Microsoft Patch Tuesday
This month's Microsoft Security Update Guide release: severity and exploitation dashboards, a searchable CVE browser, and a downloadable brief.
Browse This Release's CVEs
3 of 448 CVEs match the current filters, sorted by EVULNABLE Risk.
| CVE | Title | MSRC severity | EVRS | CVSS | EPSS | KEV | Actively Exploited | Product(s) |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-62832 | Windows User Profile Service Elevation of Privilege Vulnerability | Important | 34 Elevated | 7.8 | 0.033 | No | No | Windows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for x64-based Systems, +12 more |
| CVE-2026-69414 | Microsoft Defender Elevation of Privilege Vulnerability | Important | 33 Elevated | 7.8 | 0.006 | No | No | Microsoft Malware Protection Engine |
| CVE-2026-72971 | Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability | Important | 24 Elevated | 5.5 | 0.005 | No | No | Windows 11 version 26H1 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems |
The CSV is exactly the 3 CVE(s) matching the filters above. The PDF is the full leadership brief — at-a-glance summary, Patch First spotlight, top affected products, and the complete per-CVE inventory — not filtered to what is shown here.
CVE detail
Expand any CVE for its description, EVRS score breakdown, and affected products.
CVE-2026-62832 — Windows User Profile Service Elevation of Privilege Vulnerability
Elevation of Privilege
Recommended priority: Scheduled Maintenance
Why this score: Publicly disclosed before a patch shipped, and CVSS base score 7.8.
Exploitation status: Publicly Disclosed
Microsoft Exploitability Index: Exploitation More Likely
CVSS v3.1 base score: 7.8
FIRST EPSS: 0.033 (87.7th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
KB article(s): 5120242, 5120229, 5120249, 5120233, 5120228, 5121003, 5120994, 5120240, 5121000
Affected product(s): Windows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for x64-based Systems, +12 more
CVE-2026-69414 — Microsoft Defender Elevation of Privilege Vulnerability
Elevation of Privilege
Recommended priority: Scheduled Maintenance
Why this score: Publicly disclosed before a patch shipped, and CVSS base score 7.8.
Exploitation status: Publicly Disclosed
Microsoft Exploitability Index: Exploitation More Likely
CVSS v3.1 base score: 7.8
FIRST EPSS: 0.006 (44.3rd pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Microsoft Malware Protection Engine
CVE-2026-72971 — Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability
Tampering
Recommended priority: Scheduled Maintenance
Why this score: Publicly disclosed before a patch shipped, and CVSS base score 5.5.
Exploitation status: Publicly Disclosed
Microsoft Exploitability Index: Exploitation Unlikely
CVSS v3.1 base score: 5.5
FIRST EPSS: 0.005 (39.1st pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
KB article(s): 5121000
Affected product(s): Windows 11 version 26H1 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems