Skip to main content

Patch advisories

Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.

RSS Export CSV Brief (PDF) Slides (PPTX)
Microsoft release 1,590 Other vendors (KEV) 1,365 Linux 1,031 Vendor bulletins 84 Lifecycle 190

Patch these first

Top 10 of 11: exploited, disclosed before a patch, or “Exploitation More Likely” and network-reachable
  1. 1CVE-2026-96951Microsoft — Windows Shell Security Feature Bypass VulnerabilityActively exploited
  2. 2CVE-2026-108398Microsoft — .NET Framework Security Feature Bypass VulnerabilityPublicly disclosed before patch
  3. 3CVE-2026-92707Microsoft — MessagePack-CSharp Denial of Service VulnerabilityPublicly disclosed before patch
  4. 4CVE-2026-100214Microsoft — Microsoft Dynamics 365 Business Central Remote Code Execution VulnerabilityExploitation More Likely, network-reachable
  5. 5CVE-2026-102217Microsoft — WebDAV Elevation of Privilege VulnerabilityExploitation More Likely, network-reachable
  6. 6CVE-2026-88159Microsoft — Windows Background Intelligent Transfer Service (BITS) Remote Code Execution VulnerabilityExploitation More Likely, network-reachable
  7. 7CVE-2026-70279Microsoft — Microsoft Exchange Server Spoofing VulnerabilityExploitation More Likely, network-reachable
  8. 8CVE-2026-96940Microsoft — Microsoft Exchange Server Elevation of Privilege VulnerabilityExploitation More Likely, network-reachable
  9. 9CVE-2026-70571Microsoft — Microsoft Exchange Server Remote Code Execution VulnerabilityExploitation More Likely, network-reachable
  10. 10CVE-2026-70229Microsoft — Windows Active Directory Domain Services Remote Code Execution VulnerabilityExploitation More Likely, network-reachable

Microsoft CVEs

Microsoft Security Update Guide · 1,590 CVEs
Microsoft CVEs, rows 501 to 525
#CVE · titleEVRSCVSSEPSSSignal
501 CVE-2026-69435Microsoft — Azure SRE Agent Elevation of Privilege VulnerabilityCVSS 9.6 · EPSS 0.4% 12 9.6 0.4% —
502 CVE-2026-70184Microsoft — Windows Backup Engine Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.4% 12 7.8 0.4% —
503 CVE-2026-70222Microsoft — Windows Shell Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.4% 12 7.8 0.4% —
504 CVE-2026-102231Microsoft — Visual Studio Code Security Feature Bypass VulnerabilityCVSS 7.7 · EPSS 0.4% 12 7.7 0.4% —
505 CVE-2026-87696Microsoft — Microsoft Exchange Server Elevation of Privilege VulnerabilityCVSS 7.5 · EPSS 0.4% 12 7.5 0.4% —
506 CVE-2026-70142Microsoft — Windows Update Service Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.4% 12 7.8 0.4% —
507 CVE-2026-85343Microsoft — Windows Hyper-V Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.4% 12 7.8 0.4% —
508 CVE-2026-69830Microsoft — Windows DHCP Server Remote Code Execution VulnerabilityCVSS 8.1 · EPSS 0.4% 12 8.1 0.4% —
509 CVE-2026-87705Microsoft — Windows Hyper-V Security Feature Bypass VulnerabilityCVSS 7.4 · EPSS 0.3% 12 7.4 0.3% —
510 CVE-2026-102202Microsoft — Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.3% 12 7.8 0.3% —
511 CVE-2026-83873Microsoft — Windows Shell Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.3% 12 7.8 0.3% —
512 CVE-2026-88072Microsoft — Windows Host Guardian Service Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.3% 12 7.8 0.3% —
513 CVE-2026-49785Microsoft — UEFI Secure Boot Security Feature Bypass VulnerabilityCVSS 7.8 · EPSS 0.3% 12 7.8 0.3% —
514 CVE-2026-61931Microsoft — Windows Perception Simulation Service Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.3% 12 7.8 0.3% —
515 CVE-2026-68836Microsoft — Windows kernel32.dll Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.3% 12 7.8 0.3% —
516 CVE-2026-69354Microsoft — Windows Error Reporting Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.3% 12 7.8 0.3% —
517 CVE-2026-69471Microsoft — Windows Installer Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.3% 12 7.8 0.3% —
518 CVE-2026-69798Microsoft — Windows Wired AutoConfig Service Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.3% 12 7.8 0.3% —
519 CVE-2026-69850Microsoft — Windows Certificates Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.3% 12 7.8 0.3% —
520 CVE-2026-69867Microsoft — SQLite Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.3% 12 7.8 0.3% —
521 CVE-2026-69884Microsoft — Windows GDI Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.3% 12 7.8 0.3% —
522 CVE-2026-70008Microsoft — Windows IP Over USB Service Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.3% 12 7.8 0.3% —
523 CVE-2026-70048Microsoft — Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.3% 12 7.8 0.3% —
524 CVE-2026-70051Microsoft — Windows SmartScreen Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.3% 12 7.8 0.3% —
525 CVE-2026-70059Microsoft — Windows OLE Elevation of Privilege VulnerabilityCVSS 7.8 · EPSS 0.3% 12 7.8 0.3% —
Showing 501–525 of 1,590

CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.

Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.