Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

0Publicly disclosed

1In CISA KEV

0Revised since release

October 2026: 1474 CVEs · 94 critical · 1 exploited · 1 in CISA KEV

Act first · November 2026

Exploited, KEV-listed, or publicly disclosed

CVE-2026-124194ModerateExploitedCISA KEV · due 24 NovSpoofingNetwork

CVSS 6.5 No KB listed

Patch next · critical, "exploitation more likely", or top 5% EPSS · needs an update100

CVE-2026-118146CriticalRCENetworkExploitation More Likely

CVSS 8.8 KB5131077 KB5131080 KB5131085+7

CVE-2026-118207CriticalRCENetworkExploitation More Likely

CVSS 8.8 KB5133453

CVE-2026-113862CriticalRCENetworkExploitation More Likely

CVSS 8.1 KB5131077 KB5131080 KB5131085+7

Showing 3 of 100All critical

Elevation of Privilege 536

Remote Code Execution 296

Information Disclosure 157

Denial of Service 46

Security Feature Bypass 27

Windows 745

ESU 658

Microsoft Office 204

SQL Server 54

Developer Tools 50

50 matches in Developer Tools · most urgent first CSV Text

CVE	Vulnerability	Severity	CVSS	Impact	Fixed by
CVE-2026-109467	Azure DevOps Server Remote Code Execution VulnerabilityAzure DevOps	Important	9.9	RCENetwork	—
CVE-2026-120779	Visual Studio Code Remote Code Execution VulnerabilityVisual Studio Code	Important	9.6	RCENetwork	—
CVE-2026-114146	ASP.NET Core Elevation of Privilege VulnerabilityASP.NET Core	Important	9.0	EoPNetwork	KB5135241 KB5135242+1
CVE-2026-114151	Visual Studio Remote Code Execution VulnerabilityVisual Studio	Important	8.8	RCENetwork	KB5135241 KB5135242+1
CVE-2026-114152	Visual Studio Remote Code Execution VulnerabilityVisual Studio	Important	8.8	RCENetwork	KB5135241 KB5135242+1
CVE-2026-114158	Visual Studio Remote Code Execution VulnerabilityVisual Studio	Important	8.8	RCENetwork	KB5135241 KB5135242+1
CVE-2026-114159	Visual Studio Remote Code Execution VulnerabilityVisual Studio	Important	8.8	RCENetwork	KB5135241 KB5135242+1
CVE-2026-114171	Visual Studio Code Security Feature Bypass VulnerabilityVisual Studio Code	Important	8.8	SFBNetwork	—
CVE-2026-118745	Visual Studio Remote Code Execution VulnerabilityVisual Studio	Important	8.8	RCENetwork	KB5135241 KB5135242+1
CVE-2026-119975	Visual Studio Code Remote Code Execution VulnerabilityVisual Studio Code	Important	8.8	RCENetwork	—
CVE-2026-119983	Visual Studio Code Security Feature Bypass VulnerabilityVisual Studio Code	Important	8.8	SFBNetwork	—
CVE-2026-121663	Visual Studio Code Security Feature Bypass VulnerabilityVisual Studio Code	Important	8.8	SFBNetwork	—