Patch Tuesday, October 2026

Microsoft's monthly security release, Tuesday, October 13, 2026. Includes CVEs published within two days either side; Adobe and SAP ride the same day.

400 CVEs · 10 critical · 1 exploited · 0 with public exploit code

Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.

← September 2026 November 2026 →Open in the dashboard

Microsoft

400 CVEs · 10 critical · 1 exploited · 0 with public exploit code

8.8HighOct 13, 2026Microsoft Windows Code / command injectionCVE-2026-96951Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.Exploited1.5% likely
9.8CriticalOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-105010Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.1% likely
9.8CriticalOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69634Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
9.8CriticalOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-69639Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
9.8CriticalOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70147Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.1.1% likely
9.8CriticalOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70153Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.1.1% likely
9.8CriticalOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70157Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.1.1% likely
9.8CriticalOct 13, 2026Microsoft Windows 10 Version 1607 Memory corruptionCVE-2026-83519Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.1.1% likely
9.8CriticalOct 13, 2026Microsoft Windows 10 Version 1607 Memory corruptionCVE-2026-83782Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.1% likely
9.8CriticalOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85928Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
9.0CriticalOct 13, 2026Microsoft windows 10 1607CVE-2026-105008No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-102225Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft .NET 10.0 installed on Linux Code / command injectionCVE-2026-102870Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft Visual Studio 2022 version 17.14 Code / command injectionCVE-2026-103572Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-103575Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-105007An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to elevate the attacker's privilege level. An attacker who successfully exploited this vulnerability could run processes in an elevated context. However, an attacker must first gain access to the local sys
8.8HighOct 13, 2026Microsoft windows 10 21h2 Auth bypass / access controlCVE-2026-105733Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-108458Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-108467Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.1% likely
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69326Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69521Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows server 2025 Memory corruptionCVE-2026-69765Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-69985Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft .NET 10.0 runtime Memory corruptionCVE-2026-70007Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70068Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70069Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.1% likely
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70089Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70149Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70158Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
8.8HighOct 13, 2026Microsoft windows 10 1607 Auth bypass / access controlCVE-2026-70185Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70210Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.
8.8HighOct 13, 2026Microsoft windows server 2012 Memory corruptionCVE-2026-70250Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70258Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70262Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70275Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows 11 23h2 Auth bypass / access controlCVE-2026-70299Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
8.8HighOct 13, 2026Microsoft windows 10 1809 Auth bypass / access controlCVE-2026-70580Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-77496Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Path traversal / file handlingCVE-2026-83784Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.1.1% likely
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83789Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.
8.8HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-83797Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-83851Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.
8.8HighOct 13, 2026Microsoft Windows 10 Version 1607 Memory corruptionCVE-2026-83862Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Auth bypass / access controlCVE-2026-83928Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83929Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85339Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85905Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85936Double free in Windows Shell allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-88115Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-88142Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-88157Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-88159Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.1.4% likely
8.8HighOct 13, 2026Microsoft Edge (Chromium-based) Memory corruptionCVE-2026-96202Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft PowerShell 7.4CVE-2026-96251Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.
8.8HighOct 13, 2026Microsoft Windows 10 Version 1809 Memory corruptionCVE-2026-96913Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
8.4HighOct 13, 2026Microsoft windows 10 21h2 Auth bypass / access controlCVE-2026-83845Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.
8.2HighOct 13, 2026Microsoft windows 10 21h2 Memory corruptionCVE-2026-85369Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
8.1HighOct 13, 2026Microsoft windows 11 26h1 Memory corruptionCVE-2026-105005Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.
8.1HighOct 13, 2026Microsoft windows 10 21h2 Memory corruptionCVE-2026-108457Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
8.1HighOct 13, 2026Microsoft windows server 2012 Auth bypass / access controlCVE-2026-69802Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.
8.1HighOct 13, 2026Microsoft windows 10 1607CVE-2026-69830Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
8.1HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-70062Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.
8.1HighOct 13, 2026Microsoft .NET 10.0 runtime Memory corruptionCVE-2026-70197Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
8.1HighOct 13, 2026Microsoft windows 10 1607 Auth bypass / access controlCVE-2026-70229Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.1.1% likely
8.1HighOct 13, 2026Microsoft azure-storage-blob-batch Code / command injectionCVE-2026-88094Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.
8.1HighOct 13, 2026Microsoft windows server 2012 Memory corruptionCVE-2026-88117Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
8.1HighOct 13, 2026Microsoft windows server 2012 Memory corruptionCVE-2026-88119Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
8.1HighOct 13, 2026Microsoft SharePoint Enterprise Server 2016 XSSCVE-2026-97783Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
8.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69363Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
8.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83838Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.
8.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-88121Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
7.8HighOct 13, 2026Microsoft Windows Subsystem for Linux (WSL2) Path traversal / file handlingCVE-2026-102204Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-102218Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-102220Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-102227Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-103553Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-103568Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-105003Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-105004Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 11 24h2 Memory corruptionCVE-2026-108130Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows server 2022CVE-2026-108133Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-108136Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-61931Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-68836Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69354Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69471Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69633Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Crypto / certificateCVE-2026-69650Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 11 23h2 Path traversal / file handlingCVE-2026-69673Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 11 23h2 Code / command injectionCVE-2026-69718Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 11 23h2CVE-2026-69733Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 11 23h2 Path traversal / file handlingCVE-2026-69783External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69798Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69850Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69884Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft Windows 11 Version 24H2 Privilege escalationCVE-2026-69923Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft Windows 10 Version 1809 Memory corruptionCVE-2026-69926Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 21h2 Memory corruptionCVE-2026-70008Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70010Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70048Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-70051Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 11 23h2 Memory corruptionCVE-2026-70052Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.
7.8HighOct 13, 2026Microsoft Windows 10 Version 1607 Memory corruptionCVE-2026-70054Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70059Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70060Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70064Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-70112Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70113Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70123Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70131Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70132Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70138Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70139Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 11 23h2CVE-2026-70142Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70143Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.
7.8HighOct 13, 2026Microsoft windows 10 21h2 Memory corruptionCVE-2026-70151Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70172Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607CVE-2026-70177Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 21h2CVE-2026-70184Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 11 24h2 Auth bypass / access controlCVE-2026-70218Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Path traversal / file handlingCVE-2026-70222Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70225Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-70228Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70233Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70238Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70245Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70247Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.
7.8HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-70255Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 11 23h2 Memory corruptionCVE-2026-70274Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70278Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70286Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70566Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607CVE-2026-73027External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-78459Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Auth bypass / access controlCVE-2026-81969Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Auth bypass / access controlCVE-2026-83499Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607CVE-2026-83506Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83508Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83567Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 11 24h2 Auth bypass / access controlCVE-2026-83568Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83570Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83579Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607CVE-2026-83585Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83588Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 11 23h2 Memory corruptionCVE-2026-83634Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83637Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83638Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83639Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83640Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83652Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft Windows 10 Version 1607 Memory corruptionCVE-2026-83709Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83767Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-83769Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1809 Auth bypass / access controlCVE-2026-83791Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 21h2 Auth bypass / access controlCVE-2026-83792Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 11 23h2 Memory corruptionCVE-2026-83796Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 11 23h2 Memory corruptionCVE-2026-83826Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 11 24h2 Memory corruptionCVE-2026-83828Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83829Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83830Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-83832Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83833Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83836Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Auth bypass / access controlCVE-2026-83837Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Auth bypass / access controlCVE-2026-83840Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83848Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83850Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 21h2 Path traversal / file handlingCVE-2026-83927Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 11 23h2 Memory corruptionCVE-2026-83931Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85341Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Path traversal / file handlingCVE-2026-85343Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85356Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85368Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85867Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85869Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85871Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85872Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85874Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.
7.8HighOct 13, 2026Microsoft Windows 11 Version 24H2 Auth bypass / access controlCVE-2026-85884Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 21h2 Memory corruptionCVE-2026-85906Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85908Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-85911Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85927Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85933Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85945Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 11 23h2 Memory corruptionCVE-2026-87691Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-87694Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft exchange serverCVE-2026-87695Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-87699Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-87700Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-87702Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-87706Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-88118Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-88128Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Path traversal / file handlingCVE-2026-88133Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-88134Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-88147Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft .NET 10.0 runtime Path traversal / file handlingCVE-2026-96225Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
7.8HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-96867Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
7.7HighOct 13, 2026Microsoft visual studio codeCVE-2026-102231Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
7.5HighOct 13, 2026Microsoft windows 10 1607CVE-2026-103558Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
7.5HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-103569Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.1.1% likely
7.5HighOct 13, 2026Microsoft windows 11 23h2CVE-2026-103577Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.
7.5HighOct 13, 2026Microsoft windows server 2012 Privilege escalationCVE-2026-105009Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
7.5HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-105723Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.1.3% likely
7.5HighOct 13, 2026Microsoft Dynamics NAV 2018 Auth bypass / access controlCVE-2026-105728Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.
7.5HighOct 13, 2026Microsoft windows server 2019 Memory corruptionCVE-2026-69577Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.1.1% likely
7.5HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69789Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
7.5HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69976Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
7.5HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69984Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
7.5HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69986Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
7.5HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69987Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
7.5HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69988Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
7.5HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70006Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
7.5HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70058Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.1.4% likely
7.5HighOct 13, 2026Microsoft windows 10 1607 Denial of serviceCVE-2026-70133Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.1.3% likely
7.5HighOct 13, 2026Microsoft windows 10 1809 Denial of serviceCVE-2026-70163Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.1.3% likely
7.5HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70207Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.
7.5HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83795Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.1.3% likely
7.5HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83843Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.1.3% likely
7.5HighOct 13, 2026Microsoft windows server 2012 Denial of serviceCVE-2026-85321Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.1.1% likely
7.5HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85353Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.1% likely
7.5HighOct 13, 2026Microsoft exchange server Crypto / certificateCVE-2026-87696Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
7.4HighOct 13, 2026Microsoft windows 10 1607 Auth bypass / access controlCVE-2026-83511Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
7.4HighOct 13, 2026Microsoft windows 10 1607CVE-2026-87705Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.
7.3HighOct 13, 2026Microsoft .NET 10.0 runtime Path traversal / file handlingCVE-2026-70161Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.
7.2HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-108399Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
7.1HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69452Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
7.1HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70126Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.
7.0HighOct 13, 2026Microsoft Windows 10 Version 1607 Memory corruptionCVE-2026-102208Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-103554Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-103555Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-103565Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-105722Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-108132Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 11 24h2 Memory corruptionCVE-2026-108134Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 21h2 Path traversal / file handlingCVE-2026-108135Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809CVE-2026-108396Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-108464Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft Windows 10 Version 1809 Memory corruptionCVE-2026-108465Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-109453Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69387Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69596Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 11 23h2 Memory corruptionCVE-2026-69743Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-69763Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-69766Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-69795Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69840Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-69856Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69970Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69977Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-70056Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft Windows 10 Version 1607 Memory corruptionCVE-2026-70066Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70067Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 11 24h2 Memory corruptionCVE-2026-70076Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-70086Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 11 24h2 Memory corruptionCVE-2026-70115Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 11 24h2 Memory corruptionCVE-2026-70118Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-70134Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70136Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-70140Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70150Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70156Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70164Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70168Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809CVE-2026-70169Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70205Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607CVE-2026-70212Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70223Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-70230Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70237Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70241Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70252Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70272Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 11 23h2 Memory corruptionCVE-2026-72934Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 11 23h2 Memory corruptionCVE-2026-72955Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-72968Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 11 23h2 Memory corruptionCVE-2026-72969Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607CVE-2026-81971Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607CVE-2026-83505Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607CVE-2026-83509Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607CVE-2026-83510Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83564Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 11 24h2 Memory corruptionCVE-2026-83566Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83574Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83575Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83584Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83785Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 21h2 Memory corruptionCVE-2026-83790Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft Windows 10 Version 21H2 Path traversal / file handlingCVE-2026-83793Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83827Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83834Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft Windows 10 Version 1809CVE-2026-83839Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809CVE-2026-83841Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83842Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 11 24h2 Memory corruptionCVE-2026-83852Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83924Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 11 23h2 Memory corruptionCVE-2026-83930Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85342Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85352Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85354Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607CVE-2026-85355Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85828Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft Windows 10 Version 1607 Memory corruptionCVE-2026-85868Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85870Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows subsystem for linuxCVE-2026-85879Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607CVE-2026-85912Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 21h2 Memory corruptionCVE-2026-85930Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-85934Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607CVE-2026-85941Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-87693Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-87704Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-87708Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-88106Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-88107Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 11 24h2 Memory corruptionCVE-2026-88110Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-88113Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-88124Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1809CVE-2026-88146Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-88149Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
7.0HighOct 13, 2026Microsoft windows 11 24h2 Memory corruptionCVE-2026-96868Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
6.8MediumOct 13, 2026Microsoft windows 11 26h1 Memory corruptionCVE-2026-103578Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
6.8MediumOct 13, 2026Microsoft windows 10 1607 Crypto / certificateCVE-2026-59116Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.
6.8MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83573Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.
6.7MediumOct 13, 2026Microsoft Windows 10 Version 1607 Memory corruptionCVE-2026-69902Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
6.7MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-88143Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
6.6MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69635Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.
6.5MediumOct 13, 2026Microsoft windows 10 1607CVE-2026-103576Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
6.5MediumOct 13, 2026Microsoft windows 10 1809 Path traversal / file handlingCVE-2026-69973Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
6.5MediumOct 13, 2026Microsoft windows 10 1607 Denial of serviceCVE-2026-70072Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.1.2% likely
6.5MediumOct 13, 2026Microsoft windows 10 21h2CVE-2026-70122Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
6.5MediumOct 13, 2026Microsoft windows 10 1809 Auth bypass / access controlCVE-2026-70148Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
6.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70248Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
6.5MediumOct 13, 2026Microsoft windows 10 21h2 Memory corruptionCVE-2026-83636Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
6.5MediumOct 13, 2026Microsoft PowerShell 7.4CVE-2026-96303Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.
6.4MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-105006Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.
6.4MediumOct 13, 2026Microsoft windows 10 1607CVE-2026-71347Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.
6.1MediumOct 13, 2026Microsoft windows 10 1607CVE-2026-83500Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
5.9MediumOct 13, 2026Microsoft windows 10 1607 Auth bypass / access controlCVE-2026-69982Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
5.9MediumOct 13, 2026Microsoft windows server 2019 Auth bypass / access controlCVE-2026-70005Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.
5.6MediumOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-69978Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.
5.5MediumOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-103567Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 21h2 Path traversal / file handlingCVE-2026-62687Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1809 Auth bypass / access controlCVE-2026-62879Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Information disclosureCVE-2026-69644Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 11 24h2 Auth bypass / access controlCVE-2026-69971Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 21h2 Auth bypass / access controlCVE-2026-69979Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.
5.5MediumOct 13, 2026Microsoft windows 10 21h2 Memory corruptionCVE-2026-70011Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Information disclosureCVE-2026-70055Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Auth bypass / access controlCVE-2026-70057Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.
5.5MediumOct 13, 2026Microsoft Windows 10 Version 1607 Memory corruptionCVE-2026-70074Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1809 Path traversal / file handlingCVE-2026-70084Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70090Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-70128Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70135Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Auth bypass / access controlCVE-2026-70137Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70141Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70173Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows server 2012 Memory corruptionCVE-2026-70201Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70208Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Auth bypass / access controlCVE-2026-70216Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.
5.5MediumOct 13, 2026Microsoft windows 11 23h2 Memory corruptionCVE-2026-70227Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70234Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 11 24h2 Auth bypass / access controlCVE-2026-70235Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Information disclosureCVE-2026-70260Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Information disclosureCVE-2026-70261Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70270Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.
5.5MediumOct 13, 2026Microsoft Windows 10 Version 1607 Memory corruptionCVE-2026-70277Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 21h2 Auth bypass / access controlCVE-2026-81964Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.
5.5MediumOct 13, 2026Microsoft windows 10 21h2 Path traversal / file handlingCVE-2026-83507Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83565Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83765Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Auth bypass / access controlCVE-2026-83787Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83794Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Crypto / certificateCVE-2026-83798Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-83835Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 21h2 Memory corruptionCVE-2026-83849Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85320Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85909Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 11 24h2 Memory corruptionCVE-2026-85910Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-85935Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1809 Auth bypass / access controlCVE-2026-85938Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-87698Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1809 Privilege escalationCVE-2026-87709Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-88140Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft Windows 10 Version 1607 Auth bypass / access controlCVE-2026-96311Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.
5.5MediumOct 13, 2026Microsoft windows 10 21h2 Auth bypass / access controlCVE-2026-96858Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-96859Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-96860Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
5.5MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-96910Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
5.3MediumOct 13, 2026Microsoft windows 10 1607 Auth bypass / access controlCVE-2026-69640Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.
5.3MediumOct 13, 2026Microsoft windows 10 1607 Auth bypass / access controlCVE-2026-85939Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.
5.3MediumOct 13, 2026Microsoft .NET 10.0 runtime Auth bypass / access controlCVE-2026-96234Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
4.7MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-69506Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
4.7MediumOct 13, 2026Microsoft windows 10 21h2 Path traversal / file handlingCVE-2026-69969Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
4.7MediumOct 13, 2026Microsoft windows 10 1809 Memory corruptionCVE-2026-69974Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.
4.7MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70063Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.
4.7MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70077Use after free in Windows Kernel allows an authorized attacker to disclose information locally.
4.7MediumOct 13, 2026Microsoft windows 10 1607 Memory corruptionCVE-2026-70195Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.
4.7MediumOct 13, 2026Microsoft windows 11 23h2CVE-2026-83504Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.

Adobe

7 CVEs · 4 critical · 0 exploited · 0 with public exploit code

9.9CriticalOct 13, 2026Adobe experience manager Code / command injectionCVE-2026-105895Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
9.3CriticalOct 13, 2026Adobe experience manager XSSCVE-2026-106629Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.
9.3CriticalOct 13, 2026Adobe experience manager XSSCVE-2026-106630Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.
9.1CriticalOct 13, 2026Adobe experience manager Code / command injectionCVE-2026-106626Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
7.8HighOct 13, 2026Adobe photoshop Memory corruptionCVE-2026-96521Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
5.4MediumOct 13, 2026Adobe experience manager XSSCVE-2026-106628Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.
–UnscoredOct 14, 2026AdobeADV-cccs-da22e13cce62Serial number: AV26-1039 Date: October 14, 2026 As of October 13, 2026, Adobe is affected by vulnerabilities in the following products: Adobe Bridge Prior to or equal to 16.0.7 Adobe Bridge (LTS) Prior to or equal to 15.1.8 Adobe ColdFusion 2025 Version 2025.0.13 Adobe ColdFusion 2023 Version 2023.0.25 Adobe Commerce Multiple versions Adobe Commerce B2B Multiple versions Adobe Credentials SDK Multiple versions Adobe Dimension Prior to or equal to 4.1.8 Adobe Experience Manager Multiple versions

SAP

No tracked SAP CVEs in this window.

The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.