Security

CVE detail from Microsoft's public MSRC CVRF API, cross-checked with CISA's Known Exploited Vulnerabilities catalog. Counts cover Microsoft-issued CVEs; republished third-party CVEs such as Chromium or Linux are hidden unless you include them.

Security Update Guide CISA KEV

CVEs · all collected releases

649 matches · most urgent first CSV Text

Fixed by KB5126836Clear

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-85334	Windows Message Queuing Queue Manager Information Disclosure VulnerabilityWindows Message Queuing Queue Manager	Important	7.5	1.0%	Information DisclosureNetwork	Fix has a known issue	KB5126646 KB5126651+8
CVE-2026-85353	Windows Print Spooler Components Information Disclosure VulnerabilityWindows Print Spooler Components	Important	7.5	1.0%	Information DisclosureNetwork	Fix has a known issue	KB5126646 KB5126651+8
CVE-2026-85808	Windows Routing and Remote Access Service (RRAS) Denial of Service VulnerabilityWindows Routing and Remote Access Service (RRAS)	Important	7.5	1.1%	DoSNetwork	Fix has a known issue	KB5126646 KB5126651+8
CVE-2026-85811	Network Policy Server (NPS) Remote Code Execution VulnerabilityNetwork Policy Server (NPS)	Important	7.5	0.4%	RCEAdjacent	Fix has a known issue	KB5126646 KB5126651+8
CVE-2026-96071	Windows Media Remote Code Execution VulnerabilityWindows Media	Important	7.5	0.6%	RCENetwork	Fix has a known issue	KB5126646 KB5126651+8
CVE-2026-96245	Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityWindows Routing and Remote Access Service (RRAS)	Important	7.5	1.0%	Information DisclosureNetwork	Fix has a known issue	KB5126646 KB5126651+8
CVE-2026-96246	Network Policy Server (NPS) Information Disclosure VulnerabilityNetwork Policy Server (NPS)	Important	7.5	1.0%	Information DisclosureNetwork	Fix has a known issue	KB5126646 KB5126651+8
CVE-2026-96325	Windows SMB Server Denial of Service VulnerabilityWindows SMB Server	Important	7.5	0.8%	DoSNetwork	Fix has a known issue	KB5126646 KB5126651+8
CVE-2026-96861	Network Device Enrollment Service (NDES) Denial of Service VulnerabilityNetwork Device Enrollment Service (NDES)	Important	7.5	1.1%	DoSNetwork	Fix has a known issue	KB5126646 KB5126651+4
CVE-2026-96866	Network Device Enrollment Service (NDES) Denial of Service VulnerabilityNetwork Device Enrollment Service (NDES)	Important	7.5	1.1%	DoSNetwork	Fix has a known issue	KB5126646 KB5126651+4
CVE-2026-97788	Active Directory Federation Services (AD FS) Information Disclosure VulnerabilityActive Directory Federation Services (AD FS)	Important	7.5	0.7%	Information DisclosureNetwork	Fix has a known issue	KB5126646 KB5126651+26
CVE-2026-97789	Remote Desktop Client Remote Code Execution VulnerabilityRemote Desktop Client	Important	7.5	0.6%	RCENetwork	Fix has a known issue	KB5126646 KB5126651+8

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products