Microsoft Patch Tuesday
This month's Microsoft Security Update Guide release: severity and exploitation dashboards, a searchable CVE browser, and a downloadable brief.
Browse This Release's CVEs
84 of 448 CVEs match the current filters, sorted by EVULNABLE Risk.
| CVE | Title | MSRC severity | EVRS | CVSS | EPSS | KEV | Actively Exploited | Product(s) |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-62893 | Windows Deployment Services TFTP Server Remote Code Execution Vulnerability | Critical | 19 Elevated | 9.8 | 0.027 | No | No | Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows Server 2025, +6 more |
| CVE-2026-62823 | Windows DHCP Server Remote Code Execution Vulnerability | Critical | 18 Elevated | 8.8 | 0.007 | No | No | Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows Server 2025, +6 more |
| CVE-2026-65665 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Critical | 18 Elevated | 8.8 | 0.028 | No | No | Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition |
| CVE-2026-69558 | Microsoft Partner Center Information Disclosure Vulnerability | Critical | 17 Elevated | 8.6 | 0.005 | No | No | Microsoft Partner Center |
| CVE-2026-69836 | Microsoft Entra ID Remote Code Execution Vulnerability | Critical | 15 Elevated | 10.0 | 0.016 | No | No | Microsoft Entra ID |
| CVE-2026-62878 | Windows DNS Server Remote Code Execution Vulnerability | Critical | 15 Elevated | 9.8 | 0.013 | No | No | Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows Server 2025, +6 more |
| CVE-2026-62830 | Azure SRE Agent Elevation of Privilege Vulnerability | Critical | 14 Elevated | 9.9 | 0.005 | No | No | Azure SRE Agent |
| CVE-2026-68782 | Azure SQL Database Elevation of Privilege Vulnerability | Critical | 14 Elevated | 9.9 | 0.005 | No | No | Azure SQL Database |
| CVE-2026-68789 | Azure SQL Database Elevation of Privilege Vulnerability | Critical | 14 Elevated | 9.9 | 0.005 | No | No | Azure SQL Database |
| CVE-2026-50516 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | Critical | 14 Elevated | 9.4 | 0.008 | No | No | Azure Kubernetes Service |
| CVE-2026-56162 | Azure SQL Database Elevation of Privilege Vulnerability | Critical | 13 Elevated | 10.0 | 0.007 | No | No | Azure SQL Database |
| CVE-2026-63508 | Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability | Critical | 13 Elevated | 10.0 | 0.005 | No | No | Microsoft Planetary Computer Pro (GeoCatalog) |
| CVE-2026-65667 | Microsoft Teams Elevation of Privilege Vulnerability | Critical | 13 Elevated | 10.0 | 0.006 | No | No | Microsoft Teams |
| CVE-2026-65770 | Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability | Critical | 13 Elevated | 10.0 | 0.006 | No | No | Azure Managed Instance for Apache Cassandra |
| CVE-2026-65801 | Microsoft Exchange Online Elevation of Privilege Vulnerability | Critical | 13 Elevated | 10.0 | 0.005 | No | No | Microsoft Exchange Online |
| CVE-2026-65816 | Azure Arc Elevation of Privilege Vulnerability | Critical | 13 Elevated | 10.0 | 0.005 | No | No | Azure Web Apps |
| CVE-2026-69502 | Azure SQL Database Elevation of Privilege Vulnerability | Critical | 13 Elevated | 10.0 | 0.006 | No | No | Azure SQL Database |
| CVE-2026-69555 | Azure Arc Elevation of Privilege Vulnerability | Critical | 13 Elevated | 10.0 | 0.004 | No | No | Azure ARC |
| CVE-2026-50481 | Azure Active Directory Elevation of Privilege Vulnerability | Critical | 13 Elevated | 9.9 | 0.006 | No | No | Azure Active Directory |
| CVE-2026-50515 | Azure Service Bus Remote Code Execution Vulnerability | Critical | 13 Elevated | 9.9 | 0.011 | No | No | Azure Service Bus |
| CVE-2026-59115 | Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability | Critical | 13 Elevated | 9.9 | 0.008 | No | No | Microsoft Entra Provisioning Service |
| CVE-2026-63509 | Microsoft Fabric Elevation of Privilege Vulnerability | Critical | 13 Elevated | 9.9 | 0.006 | No | No | Microsoft Fabric |
| CVE-2026-62816 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Critical | 13 Elevated | 8.8 | 0.004 | No | No | Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), +24 more |
| CVE-2026-62817 | Windows DNS Server Remote Code Execution Vulnerability | Critical | 13 Elevated | 8.8 | 0.007 | No | No | Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows Server 2025 |
| CVE-2026-62818 | Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability | Critical | 13 Elevated | 8.8 | 0.010 | No | No | Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), +10 more |
The CSV is exactly the 84 CVE(s) matching the filters above. The PDF is the full leadership brief — at-a-glance summary, Patch First spotlight, top affected products, and the complete per-CVE inventory — not filtered to what is shown here.
CVE detail
Expand any CVE for its description, EVRS score breakdown, and affected products.
CVE-2026-62893 — Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
Remote Code Execution
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 9.8, and Microsoft Exploitability Index: Exploitation More Likely.
Exploitation status: Neither
Microsoft Exploitability Index: Exploitation More Likely
CVSS v3.1 base score: 9.8
FIRST EPSS: 0.027 (85.1st pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
KB article(s): 5120238, 5120242, 5120229, 5120233, 5120228, 5120418, 5120386, 5120385
Affected product(s): Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows Server 2025, +6 more
CVE-2026-62823 — Windows DHCP Server Remote Code Execution Vulnerability
Remote Code Execution
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 8.8, and Microsoft Exploitability Index: Exploitation More Likely.
Exploitation status: Neither
Microsoft Exploitability Index: Exploitation More Likely
CVSS v3.1 base score: 8.8
FIRST EPSS: 0.007 (49.3rd pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
KB article(s): 5120238, 5120242, 5120229, 5120233, 5120228, 5120418, 5120386, 5120385
Affected product(s): Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows Server 2025, +6 more
CVE-2026-65665 — Microsoft SharePoint Server Remote Code Execution Vulnerability
Remote Code Execution
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 8.8, and Microsoft Exploitability Index: Exploitation More Likely.
Exploitation status: Neither
Microsoft Exploitability Index: Exploitation More Likely
CVSS v3.1 base score: 8.8
FIRST EPSS: 0.028 (85.3rd pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
KB article(s): 5002894, 5002896, 5002893
Affected product(s): Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
CVE-2026-69558 — Microsoft Partner Center Information Disclosure Vulnerability
Information Disclosure
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 8.6, and Microsoft Exploitability Index: Exploitation More Likely.
Exploitation status: Neither
Microsoft Exploitability Index: Exploitation More Likely
CVSS v3.1 base score: 8.6
FIRST EPSS: 0.005 (43.3rd pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Microsoft Partner Center
CVE-2026-69836 — Microsoft Entra ID Remote Code Execution Vulnerability
Remote Code Execution
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 10.0, and Microsoft Exploitability Index: Exploitation Less Likely.
Exploitation status: Neither
Microsoft Exploitability Index: Exploitation Less Likely
CVSS v3.1 base score: 10.0
FIRST EPSS: 0.016 (73.5th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Microsoft Entra ID
CVE-2026-62878 — Windows DNS Server Remote Code Execution Vulnerability
Remote Code Execution
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 9.8, and Microsoft Exploitability Index: Exploitation Less Likely.
Exploitation status: Neither
Microsoft Exploitability Index: Exploitation Less Likely
CVSS v3.1 base score: 9.8
FIRST EPSS: 0.013 (67.6th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
KB article(s): 5120238, 5120242, 5120229, 5120233, 5120228, 5120418, 5120386, 5120385
Affected product(s): Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows Server 2025, +6 more
CVE-2026-62830 — Azure SRE Agent Elevation of Privilege Vulnerability
Elevation of Privilege
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 9.9, and Microsoft Exploitability Index: Exploitation Less Likely.
Exploitation status: Neither
Microsoft Exploitability Index: Exploitation Less Likely
CVSS v3.1 base score: 9.9
FIRST EPSS: 0.005 (41.9th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Azure SRE Agent
CVE-2026-68782 — Azure SQL Database Elevation of Privilege Vulnerability
Elevation of Privilege
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 9.9, and Microsoft Exploitability Index: Exploitation Less Likely.
Exploitation status: Neither
Microsoft Exploitability Index: Exploitation Less Likely
CVSS v3.1 base score: 9.9
FIRST EPSS: 0.005 (43.4th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Azure SQL Database
CVE-2026-68789 — Azure SQL Database Elevation of Privilege Vulnerability
Elevation of Privilege
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 9.9, and Microsoft Exploitability Index: Exploitation Less Likely.
Exploitation status: Neither
Microsoft Exploitability Index: Exploitation Less Likely
CVSS v3.1 base score: 9.9
FIRST EPSS: 0.005 (42.8th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Azure SQL Database
CVE-2026-50516 — Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Elevation of Privilege
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 9.4, and Microsoft Exploitability Index: Exploitation Less Likely.
Exploitation status: Neither
Microsoft Exploitability Index: Exploitation Less Likely
CVSS v3.1 base score: 9.4
FIRST EPSS: 0.008 (55.3rd pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Azure Kubernetes Service
CVE-2026-56162 — Azure SQL Database Elevation of Privilege Vulnerability
Elevation of Privilege
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 10.0, and an EPSS probability of 0.007.
Exploitation status: Neither
Microsoft Exploitability Index: N/A
CVSS v3.1 base score: 10.0
FIRST EPSS: 0.007 (49.4th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Azure SQL Database
CVE-2026-63508 — Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability
Elevation of Privilege
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 10.0, and an EPSS probability of 0.005.
Exploitation status: Neither
Microsoft Exploitability Index: N/A
CVSS v3.1 base score: 10.0
FIRST EPSS: 0.005 (43rd pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Microsoft Planetary Computer Pro (GeoCatalog)
CVE-2026-65667 — Microsoft Teams Elevation of Privilege Vulnerability
Elevation of Privilege
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 10.0, and an EPSS probability of 0.006.
Exploitation status: Neither
Microsoft Exploitability Index: N/A
CVSS v3.1 base score: 10.0
FIRST EPSS: 0.006 (47.4th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Microsoft Teams
CVE-2026-65770 — Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
Remote Code Execution
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 10.0, and an EPSS probability of 0.006.
Exploitation status: Neither
Microsoft Exploitability Index: N/A
CVSS v3.1 base score: 10.0
FIRST EPSS: 0.006 (44.7th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Azure Managed Instance for Apache Cassandra
CVE-2026-65801 — Microsoft Exchange Online Elevation of Privilege Vulnerability
Elevation of Privilege
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 10.0, and an EPSS probability of 0.005.
Exploitation status: Neither
Microsoft Exploitability Index: N/A
CVSS v3.1 base score: 10.0
FIRST EPSS: 0.005 (41.6th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Microsoft Exchange Online
CVE-2026-65816 — Azure Arc Elevation of Privilege Vulnerability
Elevation of Privilege
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 10.0, and an EPSS probability of 0.005.
Exploitation status: Neither
Microsoft Exploitability Index: N/A
CVSS v3.1 base score: 10.0
FIRST EPSS: 0.005 (42.4th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Azure Web Apps
CVE-2026-69502 — Azure SQL Database Elevation of Privilege Vulnerability
Elevation of Privilege
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 10.0, and an EPSS probability of 0.006.
Exploitation status: Neither
Microsoft Exploitability Index: N/A
CVSS v3.1 base score: 10.0
FIRST EPSS: 0.006 (45.5th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Azure SQL Database
CVE-2026-69555 — Azure Arc Elevation of Privilege Vulnerability
Elevation of Privilege
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 10.0, and an EPSS probability of 0.004.
Exploitation status: Neither
Microsoft Exploitability Index: N/A
CVSS v3.1 base score: 10.0
FIRST EPSS: 0.004 (36.9th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Azure ARC
CVE-2026-50481 — Azure Active Directory Elevation of Privilege Vulnerability
Elevation of Privilege
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 9.9, and an EPSS probability of 0.006.
Exploitation status: Neither
Microsoft Exploitability Index: N/A
CVSS v3.1 base score: 9.9
FIRST EPSS: 0.006 (44.6th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Azure Active Directory
CVE-2026-50515 — Azure Service Bus Remote Code Execution Vulnerability
Remote Code Execution
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 9.9, and an EPSS probability of 0.011.
Exploitation status: Neither
Microsoft Exploitability Index: N/A
CVSS v3.1 base score: 9.9
FIRST EPSS: 0.011 (63.4th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Azure Service Bus
CVE-2026-59115 — Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
Elevation of Privilege
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 9.9, and an EPSS probability of 0.008.
Exploitation status: Neither
Microsoft Exploitability Index: N/A
CVSS v3.1 base score: 9.9
FIRST EPSS: 0.008 (53.1st pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Microsoft Entra Provisioning Service
CVE-2026-63509 — Microsoft Fabric Elevation of Privilege Vulnerability
Elevation of Privilege
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 9.9, and an EPSS probability of 0.006.
Exploitation status: Neither
Microsoft Exploitability Index: N/A
CVSS v3.1 base score: 9.9
FIRST EPSS: 0.006 (47.4th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
Affected product(s): Microsoft Fabric
CVE-2026-62816 — Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Remote Code Execution
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 8.8, and Microsoft Exploitability Index: Exploitation Less Likely.
Exploitation status: Neither
Microsoft Exploitability Index: Exploitation Less Likely
CVSS v3.1 base score: 8.8
FIRST EPSS: 0.004 (32.4th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
KB article(s): 5120238, 5120242, 5120229, 5120249, 5120233, 5120228, 5121003, 5120994, 5120240, 5121000, 5120418, 5120386, 5120385
Affected product(s): Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), +24 more
CVE-2026-62817 — Windows DNS Server Remote Code Execution Vulnerability
Remote Code Execution
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 8.8, and Microsoft Exploitability Index: Exploitation Less Likely.
Exploitation status: Neither
Microsoft Exploitability Index: Exploitation Less Likely
CVSS v3.1 base score: 8.8
FIRST EPSS: 0.007 (49.5th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
KB article(s): 5120238, 5120242, 5120229, 5120233, 5120228
Affected product(s): Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows Server 2025
CVE-2026-62818 — Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
Remote Code Execution
Recommended priority: Scheduled Maintenance
Why this score: CVSS base score 8.8, and Microsoft Exploitability Index: Exploitation Less Likely.
Exploitation status: Neither
Microsoft Exploitability Index: Exploitation Less Likely
CVSS v3.1 base score: 8.8
FIRST EPSS: 0.010 (59.6th pctl) — probability of exploitation in the next 30 days, with its rank across all scored CVEs
CISA KEV: Not currently listed
KB article(s): 5120238, 5120242, 5120229, 5120233, 5120228, 5120418, 5120386, 5120385
Affected product(s): Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), +10 more