Skip to main content

Patch advisories

Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.

RSS Export CSV Brief (PDF) Slides (PPTX)
Microsoft release 1,598 Other vendors (KEV) 1,364 Linux 1,019 Vendor bulletins 84 Lifecycle 190

Patch these first

Top 10 of 11: exploited, disclosed before a patch, or “Exploitation More Likely” and network-reachable
  1. 1CVE-2026-96951Microsoft — Windows Shell Security Feature Bypass VulnerabilityActively exploited
  2. 2CVE-2026-108398Microsoft — .NET Framework Security Feature Bypass VulnerabilityPublicly disclosed before patch
  3. 3CVE-2026-92707Microsoft — MessagePack-CSharp Denial of Service VulnerabilityPublicly disclosed before patch
  4. 4CVE-2026-100214Microsoft — Microsoft Dynamics 365 Business Central Remote Code Execution VulnerabilityExploitation More Likely, network-reachable
  5. 5CVE-2026-102217Microsoft — WebDAV Elevation of Privilege VulnerabilityExploitation More Likely, network-reachable
  6. 6CVE-2026-88159Microsoft — Windows Background Intelligent Transfer Service (BITS) Remote Code Execution VulnerabilityExploitation More Likely, network-reachable
  7. 7CVE-2026-70279Microsoft — Microsoft Exchange Server Spoofing VulnerabilityExploitation More Likely, network-reachable
  8. 8CVE-2026-96940Microsoft — Microsoft Exchange Server Elevation of Privilege VulnerabilityExploitation More Likely, network-reachable
  9. 9CVE-2026-70571Microsoft — Microsoft Exchange Server Remote Code Execution VulnerabilityExploitation More Likely, network-reachable
  10. 10CVE-2026-70229Microsoft — Windows Active Directory Domain Services Remote Code Execution VulnerabilityExploitation More Likely, network-reachable

Microsoft CVEs

Microsoft Security Update Guide · 1,598 CVEs
Microsoft CVEs, rows 1451 to 1475
#CVE · titleEVRSCVSSEPSSSignal
1451 CVE-2026-69969Microsoft — Windows AppX Deployment Service Information Disclosure VulnerabilityCVSS 4.7 · EPSS 0.3% 6 4.7 0.3% —
1452 CVE-2026-83582Microsoft — Windows Graphics Kernel Information Disclosure VulnerabilityCVSS 4.7 · EPSS 0.3% 6 4.7 0.3% —
1453 CVE-2026-102186Microsoft — Windows Network File System Information Disclosure VulnerabilityCVSS 4.7 · EPSS 0.3% 6 4.7 0.3% —
1454 CVE-2026-83697Microsoft — Windows Modern Device Management (MDM) Tampering VulnerabilityCVSS 4.7 · EPSS 0.2% 6 4.7 0.2% —
1455 CVE-2026-88094Microsoft — Azure Storage Library Elevation of Privilege VulnerabilityEPSS 0.6% 4 — 0.6% —
1456 CVE-2026-62840Microsoft — Linux Kernel Elevation of Privilege VulnerabilityEPSS 0.2% 4 — 0.2% —
1457 CVE-2026-83831Microsoft — Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 4 — — —
1458 CVE-2026-85898Microsoft — Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 4 — — —
1459 CVE-2026-98420Microsoft — ksmbd: follow SMB2 session expiration semanticsEPSS 0.2% 0 — 0.2% —
1460 CVE-2026-98184Microsoft — wifi: mwifiex: prevent authentication frame length truncationEPSS 0.2% 0 — 0.2% —
1461 CVE-2026-98731Microsoft — Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()EPSS 0.2% 0 — 0.2% —
1462 CVE-2026-98392Microsoft — Bluetooth: btintel_pcie: fix tx_handle bounds off-by-oneEPSS 0.2% 0 — 0.2% —
1463 CVE-2026-98411Microsoft — power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()EPSS 0.2% 0 — 0.2% —
1464 CVE-2026-98412Microsoft — power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()EPSS 0.2% 0 — 0.2% —
1465 CVE-2026-98522Microsoft — drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()EPSS 0.2% 0 — 0.2% —
1466 CVE-2026-98523Microsoft — drm/client: fix restore of partially initialized clientEPSS 0.2% 0 — 0.2% —
1467 CVE-2026-98528Microsoft — gpio: cdev: fix kernel stack leak to user-space in error pathEPSS 0.2% 0 — 0.2% —
1468 CVE-2026-98533Microsoft — ipe: protect the dm-verity root hash with RCUEPSS 0.2% 0 — 0.2% —
1469 CVE-2026-98534Microsoft — ipe: fix use-after-free when auditing a newly loaded policyEPSS 0.2% 0 — 0.2% —
1470 CVE-2026-98408Microsoft — watchdog: rzv2h: Avoid division by zeroEPSS 0.2% 0 — 0.2% —
1471 CVE-2026-98296Microsoft — Bluetooth: btintel_pcie: validate TX skb length in send_syncEPSS 0.2% 0 — 0.2% —
1472 CVE-2026-98390Microsoft — x86/amd_node: Avoid divide by zero on virtualized systemsEPSS 0.2% 0 — 0.2% —
1473 CVE-2026-98414Microsoft — memcg: avoid charging the root memcg from obj_cgroup_charge_pages()EPSS 0.2% 0 — 0.2% —
1474 CVE-2026-98415Microsoft — soc: samsung: exynos-pmu: fix use-after-free of interrupt generator nodeEPSS 0.2% 0 — 0.2% —
1475 CVE-2026-98759Microsoft — usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()EPSS 0.2% 0 — 0.2% —
Showing 1,451–1,475 of 1,598

CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.

Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.