoft SQL Server Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Microsoft SQL Server 2019 (GDR) · Vendor product: Microsoft SQL Server 2019 for x64-based Systems (CU32) · Vendor product: Microsoft SQL Server 2022 (GDR)

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88075Published

Configuration Manager Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Microsoft Configuration Manager · Vendor product: Microsoft Configuration Manager 2509 · Vendor product: Microsoft Configuration Manager 2603

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-87696Published

Microsoft Exchange Server Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Microsoft Exchange Server 2016 Cumulative Update 23 · Vendor product: Microsoft Exchange Server 2019 Cumulative Update 14 · Vendor product: Microsoft Exchange Server 2019 Cumulative Update 15

CVSS 3.1 7.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-87695Published

Microsoft Exchange Server Elevation of Privilege Vulnerability

cve-program ·

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-87692Published

Microsoft Exchange Server Elevation of Privilege Vulnerability

cve-program ·

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-85873Published

Skype for Business Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Skype for Business Server 2015 CU13 · Vendor product: Skype for Business Server 2019 CU8 · Vendor product: Skype for Business Server Subscription Edition CU1

CVSS 3.1 6.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-83746Published

Skype for Business Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Skype for Business Server 2015 CU13 · Vendor product: Skype for Business Server 2019 CU8 · Vendor product: Skype for Business Server Subscription Edition CU1

CVSS 3.1 8.1Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-77910Published

Microsoft Exchange Server Elevation of Privilege Vulnerability

cve-program ·

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70571Published

Microsoft Exchange Server Remote Code Execution Vulnerability

cve-program ·

CVSS 3.1 8.1Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70297Published

Skype for Business Remote Code Execution Vulnerability

cve-program ·

Vendor product: Skype for Business Server 2015 CU13 · Vendor product: Skype for Business Server 2019 CU8 · Vendor product: Skype for Business Server Subscription Edition CU1

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70279Published

Microsoft Exchange Server Spoofing Vulnerability

cve-program ·

CVSS 3.1 9.3Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70264Published

Microsoft Defender Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows Defender

CVSS 3.1 5.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70261Published

Microsoft Trace Data Helper Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 5.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70260Published

Microsoft Trace Data Helper Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 5.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70250Published

Windows DHCP Client Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows Server 2012 · Vendor product: Windows Server 2012 (Server Core installation) · Vendor product: Windows Server 2012 R2

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70229Published

Windows Active Directory Domain Services Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.1Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70228Published

Desktop Window Manager Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70227Published

Windows Device Association Service Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 11 version 23H2 · Vendor product: Windows 11 Version 23H2 · Vendor product: Windows 11 Version 24H2

CVSS 3.1 5.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70184Published

Windows Backup Engine Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2 · Vendor product: Windows 11 version 23H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70111Published

Windows Kernel Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.1Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-85925Published

Azure Key Vault Client SDK Elevation of Privilege Vulnerability

cve-program ·

Vendor product: azure-keyvault-administration · Vendor product: azure-keyvault-certificates · Vendor product: azure-keyvault-keys

CVSS 3.1 8.2Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-85922Published

Azure Key Vault Security Feature Bypass Vulnerability

cve-program ·

Vendor product: azure_security_keyvault_certificates · Vendor product: azure_security_keyvault_keys · Vendor product: azure_security_keyvault_secrets

CVSS 3.1 7.4Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70160Published

Windows Kernel Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70158Published

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70148Published

Windows Broadcast DVR User Service Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 6.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70143Published

Windows Network File System Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70122Published

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2 · Vendor product: Windows 11 version 23H2

CVSS 3.1 6.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70112Published

Windows Spaceport.sys Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70084Published

Windows Projected File System Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 5.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70054Published

Windows NetBIOS Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-69915Published

Windows NTFS Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-69902Published

Windows NTFS Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 6.7Source modified 23 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.