Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

673469 source statements · aliases may refer to the same vulnerability

CVE-2026-70031Published

Windows iSCSI Denial of Service Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70038Published

Windows iSCSI Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.1Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70011Published

Windows IP Over USB Service Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2 · Vendor product: Windows 11 version 23H2

CVSS 3.1 5.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70024Published

Windows Internet Information Services Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 9.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70008Published

Windows IP Over USB Service Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2 · Vendor product: Windows 11 version 23H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70113Published

Windows Client for NFS Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70005Published

Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

cve-program ·

Vendor product: Windows Server 2019 · Vendor product: Windows Server 2019 (Server Core installation) · Vendor product: Windows Server 2022

CVSS 3.1 5.9Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-69982Published

Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows Server 2012 R2

CVSS 3.1 5.9Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-69977Published

Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-69955Published

Windows Client for NFS Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 6.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-69949Published

Windows Client for NFS Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-69940Published

Windows Client for NFS Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 6.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-69923Published

Windows AI Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 11 Version 24H2 · Vendor product: Windows 11 Version 25H2 · Vendor product: Windows 11 version 26H1

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88146Published

Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88143Published

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 6.7Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88140Published

Windows Key Storage Provider Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 5.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88137Published

WebDAV Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 6.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88136Published

Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88132Published

Azure Key Vault Information Disclosure Vulnerability

cve-program ·

Vendor product: azure-keyvault-administration · Vendor product: azure-keyvault-certificates · Vendor product: azure-keyvault-keys

CVSS 3.1 5.9Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88107Published

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88106Published

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88102Published

Microsoft Failover Cluster Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows Server 2019 · Vendor product: Windows Server 2019 (Server Core installation) · Vendor product: Windows Server 2022

CVSS 3.1 9.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88100Published

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 11 Version 24H2 · Vendor product: Windows 11 Version 25H2 · Vendor product: Windows 11 version 26H1

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88099Published

Windows Failover Cluster Denial of Service Vulnerability

cve-program ·

Vendor product: Windows Server 2019 · Vendor product: Windows Server 2019 (Server Core installation) · Vendor product: Windows Server 2022

CVSS 3.1 5.9Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88098Published

Windows Security Support Provider Interface Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-85886Published

Microsoft SQL Server Remote Code Execution Vulnerability

cve-program ·

Vendor product: Microsoft SQL Server 2017 (GDR) · Vendor product: Microsoft SQL Server 2017 for x64-based Systems (CU31) · Vendor product: Microsoft SQL Server 2019 (GDR)

CVSS 3.1 8.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-85876Published

Microsoft SQL Server Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Microsoft SQL Server 2019 (GDR) · Vendor product: Microsoft SQL Server 2019 for x64-based Systems (CU32) · Vendor product: Microsoft SQL Server 2022 (GDR)

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-83945Published

Microsoft SQL Server Remote Code Execution Vulnerability

cve-program ·

Vendor product: Microsoft SQL Server 2022 (GDR) · Vendor product: Microsoft SQL Server 2022 for x64-based Systems (CU27) · Vendor product: Microsoft SQL Server 2025 (CU8)

CVSS 3.1 6.6Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70189Published

Microsoft SQL Server Remote Code Execution Vulnerability

cve-program ·

Vendor product: Microsoft SQL Server 2017 (GDR) · Vendor product: Microsoft SQL Server 2017 for x64-based Systems (CU31) · Vendor product: Microsoft SQL Server 2019 (GDR)

CVSS 3.1 6.7Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-68883Published

Microsoft SQL Server Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Microsoft SQL Server 2017 (GDR) · Vendor product: Microsoft SQL Server 2017 for x64-based Systems (CU31) · Vendor product: Microsoft SQL Server 2019 (GDR)

CVSS 3.1 8.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88074Published

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 11 version 23H2 · Vendor product: Windows 11 Version 23H2 · Vendor product: Windows 11 Version 24H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88073Published

Windows Graphics Kernel Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2 · Vendor product: Windows 11 version 23H2

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88071Published

Windows Hyper-V Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 11 version 23H2 · Vendor product: Windows 11 Version 23H2 · Vendor product: Windows 11 Version 24H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88070Published

Windows BitLocker Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-87716Published

Windows Storage Spaces Controller Denial of Service Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 7.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-87714Published

WebDAV Security Feature Bypass Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 6.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-87713Published

Windows Bluetooth Port Driver Remote Code Execution

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-87712Published

Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-87710Published

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-87707Published

Windows Fax and Scan Service Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-87706Published

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-87697Published

.NET Remote Code Execution Vulnerability

cve-program ·

Vendor product: .NET 10.0 runtime · Vendor product: .NET 11.0 runtime · Vendor product: .NET 8.0 runtime

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-87691Published

Windows Management Services Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 11 version 23H2 · Vendor product: Windows 11 Version 23H2 · Vendor product: Windows 11 Version 24H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-85945Published

Windows Kernel Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-85939Published

Windows Kernel Security Feature Bypass Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 5.3Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-85936Published

Windows Shell Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-85938Published

Windows Broadcast DVR User Service Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 5.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-85935Published

Windows USB Driver Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 5.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-85934Published

Windows AppX Deployment Service Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-85933Published

Windows Print Spooler Components Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.