Microsoft
CVEs currently on EVULNABLE's Priority Feed for Microsoft, and this vendor's own CISA KEV history.
CISA KEV additions over time
Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.
20 Apr – 12 Oct; busiest week: 6 added.
- Not ransomware-linked
- Ransomware-linked
- This week (so far)
| Week of | Added to KEV | Ransomware-linked |
|---|---|---|
| 2026-04-20 | 1 | 1 |
| 2026-04-27 | 1 | 0 |
| 2026-05-04 | 0 | 0 |
| 2026-05-11 | 1 | 0 |
| 2026-05-18 | 6 | 0 |
| 2026-05-25 | 0 | 0 |
| 2026-06-01 | 0 | 0 |
| 2026-06-08 | 0 | 0 |
| 2026-06-15 | 0 | 0 |
| 2026-06-22 | 0 | 0 |
| 2026-06-29 | 1 | 1 |
| 2026-07-06 | 0 | 0 |
| 2026-07-13 | 3 | 0 |
| 2026-07-20 | 1 | 0 |
| 2026-07-27 | 0 | 0 |
| 2026-08-03 | 0 | 0 |
| 2026-08-10 | 1 | 0 |
| 2026-08-17 | 2 | 0 |
| 2026-08-24 | 1 | 0 |
| 2026-08-31 | 0 | 0 |
| 2026-09-07 | 2 | 0 |
| 2026-09-14 | 0 | 0 |
| 2026-09-21 | 1 | 0 |
| 2026-09-28 | 0 | 0 |
| 2026-10-05 | 0 | 0 |
| 2026-10-12 (so far) | 1 | 0 |
In EVULNABLE's ranked feed
Showing the top 100 of 1,455 Microsoft CVEs in EVULNABLE's ranked feed.
#1 75 Urgent CVE-2026-96951 Patch TuesdayActively Exploitedwrite-up Microsoft — Windows Shell Security Feature Bypass Vulnerability KEV, EPSS 1.5%, Microsoft: exploitation detected
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.015.
Our write-up
A command injection flaw in Windows Shell lets attackers bypass Mark of the Web protections using a crafted file sent by email or instant message, and it is being exploited in the wild.
Affected: Windows 10, Windows 11 and Windows Server 2012 R2 through 2025.
Fix: Install the October cumulative update and reboot.
Updated Oct 14, 2026. Changed: Reformatted into summary, affected systems and fix.
AI-written summary, Oct 14, 2026 Confirm details in the vendor advisory before acting. Source: CISA KEV
#2 30 Elevated CVE-2026-108398 Patch Tuesday Microsoft — .NET Framework Security Feature Bypass Vulnerability EPSS 0.5%, pre-patch disclosure
EVRS 30/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.005, and Publicly disclosed before a patch shipped.
#3 26 Elevated CVE-2026-92707 Patch Tuesday Microsoft — MessagePack-CSharp Denial of Service Vulnerability EPSS 0.6%, pre-patch disclosure
EVRS 26/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.006, and Publicly disclosed before a patch shipped.
#4 18 Elevated CVE-2026-100214 Patch Tuesday Microsoft — Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability EPSS 1.8%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.018, and Microsoft Exploitability Index: Exploitation More Likely.
#5 18 Elevated CVE-2026-102217 Patch Tuesday Microsoft — WebDAV Elevation of Privilege Vulnerability EPSS 1.1%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.011, and Microsoft Exploitability Index: Exploitation More Likely.
#6 18 Elevated CVE-2026-88159 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability EPSS 1.0%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and Microsoft Exploitability Index: Exploitation More Likely.
#7 18 Elevated CVE-2026-70279 Patch Tuesday Microsoft — Microsoft Exchange Server Spoofing Vulnerability EPSS 0.9%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and Microsoft Exploitability Index: Exploitation More Likely.
#8 18 Elevated CVE-2026-96940 Patch Tuesday Microsoft — Microsoft Exchange Server Elevation of Privilege Vulnerability EPSS 0.5%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.005, and Microsoft Exploitability Index: Exploitation More Likely.
#9 18 Elevated CVE-2026-69918 Patch Tuesday Microsoft — Windows Core Messaging Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#10 17 Elevated CVE-2026-69718 Patch Tuesday Microsoft — Windows Update Elevation of Privilege Vulnerability EPSS 1.0%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and Microsoft Exploitability Index: Exploitation More Likely.
#11 17 Elevated CVE-2026-70571 Patch Tuesday Microsoft — Microsoft Exchange Server Remote Code Execution Vulnerability EPSS 0.9%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and Microsoft Exploitability Index: Exploitation More Likely.
#12 17 Elevated CVE-2026-97798 Patch Tuesday Microsoft — Windows Error Reporting Service Elevation of Privilege Vulnerability EPSS 0.8%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and Microsoft Exploitability Index: Exploitation More Likely.
#13 17 Elevated CVE-2026-70229 Patch Tuesday Microsoft — Windows Active Directory Domain Services Remote Code Execution Vulnerability EPSS 0.7%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.007, and Microsoft Exploitability Index: Exploitation More Likely.
#14 17 Elevated CVE-2026-69673 Patch Tuesday Microsoft — Windows Update Elevation of Privilege Vulnerability EPSS 0.5%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.005, and Microsoft Exploitability Index: Exploitation More Likely.
#15 17 Elevated CVE-2026-69733 Patch Tuesday Microsoft — Windows Update Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#16 17 Elevated CVE-2026-69783 Patch Tuesday Microsoft — Windows Update Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#17 17 Elevated CVE-2026-83704 Patch Tuesday Microsoft — Microsoft Windows Search Component Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#18 17 Elevated CVE-2026-70054 Patch Tuesday Microsoft — Windows NetBIOS Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#19 17 Elevated CVE-2026-69882 Patch Tuesday Microsoft — Windows Update Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#20 17 Elevated CVE-2026-85849 Patch Tuesday Microsoft — Windows AppX Deployment Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#21 17 Elevated CVE-2026-88133 Patch Tuesday Microsoft — Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#22 17 Elevated CVE-2026-96911 Patch Tuesday Microsoft — Microsoft Windows Search Component Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#23 17 Elevated CVE-2026-83927 Patch Tuesday Microsoft — Windows Registry Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#24 17 Elevated CVE-2026-85884 Patch Tuesday Microsoft — Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#25 17 Elevated CVE-2026-69923 Patch Tuesday Microsoft — Windows AI Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#26 17 Elevated CVE-2026-88191 Patch Tuesday Microsoft — Microsoft Windows Search Component Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#27 17 Elevated CVE-2026-70060 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#28 17 Elevated CVE-2026-70104 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#29 17 Elevated CVE-2026-70106 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#30 17 Elevated CVE-2026-70108 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#31 17 Elevated CVE-2026-70245 Patch Tuesday Microsoft — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#32 17 Elevated CVE-2026-70303 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#33 17 Elevated CVE-2026-83669 Patch Tuesday Microsoft — Windows Error Reporting Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#34 17 Elevated CVE-2026-83735 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#35 17 Elevated CVE-2026-83761 Patch Tuesday Microsoft — Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#36 17 Elevated CVE-2026-69880 Patch Tuesday Microsoft — Desktop Window Manager Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#37 17 Elevated CVE-2026-69926 Patch Tuesday Microsoft — Desktop Window Manager Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#38 17 Elevated CVE-2026-70233 Patch Tuesday Microsoft — Windows Common Log File System Driver Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#39 17 Elevated CVE-2026-70286 Patch Tuesday Microsoft — Windows Graphics Component Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#40 17 Elevated CVE-2026-83699 Patch Tuesday Microsoft — Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#41 17 Elevated CVE-2026-83830 Patch Tuesday Microsoft — Windows COM+ Event System Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#42 17 Elevated CVE-2026-83848 Patch Tuesday Microsoft — Windows COM+ Event System Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#43 17 Elevated CVE-2026-83867 Patch Tuesday Microsoft — Windows Push Notifications Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#44 17 Elevated CVE-2026-85832 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#45 17 Elevated CVE-2026-85843 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#46 17 Elevated CVE-2026-85848 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#47 17 Elevated CVE-2026-85901 Patch Tuesday Microsoft — Windows Graphics Component Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#48 17 Elevated CVE-2026-85945 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#49 17 Elevated CVE-2026-88118 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#50 17 Elevated CVE-2026-96929 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#51 17 Elevated CVE-2026-83769 Patch Tuesday Microsoft — Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#52 17 Elevated CVE-2026-70103 Patch Tuesday Microsoft — Windows Error Reporting Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#53 17 Elevated CVE-2026-70117 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#54 17 Elevated CVE-2026-70132 Patch Tuesday Microsoft — Windows Portable Device File System Driver Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#55 17 Elevated CVE-2026-70151 Patch Tuesday Microsoft — Windows Direct Composition Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#56 17 Elevated CVE-2026-70255 Patch Tuesday Microsoft — Desktop Window Manager Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#57 17 Elevated CVE-2026-83763 Patch Tuesday Microsoft — Windows Input System Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#58 17 Elevated CVE-2026-83768 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#59 17 Elevated CVE-2026-83896 Patch Tuesday Microsoft — Windows Direct Composition Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#60 17 Elevated CVE-2026-83902 Patch Tuesday Microsoft — Windows Direct Composition Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#61 17 Elevated CVE-2026-85908 Patch Tuesday Microsoft — Windows Graphics Component Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#62 17 Elevated CVE-2026-88152 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#63 17 Elevated CVE-2026-83732 Patch Tuesday Microsoft — Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#64 17 Elevated CVE-2026-85804 Patch Tuesday Microsoft — Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#65 17 Elevated CVE-2026-85850 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#66 17 Elevated CVE-2026-85902 Patch Tuesday Microsoft — Windows Direct Composition Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#67 17 Elevated CVE-2026-88147 Patch Tuesday Microsoft — Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#68 17 Elevated CVE-2026-83840 Patch Tuesday Microsoft — Windows Error Reporting Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#69 17 Elevated CVE-2026-70218 Patch Tuesday Microsoft — Windows StateRepository API Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#70 17 Elevated CVE-2026-97799 Patch Tuesday Microsoft — Windows Audio Service Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#71 17 Elevated CVE-2026-85906 Patch Tuesday Microsoft — Windows Direct Composition Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#72 17 Elevated CVE-2026-88093 Patch Tuesday Microsoft — Desktop Window Manager Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#73 16 Elevated CVE-2026-69452 Patch Tuesday Microsoft — Windows Enterprise App Management Elevation of Privilege Vulnerability EPSS 0.6%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.006, and Microsoft Exploitability Index: Exploitation More Likely.
#74 16 Elevated CVE-2026-70076 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#75 16 Elevated CVE-2026-70144 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#76 16 Elevated CVE-2026-70176 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#77 16 Elevated CVE-2026-70249 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#78 16 Elevated CVE-2026-70253 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#79 16 Elevated CVE-2026-70271 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#80 16 Elevated CVE-2026-83886 Patch Tuesday Microsoft — Windows Update Orchestrator Service Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#81 16 Elevated CVE-2026-83509 Patch Tuesday Microsoft — Windows Setup Files Cleanup Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#82 16 Elevated CVE-2026-70237 Patch Tuesday Microsoft — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#83 16 Elevated CVE-2026-83580 Patch Tuesday Microsoft — Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#84 16 Elevated CVE-2026-83785 Patch Tuesday Microsoft — Windows COM+ Event System Service Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#85 16 Elevated CVE-2026-83793 Patch Tuesday Microsoft — Windows Update Orchestrator Service Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#86 16 Elevated CVE-2026-85355 Patch Tuesday Microsoft — Windows Common Log File System Driver Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#87 16 Elevated CVE-2026-85791 Patch Tuesday Microsoft — Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#88 16 Elevated CVE-2026-85855 Patch Tuesday Microsoft — Windows DWM Core Library Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#89 16 Elevated CVE-2026-85870 Patch Tuesday Microsoft — Windows Common Log File System Driver Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#90 16 Elevated CVE-2026-70223 Patch Tuesday Microsoft — Windows Console Driver Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#91 16 Elevated CVE-2026-70236 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#92 16 Elevated CVE-2026-70273 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#93 16 Elevated CVE-2026-72955 Patch Tuesday Microsoft — Windows Application Compatibility Cache Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#94 16 Elevated CVE-2026-83921 Patch Tuesday Microsoft — Windows Search Service Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#95 16 Elevated CVE-2026-70156 Patch Tuesday Microsoft — Microsoft Windows Search Component Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#96 16 Elevated CVE-2026-70241 Patch Tuesday Microsoft — Windows Kerberos Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#97 16 Elevated CVE-2026-83717 Patch Tuesday Microsoft — Windows Installer Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#98 16 Elevated CVE-2026-83842 Patch Tuesday Microsoft — Windows TCP/IP Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#99 16 Elevated CVE-2026-85802 Patch Tuesday Microsoft — Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#100 16 Elevated CVE-2026-97800 Patch Tuesday Microsoft — Windows Mobile Broadband Elevation of Privilege Vulnerability Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Microsoft Exploitability Index: Exploitation More Likely, and CVSS base score 7.8.