Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

0Publicly disclosed

1In CISA KEV

0Revised since release

October 2026: 1474 CVEs · 94 critical · 1 exploited · 1 in CISA KEV

Act first · November 2026

Exploited, KEV-listed, or publicly disclosed

CVE-2026-124194ModerateExploitedCISA KEV · due 24 NovSpoofingNetwork

CVSS 6.5 No KB listed

Patch next · critical, "exploitation more likely", or top 5% EPSS · needs an update98

CVE-2026-118146CriticalRCENetworkExploitation More Likely

CVSS 8.8 KB5131077 KB5131080 KB5131085+7

CVE-2026-118207CriticalRCENetworkExploitation More Likely

CVSS 8.8 KB5133453

CVE-2026-113862CriticalRCENetworkExploitation More Likely

CVSS 8.1 KB5131077 KB5131080 KB5131085+7

Showing 3 of 98All critical

Elevation of Privilege 535

Remote Code Execution 297

Information Disclosure 157

Denial of Service 46

Security Feature Bypass 27

Windows 744

ESU 658

Microsoft Office 204

SQL Server 54

Developer Tools 50

297 matches · most urgent first CSV Text

CVE	Vulnerability	Severity	CVSS	Impact	Fixed by
CVE-2026-119849	Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution VulnerabilityVirtual Hard Disk (VHD) Miniport Driver	Important	7.0	RCELocal	KB5131077 KB5131080+8
CVE-2026-69565	Windows Remote Desktop Services Remote Code Execution VulnerabilityRemote Desktop Gateway Service	Important	7.0	RCELocal	KB5131077 KB5131080+3
CVE-2026-96054	Microsoft Color Management Remote Code Execution VulnerabilityMicrosoft Color Management	Important	7.0	RCELocal	KB5131077 KB5131080+8
CVE-2026-108404	Windows CD-ROM Driver Remote Code Execution VulnerabilityWindows CD-ROM Driver	Important	6.8	RCEPhysical	KB5131077 KB5131080+8
CVE-2026-119823	Windows Storport Miniport Driver Remote Code Execution VulnerabilityWindows Storport Miniport Driver	Important	6.8	RCEPhysical	KB5131077 KB5131080+8
CVE-2026-119394	Windows Enhanced Storage Remote Code Execution VulnerabilityWindows Enhanced Storage	Important	6.6	RCEPhysical	KB5131077 KB5131080+8
CVE-2026-124229	Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft Office Excel	Important	6.6	RCEPhysical	—
CVE-2026-116699	Microsoft WDAC OLE DB provider for SQL Remote Code Execution VulnerabilityMicrosoft WDAC OLE DB provider for SQL	Important	6.5	RCENetwork	KB5131077 KB5131080+8
CVE-2026-66801	Microsoft Xbox Remote Code Execution VulnerabilityXbox	Important	—	RCE	—