{"id":12113,"date":"2026-04-15T04:04:03","date_gmt":"2026-04-15T04:04:03","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2026\/04\/15\/32898\/"},"modified":"2026-04-15T04:04:03","modified_gmt":"2026-04-15T04:04:03","slug":"32898","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2026\/04\/15\/32898\/","title":{"rendered":"Microsoft Patch Tuesday April 2026., (Tue, Apr 14th)"},"content":{"rendered":"

Microsoft Patch Tuesday April 2026., (Tue, Apr 14th)
\n \t

\n
<\/BR>
\n
\n \t

\n
<\/BR><\/p>\n

\n

This month’s Microsoft Patch Tuesday looks like a record one, but let’s look at it a bit closer to understand what is happening<\/p>\n

The update patches a total of 243 vulnerabilities. However, 78 of them are Chromium issues affecting Microsoft Edge. Patches for Edge were released earlier. This leaves 165 vulnerabilities that are not Edge-related. Of these, 8 are rated critical, and 154 are important. One vulnerability has already been exploited, and another was made public before today but has not yet been seen in the wild.<\/p>\n

Noteworthy Vulnerabilities:<\/p>\n

CVE-2026-33827 (Windows TCP\/IP Remote Code Execution Vulnerability): As a packet nerd, I love these types of vulnerabilities. Need to know more to really figure out the impact. Microsoft describes this as a race condition, allowing attackers to execute arbitrary code over the network. Exploitation is likely tricky, but never underestimate the creativity of an AI aided attacker.<\/p>\n

CVE-2026-33825 (Microsoft Defender Elevation of Privilege Vulnerability): This vulnerability has already been disclosed.\u00a0<\/p>\n

CVE-2026-32201 (Microsoft SharePoint Server Spoofing Vulnerability): Two similar SharePoint server spoofing vulnerabilities were patched this month. Both are rated important, and this particular one is already being exploited.\u00a0<\/p>\n

CVE-2026-33826 (Windows Active Directory Remote Code Execution Vulnerability): CVSS score of “only” 8.0, but critical according to Microsoft.\u00a0<\/p>\n

CVE-2026-32190 (Microsoft Office Remote Code Execution Vulnerability): Standard fair for every monthly patch Tuesday. These are often the more worrisome vulnerabilities. Two additional critical RCE vulnerabilities affect Word (CVE-2026-33114,\u00a0CVE-2026-33115).\u00a0<\/p>\n

CVE-2026-32157 (Remote Desktop Client Remote Code Execution Vulnerability): Typically, these vulnerabilities require a user to connect to a malicious RDP server, but connections may be initiated by clicking on an “rdp:” link.<\/p>\n

CVE-2026-33824 (Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability): IKE, part of IPSEC, is usually not enabled by default. It isn’t clear yet what the exact exploitation requirements are (will update once MSFT’s page responds again)<\/p>\n

CVE-2026-23666 (.NET Framework Denial of Service Vulnerability): Just a denial of service. Not sure why this deserved “critical”.<\/p>\n

\u00a0<\/p>\n

\u00a0<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Description<\/th>\n<\/tr>\n
CVE<\/th>\nDisclosed<\/th>\nExploited<\/th>\nExploitability (old versions)<\/th>\ncurrent version<\/th>\nSeverity<\/th>\nCVSS Base (AVG)<\/th>\nCVSS Temporal (AVG)<\/th>\n<\/tr>\n<\/thead>\n
.NET Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26171%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
.NET Framework Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32226%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.9<\/td>\n5.2<\/td>\n<\/tr>\n
%%cve:2026-23666%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n7.5<\/td>\n6.7<\/td>\n<\/tr>\n
.NET Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32178%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
.NET and Visual Studio Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32203%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33116%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Active Directory Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32072%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.2<\/td>\n5.4<\/td>\n<\/tr>\n
Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-25184%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Azure Logic Apps Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32171%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Azure Monitor Agent Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32168%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32192%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Chromium: CVE-2026-5272 Heap buffer overflow in GPU<\/td>\n<\/tr>\n
%%cve:2026-5272%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5273 Use after free in CSS<\/td>\n<\/tr>\n
%%cve:2026-5273%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5274 Integer overflow in Codecs<\/td>\n<\/tr>\n
%%cve:2026-5274%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5275 Heap buffer overflow in ANGLE<\/td>\n<\/tr>\n
%%cve:2026-5275%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5276 Insufficient policy enforcement in WebUSB<\/td>\n<\/tr>\n
%%cve:2026-5276%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5277 Integer overflow in ANGLE<\/td>\n<\/tr>\n
%%cve:2026-5277%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5279 Object corruption in V8<\/td>\n<\/tr>\n
%%cve:2026-5279%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5280 Use after free in WebCodecs<\/td>\n<\/tr>\n
%%cve:2026-5280%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5281 Use after free in Dawn<\/td>\n<\/tr>\n
%%cve:2026-5281%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5283 Inappropriate implementation in ANGLE<\/td>\n<\/tr>\n
%%cve:2026-5283%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5284 Use after free in Dawn<\/td>\n<\/tr>\n
%%cve:2026-5284%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5285 Use after free in WebGL<\/td>\n<\/tr>\n
%%cve:2026-5285%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5286 Use after free in Dawn<\/td>\n<\/tr>\n
%%cve:2026-5286%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5287 Use after free in PDF<\/td>\n<\/tr>\n
%%cve:2026-5287%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5289 Use after free in Navigation<\/td>\n<\/tr>\n
%%cve:2026-5289%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5290 Use after free in Compositing<\/td>\n<\/tr>\n
%%cve:2026-5290%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5291 Inappropriate implementation in WebGL<\/td>\n<\/tr>\n
%%cve:2026-5291%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5292 Out of bounds read in WebCodecs<\/td>\n<\/tr>\n
%%cve:2026-5292%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5858 Heap buffer overflow in WebML<\/td>\n<\/tr>\n
%%cve:2026-5858%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5859 Integer overflow in WebML<\/td>\n<\/tr>\n
%%cve:2026-5859%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5860 Use after free in WebRTC<\/td>\n<\/tr>\n
%%cve:2026-5860%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5861 Use after free in V8<\/td>\n<\/tr>\n
%%cve:2026-5861%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5862 Inappropriate implementation in V8<\/td>\n<\/tr>\n
%%cve:2026-5862%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5863 Inappropriate implementation in V8<\/td>\n<\/tr>\n
%%cve:2026-5863%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5864 Heap buffer overflow in WebAudio<\/td>\n<\/tr>\n
%%cve:2026-5864%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5865 Type Confusion in V8<\/td>\n<\/tr>\n
%%cve:2026-5865%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5866 Use after free in Media<\/td>\n<\/tr>\n
%%cve:2026-5866%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5867 Heap buffer overflow in WebML<\/td>\n<\/tr>\n
%%cve:2026-5867%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5868 Heap buffer overflow in ANGLE<\/td>\n<\/tr>\n
%%cve:2026-5868%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5869 Heap buffer overflow in WebML<\/td>\n<\/tr>\n
%%cve:2026-5869%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5870 Integer overflow in Skia<\/td>\n<\/tr>\n
%%cve:2026-5870%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5871 Type Confusion in V8<\/td>\n<\/tr>\n
%%cve:2026-5871%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5872 Use after free in Blink<\/td>\n<\/tr>\n
%%cve:2026-5872%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5873 Out of bounds read and write in V8<\/td>\n<\/tr>\n
%%cve:2026-5873%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5874 Use after free in PrivateAI<\/td>\n<\/tr>\n
%%cve:2026-5874%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5875 Policy bypass in Blink<\/td>\n<\/tr>\n
%%cve:2026-5875%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5876 Side-channel information leakage in Navigation<\/td>\n<\/tr>\n
%%cve:2026-5876%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5877 Use after free in Navigation<\/td>\n<\/tr>\n
%%cve:2026-5877%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5878 Incorrect security UI in Blink<\/td>\n<\/tr>\n
%%cve:2026-5878%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5879 Insufficient validation of untrusted input in ANGLE<\/td>\n<\/tr>\n
%%cve:2026-5879%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5880 Incorrect security UI in browser UI<\/td>\n<\/tr>\n
%%cve:2026-5880%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5881 Policy bypass in LocalNetworkAccess<\/td>\n<\/tr>\n
%%cve:2026-5881%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5882 Incorrect security UI in Fullscreen<\/td>\n<\/tr>\n
%%cve:2026-5882%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5883 Use after free in Media<\/td>\n<\/tr>\n
%%cve:2026-5883%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5884 Insufficient validation of untrusted input in Media<\/td>\n<\/tr>\n
%%cve:2026-5884%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5885 Insufficient validation of untrusted input in WebML<\/td>\n<\/tr>\n
%%cve:2026-5885%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5886 Out of bounds read in WebAudio<\/td>\n<\/tr>\n
%%cve:2026-5886%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5887 Insufficient validation of untrusted input in Downloads<\/td>\n<\/tr>\n
%%cve:2026-5887%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5888 Uninitialized Use in WebCodecs<\/td>\n<\/tr>\n
%%cve:2026-5888%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5889 Cryptographic Flaw in PDFium<\/td>\n<\/tr>\n
%%cve:2026-5889%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5890 Race in WebCodecs<\/td>\n<\/tr>\n
%%cve:2026-5890%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5891 Insufficient policy enforcement in browser UI<\/td>\n<\/tr>\n
%%cve:2026-5891%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5892 Insufficient policy enforcement in PWAs<\/td>\n<\/tr>\n
%%cve:2026-5892%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5893 Race in V8<\/td>\n<\/tr>\n
%%cve:2026-5893%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5894 Inappropriate implementation in PDF<\/td>\n<\/tr>\n
%%cve:2026-5894%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5895 Incorrect security UI in Omnibox<\/td>\n<\/tr>\n
%%cve:2026-5895%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5896 Policy bypass in Audio<\/td>\n<\/tr>\n
%%cve:2026-5896%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5897 Incorrect security UI in Downloads<\/td>\n<\/tr>\n
%%cve:2026-5897%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5898 Incorrect security UI in Omnibox<\/td>\n<\/tr>\n
%%cve:2026-5898%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5899 Incorrect security UI in History Navigation<\/td>\n<\/tr>\n
%%cve:2026-5899%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5900 Policy bypass in Downloads<\/td>\n<\/tr>\n
%%cve:2026-5900%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5901 Policy bypass in DevTools<\/td>\n<\/tr>\n
%%cve:2026-5901%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5902 Race in Media<\/td>\n<\/tr>\n
%%cve:2026-5902%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5903 Policy bypass in IFrameSandbox<\/td>\n<\/tr>\n
%%cve:2026-5903%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5904 Use after free in V8<\/td>\n<\/tr>\n
%%cve:2026-5904%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5905 Incorrect security UI in Permissions<\/td>\n<\/tr>\n
%%cve:2026-5905%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5906 Incorrect security UI in Omnibox<\/td>\n<\/tr>\n
%%cve:2026-5906%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5907 Insufficient data validation in Media<\/td>\n<\/tr>\n
%%cve:2026-5907%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5908 Integer overflow in Media<\/td>\n<\/tr>\n
%%cve:2026-5908%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5909 Integer overflow in Media<\/td>\n<\/tr>\n
%%cve:2026-5909%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5910 Integer overflow in Media<\/td>\n<\/tr>\n
%%cve:2026-5910%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5911 Policy bypass in ServiceWorkers<\/td>\n<\/tr>\n
%%cve:2026-5911%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5912 Integer overflow in WebRTC<\/td>\n<\/tr>\n
%%cve:2026-5912%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5913 Out of bounds read in Blink<\/td>\n<\/tr>\n
%%cve:2026-5913%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5914 Type Confusion in CSS<\/td>\n<\/tr>\n
%%cve:2026-5914%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5915 Insufficient validation of untrusted input in WebML<\/td>\n<\/tr>\n
%%cve:2026-5915%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5918 Inappropriate implementation in Navigation<\/td>\n<\/tr>\n
%%cve:2026-5918%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Chromium: CVE-2026-5919 Insufficient validation of untrusted input in WebSockets<\/td>\n<\/tr>\n
%%cve:2026-5919%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\n–<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
Connected User Experiences and Telemetry Service Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32181%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Desktop Window Manager Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-27924%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32152%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32154%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-27923%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32155%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23653%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.7<\/td>\n5.0<\/td>\n<\/tr>\n
HTTP.sys Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33096%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Microsoft Brokering File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26181%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32219%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-32091%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
Microsoft Cryptographic Services Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26152%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Microsoft Defender Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33825%%<\/td>\nYes<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n7.0<\/td>\n<\/tr>\n
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33103%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Microsoft Edge (Chromium-based) Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33118%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nLow<\/td>\n4.3<\/td>\n3.8<\/td>\n<\/tr>\n
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33119%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nModerate<\/td>\n5.4<\/td>\n4.7<\/td>\n<\/tr>\n
Microsoft Excel Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32188%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.1<\/td>\n6.2<\/td>\n<\/tr>\n
Microsoft Excel Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32189%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32197%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32198%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32199%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft High Performance Compute (HPC) Pack Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32184%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26155%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
Microsoft Management Console Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-27914%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft Office Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32190%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
Microsoft Power Apps Security Feature Bypass<\/td>\n<\/tr>\n
%%cve:2026-26149%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n9.0<\/td>\n7.9<\/td>\n<\/tr>\n
Microsoft PowerPoint Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32200%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft PowerShell Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26143%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Microsoft SQL Server Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33120%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Microsoft SharePoint Server Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-20945%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n4.6<\/td>\n4.0<\/td>\n<\/tr>\n
%%cve:2026-32201%%<\/td>\nNo<\/td>\nYes<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n6.0<\/td>\n<\/tr>\n
Microsoft Word Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33822%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.1<\/td>\n5.3<\/td>\n<\/tr>\n
Microsoft Word Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33095%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-23657%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-33114%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
%%cve:2026-33115%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
Package Catalog Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32081%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
PowerShell Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26170%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Remote Access Management service\/API (RPC server) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26183%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Remote Desktop Client Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32157%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Remote Desktop Licensing Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26160%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-26159%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Remote Desktop Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26151%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.1<\/td>\n6.2<\/td>\n<\/tr>\n
Remote Procedure Call Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32085%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
SQL Server Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32167%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.7<\/td>\n5.8<\/td>\n<\/tr>\n
%%cve:2026-32176%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.7<\/td>\n5.8<\/td>\n<\/tr>\n
UEFI Secure Boot Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-0390%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.7<\/td>\n5.8<\/td>\n<\/tr>\n
%%cve:2026-32220%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n4.4<\/td>\n3.9<\/td>\n<\/tr>\n
Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32212%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
%%cve:2026-32214%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Web Account Manager Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32079%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Win32k Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33104%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Active Directory Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33826%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.0<\/td>\n7.0<\/td>\n<\/tr>\n
Windows Admin Center Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32196%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.1<\/td>\n5.3<\/td>\n<\/tr>\n
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26178%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32073%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-26168%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-26173%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-26177%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-26182%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-27922%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-33099%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-33100%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Biometric Service Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32088%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.1<\/td>\n5.3<\/td>\n<\/tr>\n
Windows BitLocker Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-27913%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.7<\/td>\n6.7<\/td>\n<\/tr>\n
Windows Boot Manager Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26175%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n4.6<\/td>\n4.0<\/td>\n<\/tr>\n
Windows COM Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32162%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
Windows COM Server Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-20806%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26176%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-27926%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Common Log File System Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32070%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33098%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Encrypted File System (EFS) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26153%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32087%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-32093%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-32086%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-32150%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows GDI Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-27931%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
%%cve:2026-27930%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Windows Graphics Component Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32221%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.4<\/td>\n7.3<\/td>\n<\/tr>\n
Windows Hello Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-27906%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n4.4<\/td>\n3.9<\/td>\n<\/tr>\n
%%cve:2026-27928%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.7<\/td>\n7.6<\/td>\n<\/tr>\n
Windows Hyper-V Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26156%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32149%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.3<\/td>\n6.4<\/td>\n<\/tr>\n
Windows Installer Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-27910%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33824%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n9.8<\/td>\n8.5<\/td>\n<\/tr>\n
Windows Kerberos Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-27912%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.0<\/td>\n7.0<\/td>\n<\/tr>\n
Windows Kernel Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26179%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-26180%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32195%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-26163%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Kernel Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32215%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
%%cve:2026-32217%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
%%cve:2026-32218%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Windows Kernel Memory Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26169%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.1<\/td>\n5.3<\/td>\n<\/tr>\n
Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-27929%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32071%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Windows Management Services Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-20930%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows OLE Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26162%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Print Spooler Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33101%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Print Spooler Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32084%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Windows Projected File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-27927%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-26184%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32069%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32074%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32078%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Push Notifications Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26167%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
%%cve:2026-32158%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32159%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32160%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-26172%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Recovery Environment Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-20928%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n4.6<\/td>\n4.0<\/td>\n<\/tr>\n
Windows Redirected Drive Buffering System Denial of Service Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32216%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.5<\/td>\n4.8<\/td>\n<\/tr>\n
Windows Search Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-27909%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Sensor Data Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26161%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26174%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-32224%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Server Update Service (WSUS) Tampering Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26154%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.5<\/td>\n6.5<\/td>\n<\/tr>\n
Windows Shell Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-26165%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-26166%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-27918%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Shell Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32151%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
Windows Shell Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32225%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n8.8<\/td>\n7.7<\/td>\n<\/tr>\n
Windows Shell Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32202%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n4.3<\/td>\n3.8<\/td>\n<\/tr>\n
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32082%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-32083%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-32068%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Snipping Tool Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32183%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Snipping Tool Spoofing Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33829%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nModerate<\/td>\n4.3<\/td>\n3.8<\/td>\n<\/tr>\n
Windows Speech Brokered Api Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32089%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32090%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Speech Runtime Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32153%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Storage Spaces Controller Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-27907%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32076%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows TCP\/IP Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-33827%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nCritical<\/td>\n8.1<\/td>\n7.1<\/td>\n<\/tr>\n
Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-27908%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-27921%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows UPnP Device Host Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-27915%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-27919%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32075%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
%%cve:2026-27916%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-27920%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32077%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows UPnP Device Host Information Disclosure Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-27925%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.5<\/td>\n5.7<\/td>\n<\/tr>\n
Windows UPnP Device Host Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32156%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.4<\/td>\n6.4<\/td>\n<\/tr>\n
Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32223%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n6.8<\/td>\n5.9<\/td>\n<\/tr>\n
Windows User Interface Core Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32165%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-27911%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32163%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
%%cve:2026-32164%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-23670%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n5.7<\/td>\n5.0<\/td>\n<\/tr>\n
Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-27917%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows WalletService Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32080%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.0<\/td>\n6.1<\/td>\n<\/tr>\n
Windows Win32k Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
%%cve:2026-32222%%<\/td>\nNo<\/td>\nNo<\/td>\n–<\/td>\n–<\/td>\nImportant<\/td>\n7.8<\/td>\n6.8<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

—
\nJohannes B. Ullrich, Ph.D. , Dean of Research, SANS.edu<\/a>
\nTwitter<\/a>|<\/p>\n

(c) SANS Internet Storm Center. https:\/\/isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.<\/p><\/div>\n

\t

\n
<\/BR><\/p>\n

\t

\n
<\/BR>
\nGo to isc.sans.edu<\/a>
\n \t

\n
<\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"

Microsoft Patch Tuesday April 2026., (Tue, Apr 14th) This month’s Microsoft Patch Tuesday looks like a record one, but let’s look at it a bit closer to understand what is happening The update patches a total of 243 vulnerabilities. However, 78 of them are Chromium issues affecting Microsoft Edge. Patches for Edge were released earlier. […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[56],"tags":[69],"class_list":["post-12113","post","type-post","status-publish","format-standard","hentry","category-isc-sans-edu","tag-isc-sans-edu"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/12113"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=12113"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/12113\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=12113"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=12113"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=12113"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}