Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

677559 source statements · aliases may refer to the same vulnerability

CVE-2026-70194Published

.NET Framework Security Feature Bypass Vulnerability

cve-program ·

Vendor product: .NET 11.0 runtime · Vendor product: Microsoft Visual Studio 2022 version 17.14 · Vendor product: Microsoft Visual Studio 2026 version 18.10

CVSS 3.1 6.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70197Published

.NET Remote Code Execution Vulnerability

cve-program ·

Vendor product: .NET 10.0 runtime · Vendor product: .NET 11.0 runtime · Vendor product: .NET 8.0 runtime

CVSS 3.1 8.1Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70188Published

ASP.NET Core Security Feature Bypass Vulnerability

cve-program ·

Vendor product: ASP.NET Core 10.0 · Vendor product: ASP.NET Core 11.0 · Vendor product: ASP.NET Core 8.0

CVSS 3.1 9.1Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70190Published

.NET Elevation of Privilege Vulnerability

cve-program ·

Vendor product: .NET 10.0 runtime · Vendor product: .NET 11.0 runtime · Vendor product: .NET 9.0 runtime

CVSS 3.1 7.3Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70183Published

ASP.NET Core Elevation of Privilege Vulnerability

cve-program ·

Vendor product: ASP.NET Core 10.0 · Vendor product: ASP.NET Core 11.0 · Vendor product: ASP.NET Core 8.0

CVSS 3.1 7.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70181Published

ASP.NET Core Denial of Service Vulnerability

cve-program ·

Vendor product: ASP.NET Core 10.0 · Vendor product: ASP.NET Core 8.0 · Vendor product: ASP.NET Core 9.0

CVSS 3.1 7.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70179Published

ASP.NET Core Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Microsoft Visual Studio 2022 version 17.14 · Vendor product: Microsoft Visual Studio 2026 version 18.10 · Vendor product: Microsoft.AspNetCore.Authentication.Negotiate

CVSS 3.1 7.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70196Published

ASP.NET Core Denial of Service Vulnerability

cve-program ·

Vendor product: ASP.NET Core 10.0 · Vendor product: ASP.NET Core 8.0 · Vendor product: ASP.NET Core 9.0

CVSS 3.1 5.9Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70175Published

ASP.NET Core Elevation of Privilege Vulnerability

cve-program ·

Vendor product: ASP.NET Core 10.0 · Vendor product: ASP.NET Core 8.0 · Vendor product: ASP.NET Core 9.0

CVSS 3.1 8.1Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70165Published

.NET Elevation of Privilege Vulnerability

cve-program ·

Vendor product: .NET 10.0 runtime · Vendor product: .NET 11.0 runtime · Vendor product: .NET 9.0 runtime

CVSS 3.1 6.7Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70161Published

.NET Elevation of Privilege Vulnerability

cve-program ·

Vendor product: .NET 10.0 runtime · Vendor product: .NET 11.0 runtime · Vendor product: .NET 9.0 runtime

CVSS 3.1 7.3Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70159Published

ASP.NET Core Denial of Service Vulnerability

cve-program ·

Vendor product: Microsoft Visual Studio 2022 version 17.14 · Vendor product: Microsoft Visual Studio 2026 version 18.10 · Vendor product: Microsoft.AspNetCore.SignalR.Common

CVSS 3.1 7.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70174Published

.NET Remote Code Execution Vulnerability

cve-program ·

Vendor product: .NET 10.0 runtime · Vendor product: .NET 11.0 runtime · Vendor product: .NET 8.0 runtime

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70186Published

ASP.NET Core Denial of Service Vulnerability

cve-program ·

Vendor product: ASP.NET Core 10.0 · Vendor product: ASP.NET Core 8.0 · Vendor product: ASP.NET Core 9.0

CVSS 3.1 7.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70149Published

Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70116Published

Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability

cve-program ·

Vendor product: Windows 11 Version 24H2 · Vendor product: Windows 11 Version 25H2 · Vendor product: Windows 11 version 26H1

CVSS 3.1 4.2Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70147Published

Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 9.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70109Published

Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70092Published

Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70110Published

Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70068Published

Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70131Published

Microsoft Windows Media Foundation Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70044Published

Microsoft Windows Media Foundation Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 5.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70102Published

Windows Spaceport.sys Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70134Published

Windows Event Tracing Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70137Published

Windows Remote Access Connection Manager Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 5.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70045Published

Windows Work Folders Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70013Published

Windows iSCSI Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.1Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70031Published

Windows iSCSI Denial of Service Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70038Published

Windows iSCSI Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.1Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70011Published

Windows IP Over USB Service Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2 · Vendor product: Windows 11 version 23H2

CVSS 3.1 5.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70024Published

Windows Internet Information Services Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 9.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70008Published

Windows IP Over USB Service Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2 · Vendor product: Windows 11 version 23H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70113Published

Windows Client for NFS Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-70005Published

Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

cve-program ·

Vendor product: Windows Server 2019 · Vendor product: Windows Server 2019 (Server Core installation) · Vendor product: Windows Server 2022

CVSS 3.1 5.9Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-69982Published

Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows Server 2012 R2

CVSS 3.1 5.9Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-69977Published

Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-69955Published

Windows Client for NFS Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 6.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-69949Published

Windows Client for NFS Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-69940Published

Windows Client for NFS Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 6.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-69923Published

Windows AI Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 11 Version 24H2 · Vendor product: Windows 11 Version 25H2 · Vendor product: Windows 11 version 26H1

CVSS 3.1 7.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88146Published

Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88143Published

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 6.7Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88140Published

Windows Key Storage Provider Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 5.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88137Published

WebDAV Information Disclosure Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 6.5Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88136Published

Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.8Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88132Published

Azure Key Vault Information Disclosure Vulnerability

cve-program ·

Vendor product: azure-keyvault-administration · Vendor product: azure-keyvault-certificates · Vendor product: azure-keyvault-keys

CVSS 3.1 5.9Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88107Published

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88106Published

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 7.0Source modified 23 Oct 2026Recorded 23 Oct 2026

CVE-2026-88102Published

Microsoft Failover Cluster Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows Server 2019 · Vendor product: Windows Server 2019 (Server Core installation) · Vendor product: Windows Server 2022

CVSS 3.1 9.8Source modified 23 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.