Skip to main content

Patch advisories

Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.

RSS Export CSV Brief (PDF) Slides (PPTX)
Microsoft release 1,590 Other vendors (KEV) 1,366 Linux 988 Vendor bulletins 84 Lifecycle 190

Patch these first

Top 10 of 11: exploited, disclosed before a patch, or “Exploitation More Likely” and network-reachable
  1. 1CVE-2026-96951Microsoft — Windows Shell Security Feature Bypass VulnerabilityActively exploited
  2. 2CVE-2026-108398Microsoft — .NET Framework Security Feature Bypass VulnerabilityPublicly disclosed before patch
  3. 3CVE-2026-92707Microsoft — MessagePack-CSharp Denial of Service VulnerabilityPublicly disclosed before patch
  4. 4CVE-2026-100214Microsoft — Microsoft Dynamics 365 Business Central Remote Code Execution VulnerabilityExploitation More Likely, network-reachable
  5. 5CVE-2026-102217Microsoft — WebDAV Elevation of Privilege VulnerabilityExploitation More Likely, network-reachable
  6. 6CVE-2026-88159Microsoft — Windows Background Intelligent Transfer Service (BITS) Remote Code Execution VulnerabilityExploitation More Likely, network-reachable
  7. 7CVE-2026-70279Microsoft — Microsoft Exchange Server Spoofing VulnerabilityExploitation More Likely, network-reachable
  8. 8CVE-2026-96940Microsoft — Microsoft Exchange Server Elevation of Privilege VulnerabilityExploitation More Likely, network-reachable
  9. 9CVE-2026-70571Microsoft — Microsoft Exchange Server Remote Code Execution VulnerabilityExploitation More Likely, network-reachable
  10. 10CVE-2026-70229Microsoft — Windows Active Directory Domain Services Remote Code Execution VulnerabilityExploitation More Likely, network-reachable

Microsoft CVEs

Microsoft Security Update Guide · 1,590 CVEs
Microsoft CVEs, rows 826 to 850
#CVE · titleEVRSCVSSEPSSSignal
826 CVE-2026-102858Microsoft — Microsoft Office OneNote Remote Code Execution VulnerabilityCVSS 8.8 · EPSS 0.7% 11 8.8 0.7% —
827 CVE-2026-69973Microsoft — Windows libarchive Tampering VulnerabilityCVSS 6.5 · EPSS 0.7% 11 6.5 0.7% —
828 CVE-2026-85847Microsoft — Windows Print Spooler Components Information Disclosure VulnerabilityCVSS 6.5 · EPSS 0.7% 11 6.5 0.7% —
829 CVE-2026-69765Microsoft — Windows Storport Miniport Driver Remote Code Execution VulnerabilityCVSS 8.8 · EPSS 0.7% 11 8.8 0.7% —
830 CVE-2026-69985Microsoft — Windows libarchive Remote Code Execution VulnerabilityCVSS 8.8 · EPSS 0.7% 11 8.8 0.7% —
831 CVE-2026-69521Microsoft — Windows iSCSI Remote Code Execution VulnerabilityCVSS 8.8 · EPSS 0.7% 11 8.8 0.7% —
832 CVE-2026-85841Microsoft — Windows DHCP Server Remote Code Execution VulnerabilityCVSS 6.6 · EPSS 0.6% 11 6.6 0.6% —
833 CVE-2026-108452Microsoft — Microsoft Office SharePoint Remote Code Execution VulnerabilityCVSS 8.8 · EPSS 0.6% 11 8.8 0.6% —
834 CVE-2026-88184Microsoft — Microsoft Office Excel Information Disclosure VulnerabilityCVSS 6.5 · EPSS 0.6% 11 6.5 0.6% —
835 CVE-2026-88201Microsoft — Microsoft Office Excel Information Disclosure VulnerabilityCVSS 6.5 · EPSS 0.6% 11 6.5 0.6% —
836 CVE-2026-83851Microsoft — Windows Partition Management Driver Elevation of Privilege VulnerabilityCVSS 8.8 · EPSS 0.6% 11 8.8 0.6% —
837 CVE-2026-85805Microsoft — Microsoft PowerShell Security Feature Bypass VulnerabilityCVSS 6.5 · EPSS 0.6% 11 6.5 0.6% —
838 CVE-2026-96303Microsoft — Microsoft PowerShell Security Feature Bypass VulnerabilityCVSS 6.5 · EPSS 0.6% 11 6.5 0.6% —
839 CVE-2026-67626Microsoft — Microsoft SQL Server Denial of Service VulnerabilityCVSS 6.5 · EPSS 0.6% 11 6.5 0.6% —
840 CVE-2026-83928Microsoft — Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution VulnerabilityCVSS 8.8 · EPSS 0.6% 11 8.8 0.6% —
841 CVE-2026-97832Microsoft — Role: DNS Server Information Disclosure VulnerabilityCVSS 6.5 · EPSS 0.6% 11 6.5 0.6% —
842 CVE-2026-97834Microsoft — Role: DNS Server Information Disclosure VulnerabilityCVSS 6.5 · EPSS 0.6% 11 6.5 0.6% —
843 CVE-2026-97842Microsoft — Role: DNS Server Information Disclosure VulnerabilityCVSS 6.5 · EPSS 0.6% 11 6.5 0.6% —
844 CVE-2026-83777Microsoft — Windows Bluetooth Service Elevation of Privilege VulnerabilityCVSS 8.8 · EPSS 0.5% 11 8.8 0.5% —
845 CVE-2026-97782Microsoft — Microsoft Office SharePoint Tampering VulnerabilityCVSS 6.8 · EPSS 0.5% 11 6.8 0.5% —
846 CVE-2026-108453Microsoft — Microsoft Office PowerPoint Information Disclosure VulnerabilityCVSS 6.5 · EPSS 0.5% 11 6.5 0.5% —
847 CVE-2026-108434Microsoft — Microsoft Office Word Information Disclosure VulnerabilityCVSS 6.5 · EPSS 0.5% 11 6.5 0.5% —
848 CVE-2026-108435Microsoft — Microsoft Office Word Information Disclosure VulnerabilityCVSS 6.5 · EPSS 0.5% 11 6.5 0.5% —
849 CVE-2026-108436Microsoft — Microsoft Office Word Information Disclosure VulnerabilityCVSS 6.5 · EPSS 0.5% 11 6.5 0.5% —
850 CVE-2026-108438Microsoft — Microsoft Office Word Information Disclosure VulnerabilityCVSS 6.5 · EPSS 0.5% 11 6.5 0.5% —
Showing 826–850 of 1,590

CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.

Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.