Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

0Publicly disclosed

0In CISA KEV

0Revised since release

October 2026: 1474 CVEs · 94 critical · 1 exploited · 1 in CISA KEV

Act first · November 2026

Exploited, KEV-listed, or publicly disclosed

CVE-2026-124194ModerateExploitedSpoofingNetwork

CVSS 6.5 No KB listed

Patch next · critical, "exploitation more likely", or top 5% EPSS · needs an update100

CVE-2026-118146CriticalRCENetworkExploitation More Likely

CVSS 8.8 KB5131077 KB5131080 KB5131085+7

CVE-2026-118207CriticalRCENetworkExploitation More Likely

CVSS 8.8 KB5133453

CVE-2026-113862CriticalRCENetworkExploitation More Likely

CVSS 8.1 KB5131077 KB5131080 KB5131085+7

Showing 3 of 100All critical

Elevation of Privilege 536

Remote Code Execution 296

Information Disclosure 157

Denial of Service 46

Security Feature Bypass 27

Windows 745

ESU 658

Microsoft Office 204

SQL Server 54

Developer Tools 50

46 matches · most urgent first CSV Text

CVE	Vulnerability	Severity	CVSS	Impact	Fixed by
CVE-2026-105512	Microsoft QUIC Denial of Service VulnerabilityMicrosoft QUIC	Important	7.5	DoSNetwork	KB5131077 KB5131080+5
CVE-2026-105515	Windows Message Queuing Denial of Service VulnerabilityWindows Message Queuing	Important	7.5	DoSNetwork	KB5131077 KB5131080+8
CVE-2026-105561	Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service VulnerabilityWindows Secure Socket Tunneling Protocol (SSTP)	Important	7.5	DoSNetwork	KB5131077 KB5131080+8
CVE-2026-109475	.NET Denial of Service Vulnerability.NET	Important	7.5	DoSNetwork	KB5135241 KB5135242+1
CVE-2026-109478	ASP.NET Core Denial of Service VulnerabilityASP.NET Core	Important	7.5	DoSNetwork	KB5135243
CVE-2026-112966	Windows Security Account Manager Denial of Service VulnerabilityWindows Security Account Manager	Important	7.5	DoSNetwork	KB5131077 KB5131080+8
CVE-2026-114147	ASP.NET Core Denial of Service VulnerabilityASP.NET Core	Important	7.5	DoSNetwork	KB5135241 KB5135242+1
CVE-2026-114149	ASP.NET Core Denial of Service VulnerabilityASP.NET Core	Important	7.5	DoSNetwork	KB5135241 KB5135242+1
CVE-2026-114154	ASP.NET Core Denial of Service VulnerabilityASP.NET Core	Important	7.5	DoSNetwork	KB5135241 KB5135242+1
CVE-2026-118153	Microsoft Exchange Server Denial of Service VulnerabilityMicrosoft Exchange Server	Important	7.5	DoSNetwork	KB5133453
CVE-2026-118747	.NET Denial of Service Vulnerability.NET	Important	7.5	DoSNetwork	—
CVE-2026-118748	ASP.NET Core Denial of Service VulnerabilityASP.NET Core	Important	7.5	DoSNetwork	—