Microsoft
CVEs currently on EVULNABLE's Priority Feed for Microsoft, and this vendor's own CISA KEV history.
CISA KEV additions over time
Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.
20 Apr – 12 Oct; busiest week: 6 added.
- Not ransomware-linked
- Ransomware-linked
- This week (so far)
| Week of | Added to KEV | Ransomware-linked |
|---|---|---|
| 2026-04-20 | 1 | 1 |
| 2026-04-27 | 1 | 0 |
| 2026-05-04 | 0 | 0 |
| 2026-05-11 | 1 | 0 |
| 2026-05-18 | 6 | 0 |
| 2026-05-25 | 0 | 0 |
| 2026-06-01 | 0 | 0 |
| 2026-06-08 | 0 | 0 |
| 2026-06-15 | 0 | 0 |
| 2026-06-22 | 0 | 0 |
| 2026-06-29 | 1 | 1 |
| 2026-07-06 | 0 | 0 |
| 2026-07-13 | 3 | 0 |
| 2026-07-20 | 1 | 0 |
| 2026-07-27 | 0 | 0 |
| 2026-08-03 | 0 | 0 |
| 2026-08-10 | 1 | 0 |
| 2026-08-17 | 2 | 0 |
| 2026-08-24 | 1 | 0 |
| 2026-08-31 | 0 | 0 |
| 2026-09-07 | 2 | 0 |
| 2026-09-14 | 0 | 0 |
| 2026-09-21 | 1 | 0 |
| 2026-09-28 | 0 | 0 |
| 2026-10-05 | 0 | 0 |
| 2026-10-12 (so far) | 1 | 0 |
In EVULNABLE's ranked feed
Showing the top 50 of 1,455 Microsoft CVEs in EVULNABLE's ranked feed.
#1 75 Urgent CVE-2026-96951 Patch TuesdayActively Exploitedwrite-up Microsoft — Windows Shell Security Feature Bypass Vulnerability KEV, EPSS 1.5%, Microsoft: exploitation detected
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.015.
Our write-up
A command injection flaw in Windows Shell lets attackers bypass Mark of the Web protections using a crafted file sent by email or instant message, and it is being exploited in the wild.
Affected: Windows 10, Windows 11 and Windows Server 2012 R2 through 2025.
Fix: Install the October cumulative update and reboot.
Updated Oct 14, 2026. Changed: Reformatted into summary, affected systems and fix.
AI-written summary, Oct 14, 2026 Confirm details in the vendor advisory before acting. Source: CISA KEV
#2 30 Elevated CVE-2026-108398 Patch Tuesday Microsoft — .NET Framework Security Feature Bypass Vulnerability EPSS 0.5%, pre-patch disclosure
EVRS 30/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.005, and Publicly disclosed before a patch shipped.
#3 26 Elevated CVE-2026-92707 Patch Tuesday Microsoft — MessagePack-CSharp Denial of Service Vulnerability EPSS 0.6%, pre-patch disclosure
EVRS 26/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.006, and Publicly disclosed before a patch shipped.
#4 18 Elevated CVE-2026-100214 Patch Tuesday Microsoft — Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability EPSS 1.8%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.018, and Microsoft Exploitability Index: Exploitation More Likely.
#5 18 Elevated CVE-2026-102217 Patch Tuesday Microsoft — WebDAV Elevation of Privilege Vulnerability EPSS 1.1%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.011, and Microsoft Exploitability Index: Exploitation More Likely.
#6 18 Elevated CVE-2026-88159 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability EPSS 1.0%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and Microsoft Exploitability Index: Exploitation More Likely.
#7 18 Elevated CVE-2026-70279 Patch Tuesday Microsoft — Microsoft Exchange Server Spoofing Vulnerability EPSS 0.9%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and Microsoft Exploitability Index: Exploitation More Likely.
#8 18 Elevated CVE-2026-96940 Patch Tuesday Microsoft — Microsoft Exchange Server Elevation of Privilege Vulnerability EPSS 0.5%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.005, and Microsoft Exploitability Index: Exploitation More Likely.
#9 18 Elevated CVE-2026-69918 Patch Tuesday Microsoft — Windows Core Messaging Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#10 17 Elevated CVE-2026-69718 Patch Tuesday Microsoft — Windows Update Elevation of Privilege Vulnerability EPSS 1.0%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and Microsoft Exploitability Index: Exploitation More Likely.
#11 17 Elevated CVE-2026-70571 Patch Tuesday Microsoft — Microsoft Exchange Server Remote Code Execution Vulnerability EPSS 0.9%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and Microsoft Exploitability Index: Exploitation More Likely.
#12 17 Elevated CVE-2026-97798 Patch Tuesday Microsoft — Windows Error Reporting Service Elevation of Privilege Vulnerability EPSS 0.8%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and Microsoft Exploitability Index: Exploitation More Likely.
#13 17 Elevated CVE-2026-70229 Patch Tuesday Microsoft — Windows Active Directory Domain Services Remote Code Execution Vulnerability EPSS 0.7%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.007, and Microsoft Exploitability Index: Exploitation More Likely.
#14 17 Elevated CVE-2026-69673 Patch Tuesday Microsoft — Windows Update Elevation of Privilege Vulnerability EPSS 0.5%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.005, and Microsoft Exploitability Index: Exploitation More Likely.
#15 17 Elevated CVE-2026-69733 Patch Tuesday Microsoft — Windows Update Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#16 17 Elevated CVE-2026-69783 Patch Tuesday Microsoft — Windows Update Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#17 17 Elevated CVE-2026-83704 Patch Tuesday Microsoft — Microsoft Windows Search Component Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#18 17 Elevated CVE-2026-70054 Patch Tuesday Microsoft — Windows NetBIOS Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#19 17 Elevated CVE-2026-69882 Patch Tuesday Microsoft — Windows Update Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#20 17 Elevated CVE-2026-85849 Patch Tuesday Microsoft — Windows AppX Deployment Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#21 17 Elevated CVE-2026-88133 Patch Tuesday Microsoft — Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#22 17 Elevated CVE-2026-96911 Patch Tuesday Microsoft — Microsoft Windows Search Component Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#23 17 Elevated CVE-2026-83927 Patch Tuesday Microsoft — Windows Registry Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#24 17 Elevated CVE-2026-85884 Patch Tuesday Microsoft — Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#25 17 Elevated CVE-2026-69923 Patch Tuesday Microsoft — Windows AI Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#26 17 Elevated CVE-2026-88191 Patch Tuesday Microsoft — Microsoft Windows Search Component Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#27 17 Elevated CVE-2026-70060 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#28 17 Elevated CVE-2026-70104 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#29 17 Elevated CVE-2026-70106 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#30 17 Elevated CVE-2026-70108 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#31 17 Elevated CVE-2026-70245 Patch Tuesday Microsoft — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#32 17 Elevated CVE-2026-70303 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#33 17 Elevated CVE-2026-83669 Patch Tuesday Microsoft — Windows Error Reporting Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#34 17 Elevated CVE-2026-83735 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#35 17 Elevated CVE-2026-83761 Patch Tuesday Microsoft — Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#36 17 Elevated CVE-2026-69880 Patch Tuesday Microsoft — Desktop Window Manager Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#37 17 Elevated CVE-2026-69926 Patch Tuesday Microsoft — Desktop Window Manager Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#38 17 Elevated CVE-2026-70233 Patch Tuesday Microsoft — Windows Common Log File System Driver Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#39 17 Elevated CVE-2026-70286 Patch Tuesday Microsoft — Windows Graphics Component Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#40 17 Elevated CVE-2026-83699 Patch Tuesday Microsoft — Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#41 17 Elevated CVE-2026-83830 Patch Tuesday Microsoft — Windows COM+ Event System Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#42 17 Elevated CVE-2026-83848 Patch Tuesday Microsoft — Windows COM+ Event System Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#43 17 Elevated CVE-2026-83867 Patch Tuesday Microsoft — Windows Push Notifications Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#44 17 Elevated CVE-2026-85832 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#45 17 Elevated CVE-2026-85843 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#46 17 Elevated CVE-2026-85848 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#47 17 Elevated CVE-2026-85901 Patch Tuesday Microsoft — Windows Graphics Component Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#48 17 Elevated CVE-2026-85945 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#49 17 Elevated CVE-2026-88118 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#50 17 Elevated CVE-2026-96929 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.