Microsoft
CVEs currently on EVULNABLE's Priority Feed for Microsoft, and this vendor's own CISA KEV history.
CISA KEV additions over time
Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.
20 Apr – 12 Oct; busiest week: 6 added.
- Not ransomware-linked
- Ransomware-linked
- This week (so far)
| Week of | Added to KEV | Ransomware-linked |
|---|---|---|
| 2026-04-20 | 1 | 1 |
| 2026-04-27 | 1 | 0 |
| 2026-05-04 | 0 | 0 |
| 2026-05-11 | 1 | 0 |
| 2026-05-18 | 6 | 0 |
| 2026-05-25 | 0 | 0 |
| 2026-06-01 | 0 | 0 |
| 2026-06-08 | 0 | 0 |
| 2026-06-15 | 0 | 0 |
| 2026-06-22 | 0 | 0 |
| 2026-06-29 | 1 | 1 |
| 2026-07-06 | 0 | 0 |
| 2026-07-13 | 3 | 0 |
| 2026-07-20 | 1 | 0 |
| 2026-07-27 | 0 | 0 |
| 2026-08-03 | 0 | 0 |
| 2026-08-10 | 1 | 0 |
| 2026-08-17 | 2 | 0 |
| 2026-08-24 | 1 | 0 |
| 2026-08-31 | 0 | 0 |
| 2026-09-07 | 2 | 0 |
| 2026-09-14 | 0 | 0 |
| 2026-09-21 | 1 | 0 |
| 2026-09-28 | 0 | 0 |
| 2026-10-05 | 0 | 0 |
| 2026-10-12 (so far) | 1 | 0 |
In EVULNABLE's ranked feed
Showing the top 200 of 1,455 Microsoft CVEs in EVULNABLE's ranked feed.
#1 75 Urgent CVE-2026-96951 Patch TuesdayActively Exploitedwrite-up Microsoft — Windows Shell Security Feature Bypass Vulnerability KEV, EPSS 1.5%, Microsoft: exploitation detected
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.015.
Our write-up
A command injection flaw in Windows Shell lets attackers bypass Mark of the Web protections using a crafted file sent by email or instant message, and it is being exploited in the wild.
Affected: Windows 10, Windows 11 and Windows Server 2012 R2 through 2025.
Fix: Install the October cumulative update and reboot.
Updated Oct 14, 2026. Changed: Reformatted into summary, affected systems and fix.
AI-written summary, Oct 14, 2026 Confirm details in the vendor advisory before acting. Source: CISA KEV
#2 30 Elevated CVE-2026-108398 Patch Tuesday Microsoft — .NET Framework Security Feature Bypass Vulnerability EPSS 0.5%, pre-patch disclosure
EVRS 30/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.005, and Publicly disclosed before a patch shipped.
#3 26 Elevated CVE-2026-92707 Patch Tuesday Microsoft — MessagePack-CSharp Denial of Service Vulnerability EPSS 0.6%, pre-patch disclosure
EVRS 26/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.006, and Publicly disclosed before a patch shipped.
#4 18 Elevated CVE-2026-100214 Patch Tuesday Microsoft — Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability EPSS 1.8%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.018, and Microsoft Exploitability Index: Exploitation More Likely.
#5 18 Elevated CVE-2026-102217 Patch Tuesday Microsoft — WebDAV Elevation of Privilege Vulnerability EPSS 1.1%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.011, and Microsoft Exploitability Index: Exploitation More Likely.
#6 18 Elevated CVE-2026-88159 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability EPSS 1.0%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and Microsoft Exploitability Index: Exploitation More Likely.
#7 18 Elevated CVE-2026-70279 Patch Tuesday Microsoft — Microsoft Exchange Server Spoofing Vulnerability EPSS 0.9%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and Microsoft Exploitability Index: Exploitation More Likely.
#8 18 Elevated CVE-2026-96940 Patch Tuesday Microsoft — Microsoft Exchange Server Elevation of Privilege Vulnerability EPSS 0.5%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.005, and Microsoft Exploitability Index: Exploitation More Likely.
#9 18 Elevated CVE-2026-69918 Patch Tuesday Microsoft — Windows Core Messaging Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 18/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#10 17 Elevated CVE-2026-69718 Patch Tuesday Microsoft — Windows Update Elevation of Privilege Vulnerability EPSS 1.0%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and Microsoft Exploitability Index: Exploitation More Likely.
#11 17 Elevated CVE-2026-70571 Patch Tuesday Microsoft — Microsoft Exchange Server Remote Code Execution Vulnerability EPSS 0.9%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and Microsoft Exploitability Index: Exploitation More Likely.
#12 17 Elevated CVE-2026-97798 Patch Tuesday Microsoft — Windows Error Reporting Service Elevation of Privilege Vulnerability EPSS 0.8%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and Microsoft Exploitability Index: Exploitation More Likely.
#13 17 Elevated CVE-2026-70229 Patch Tuesday Microsoft — Windows Active Directory Domain Services Remote Code Execution Vulnerability EPSS 0.7%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.007, and Microsoft Exploitability Index: Exploitation More Likely.
#14 17 Elevated CVE-2026-69673 Patch Tuesday Microsoft — Windows Update Elevation of Privilege Vulnerability EPSS 0.5%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.005, and Microsoft Exploitability Index: Exploitation More Likely.
#15 17 Elevated CVE-2026-69733 Patch Tuesday Microsoft — Windows Update Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#16 17 Elevated CVE-2026-69783 Patch Tuesday Microsoft — Windows Update Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#17 17 Elevated CVE-2026-83704 Patch Tuesday Microsoft — Microsoft Windows Search Component Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#18 17 Elevated CVE-2026-70054 Patch Tuesday Microsoft — Windows NetBIOS Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#19 17 Elevated CVE-2026-69882 Patch Tuesday Microsoft — Windows Update Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#20 17 Elevated CVE-2026-85849 Patch Tuesday Microsoft — Windows AppX Deployment Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#21 17 Elevated CVE-2026-88133 Patch Tuesday Microsoft — Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#22 17 Elevated CVE-2026-96911 Patch Tuesday Microsoft — Microsoft Windows Search Component Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#23 17 Elevated CVE-2026-83927 Patch Tuesday Microsoft — Windows Registry Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#24 17 Elevated CVE-2026-85884 Patch Tuesday Microsoft — Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#25 17 Elevated CVE-2026-69923 Patch Tuesday Microsoft — Windows AI Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#26 17 Elevated CVE-2026-88191 Patch Tuesday Microsoft — Microsoft Windows Search Component Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#27 17 Elevated CVE-2026-70060 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#28 17 Elevated CVE-2026-70104 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#29 17 Elevated CVE-2026-70106 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#30 17 Elevated CVE-2026-70108 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#31 17 Elevated CVE-2026-70245 Patch Tuesday Microsoft — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#32 17 Elevated CVE-2026-70303 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#33 17 Elevated CVE-2026-83669 Patch Tuesday Microsoft — Windows Error Reporting Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#34 17 Elevated CVE-2026-83735 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#35 17 Elevated CVE-2026-83761 Patch Tuesday Microsoft — Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#36 17 Elevated CVE-2026-69880 Patch Tuesday Microsoft — Desktop Window Manager Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#37 17 Elevated CVE-2026-69926 Patch Tuesday Microsoft — Desktop Window Manager Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#38 17 Elevated CVE-2026-70233 Patch Tuesday Microsoft — Windows Common Log File System Driver Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#39 17 Elevated CVE-2026-70286 Patch Tuesday Microsoft — Windows Graphics Component Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#40 17 Elevated CVE-2026-83699 Patch Tuesday Microsoft — Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#41 17 Elevated CVE-2026-83830 Patch Tuesday Microsoft — Windows COM+ Event System Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#42 17 Elevated CVE-2026-83848 Patch Tuesday Microsoft — Windows COM+ Event System Service Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#43 17 Elevated CVE-2026-83867 Patch Tuesday Microsoft — Windows Push Notifications Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#44 17 Elevated CVE-2026-85832 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#45 17 Elevated CVE-2026-85843 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#46 17 Elevated CVE-2026-85848 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#47 17 Elevated CVE-2026-85901 Patch Tuesday Microsoft — Windows Graphics Component Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#48 17 Elevated CVE-2026-85945 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#49 17 Elevated CVE-2026-88118 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#50 17 Elevated CVE-2026-96929 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#51 17 Elevated CVE-2026-83769 Patch Tuesday Microsoft — Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#52 17 Elevated CVE-2026-70103 Patch Tuesday Microsoft — Windows Error Reporting Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#53 17 Elevated CVE-2026-70117 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#54 17 Elevated CVE-2026-70132 Patch Tuesday Microsoft — Windows Portable Device File System Driver Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#55 17 Elevated CVE-2026-70151 Patch Tuesday Microsoft — Windows Direct Composition Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#56 17 Elevated CVE-2026-70255 Patch Tuesday Microsoft — Desktop Window Manager Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#57 17 Elevated CVE-2026-83763 Patch Tuesday Microsoft — Windows Input System Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#58 17 Elevated CVE-2026-83768 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#59 17 Elevated CVE-2026-83896 Patch Tuesday Microsoft — Windows Direct Composition Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#60 17 Elevated CVE-2026-83902 Patch Tuesday Microsoft — Windows Direct Composition Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#61 17 Elevated CVE-2026-85908 Patch Tuesday Microsoft — Windows Graphics Component Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#62 17 Elevated CVE-2026-88152 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#63 17 Elevated CVE-2026-83732 Patch Tuesday Microsoft — Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#64 17 Elevated CVE-2026-85804 Patch Tuesday Microsoft — Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#65 17 Elevated CVE-2026-85850 Patch Tuesday Microsoft — Windows Kernel Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#66 17 Elevated CVE-2026-85902 Patch Tuesday Microsoft — Windows Direct Composition Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#67 17 Elevated CVE-2026-88147 Patch Tuesday Microsoft — Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#68 17 Elevated CVE-2026-83840 Patch Tuesday Microsoft — Windows Error Reporting Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#69 17 Elevated CVE-2026-70218 Patch Tuesday Microsoft — Windows StateRepository API Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#70 17 Elevated CVE-2026-97799 Patch Tuesday Microsoft — Windows Audio Service Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#71 17 Elevated CVE-2026-85906 Patch Tuesday Microsoft — Windows Direct Composition Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#72 17 Elevated CVE-2026-88093 Patch Tuesday Microsoft — Desktop Window Manager Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 17/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#73 16 Elevated CVE-2026-69452 Patch Tuesday Microsoft — Windows Enterprise App Management Elevation of Privilege Vulnerability EPSS 0.6%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.006, and Microsoft Exploitability Index: Exploitation More Likely.
#74 16 Elevated CVE-2026-70076 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#75 16 Elevated CVE-2026-70144 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#76 16 Elevated CVE-2026-70176 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#77 16 Elevated CVE-2026-70249 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#78 16 Elevated CVE-2026-70253 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#79 16 Elevated CVE-2026-70271 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#80 16 Elevated CVE-2026-83886 Patch Tuesday Microsoft — Windows Update Orchestrator Service Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#81 16 Elevated CVE-2026-83509 Patch Tuesday Microsoft — Windows Setup Files Cleanup Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#82 16 Elevated CVE-2026-70237 Patch Tuesday Microsoft — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#83 16 Elevated CVE-2026-83580 Patch Tuesday Microsoft — Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#84 16 Elevated CVE-2026-83785 Patch Tuesday Microsoft — Windows COM+ Event System Service Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#85 16 Elevated CVE-2026-83793 Patch Tuesday Microsoft — Windows Update Orchestrator Service Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#86 16 Elevated CVE-2026-85355 Patch Tuesday Microsoft — Windows Common Log File System Driver Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#87 16 Elevated CVE-2026-85791 Patch Tuesday Microsoft — Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#88 16 Elevated CVE-2026-85855 Patch Tuesday Microsoft — Windows DWM Core Library Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#89 16 Elevated CVE-2026-85870 Patch Tuesday Microsoft — Windows Common Log File System Driver Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#90 16 Elevated CVE-2026-70223 Patch Tuesday Microsoft — Windows Console Driver Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#91 16 Elevated CVE-2026-70236 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#92 16 Elevated CVE-2026-70273 Patch Tuesday Microsoft — Windows Win32k Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#93 16 Elevated CVE-2026-72955 Patch Tuesday Microsoft — Windows Application Compatibility Cache Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#94 16 Elevated CVE-2026-83921 Patch Tuesday Microsoft — Windows Search Service Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#95 16 Elevated CVE-2026-70156 Patch Tuesday Microsoft — Microsoft Windows Search Component Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#96 16 Elevated CVE-2026-70241 Patch Tuesday Microsoft — Windows Kerberos Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#97 16 Elevated CVE-2026-83717 Patch Tuesday Microsoft — Windows Installer Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#98 16 Elevated CVE-2026-83842 Patch Tuesday Microsoft — Windows TCP/IP Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#99 16 Elevated CVE-2026-85802 Patch Tuesday Microsoft — Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability EPSS 0.3%, Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.003, and Microsoft Exploitability Index: Exploitation More Likely.
#100 16 Elevated CVE-2026-97800 Patch Tuesday Microsoft — Windows Mobile Broadband Elevation of Privilege Vulnerability Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Microsoft Exploitability Index: Exploitation More Likely, and CVSS base score 7.8.
#101 16 Elevated CVE-2026-83505 Patch Tuesday Microsoft — Windows Setup Files Cleanup Elevation of Privilege Vulnerability Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Microsoft Exploitability Index: Exploitation More Likely, and CVSS base score 7.0.
#102 16 Elevated CVE-2026-83724 Patch Tuesday Microsoft — Windows Management Instrumentation Elevation of Privilege Vulnerability Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Microsoft Exploitability Index: Exploitation More Likely, and CVSS base score 7.0.
#103 16 Elevated CVE-2026-83738 Patch Tuesday Microsoft — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Microsoft Exploitability Index: Exploitation More Likely, and CVSS base score 7.0.
#104 16 Elevated CVE-2026-84014 Patch Tuesday Microsoft — Windows Device Association Service Elevation of Privilege Vulnerability Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Microsoft Exploitability Index: Exploitation More Likely, and CVSS base score 7.0.
#105 16 Elevated CVE-2026-81971 Patch Tuesday Microsoft — Windows NTFS Elevation of Privilege Vulnerability Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Microsoft Exploitability Index: Exploitation More Likely, and CVSS base score 7.0.
#106 16 Elevated CVE-2026-83510 Patch Tuesday Microsoft — Windows Setup Files Cleanup Elevation of Privilege Vulnerability Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Microsoft Exploitability Index: Exploitation More Likely, and CVSS base score 7.0.
#107 16 Elevated CVE-2026-83899 Patch Tuesday Microsoft — Windows Installer Elevation of Privilege Vulnerability Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Microsoft Exploitability Index: Exploitation More Likely, and CVSS base score 7.0.
#108 16 Elevated CVE-2026-83750 Patch Tuesday Microsoft — Windows Error Reporting Elevation of Privilege Vulnerability Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Microsoft Exploitability Index: Exploitation More Likely, and CVSS base score 7.0.
#109 16 Elevated CVE-2026-83834 Patch Tuesday Microsoft — Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Microsoft Exploitability Index: Exploitation More Likely, and CVSS base score 7.0.
#110 16 Elevated CVE-2026-85941 Patch Tuesday Microsoft — Windows Installer Elevation of Privilege Vulnerability Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Microsoft Exploitability Index: Exploitation More Likely, and CVSS base score 7.0.
#111 16 Elevated CVE-2026-96939 Patch Tuesday Microsoft — Servicing Stack Updates Elevation of Privilege Vulnerability Microsoft: exploitation more likely
EVRS 16/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Microsoft Exploitability Index: Exploitation More Likely, and CVSS base score 7.0.
#112 15 Elevated CVE-2026-21413 Patch Tuesday Microsoft — Raw Image Extension Remote Code Execution Vulnerability EPSS 1.4%
EVRS 15/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.014, and CVSS base score 9.8.
#113 15 Elevated CVE-2026-96207 Patch Tuesday Microsoft — Microsoft Partner Center Elevation of Privilege Vulnerability EPSS 0.5%
EVRS 15/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.005, and CVSS base score 10.0.
#114 14 Elevated CVE-2026-70242 Patch Tuesday Microsoft — Microsoft Office Outlook Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#115 14 Elevated CVE-2026-70291 Patch Tuesday Microsoft — Microsoft Office Outlook Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#116 14 Elevated CVE-2026-100202 Patch Tuesday Microsoft — Windows Message Queuing Queue Manager Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#117 14 Elevated CVE-2026-100219 Patch Tuesday Microsoft — Microsoft QUIC Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#118 14 Elevated CVE-2026-83693 Patch Tuesday Microsoft — Windows Error Reporting Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#119 14 Elevated CVE-2026-105016 Patch Tuesday Microsoft — Microsoft QUIC Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#120 14 Elevated CVE-2026-97814 Patch Tuesday Microsoft — Windows Text Shaping Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#121 14 Elevated CVE-2026-88156 Patch Tuesday Microsoft — Microsoft Office Outlook Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#122 14 Elevated CVE-2026-97016 Patch Tuesday Microsoft — Microsoft Office Outlook Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#123 14 Elevated CVE-2026-97749 Patch Tuesday Microsoft — Microsoft Office Outlook Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#124 14 Elevated CVE-2026-70300 Patch Tuesday Microsoft — Microsoft Office Word Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#125 14 Elevated CVE-2026-70147 Patch Tuesday Microsoft — Microsoft PostScript Printer Driver Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#126 14 Elevated CVE-2026-70153 Patch Tuesday Microsoft — Microsoft PostScript Printer Driver Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#127 14 Elevated CVE-2026-100222 Patch Tuesday Microsoft — Network Policy Server (NPS) Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#128 14 Elevated CVE-2026-70157 Patch Tuesday Microsoft — Windows System Information Console Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#129 14 Elevated CVE-2026-83517 Patch Tuesday Microsoft — Microsoft Windows Media Foundation Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#130 14 Elevated CVE-2026-83519 Patch Tuesday Microsoft — Windows Error Reporting Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#131 14 Elevated CVE-2026-83578 Patch Tuesday Microsoft — Microsoft PowerShell Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#132 14 Elevated CVE-2026-83780 Patch Tuesday Microsoft — Windows CCFFilter Driver Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#133 14 Elevated CVE-2026-83910 Patch Tuesday Microsoft — RPC Runtime Library Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#134 14 Elevated CVE-2026-97805 Patch Tuesday Microsoft — Windows Partition Management Driver Remote Code Execution Vulnerability EPSS 1.0%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 9.8.
#135 14 Elevated CVE-2026-88178 Patch Tuesday Microsoft — Microsoft Office PowerPoint Remote Code Execution Vulnerability EPSS 0.9%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 9.8.
#136 14 Elevated CVE-2026-85806 Patch Tuesday Microsoft — Network Policy Server (NPS) Remote Code Execution Vulnerability EPSS 0.9%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 9.8.
#137 14 Elevated CVE-2026-85809 Patch Tuesday Microsoft — Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability EPSS 0.9%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 9.8.
#138 14 Elevated CVE-2026-85814 Patch Tuesday Microsoft — Microsoft Windows Media Foundation Remote Code Execution Vulnerability EPSS 0.9%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 9.8.
#139 14 Elevated CVE-2026-96320 Patch Tuesday Microsoft — Windows DHCP Server Remote Code Execution Vulnerability EPSS 0.9%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 9.8.
#140 14 Elevated CVE-2026-97816 Patch Tuesday Microsoft — Microsoft OpenSSH for Windows Remote Code Execution Vulnerability EPSS 0.9%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 9.8.
#141 14 Elevated CVE-2026-102210 Patch Tuesday Microsoft — Windows Text Shaping Remote Code Execution Vulnerability EPSS 0.9%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 9.8.
#142 14 Elevated CVE-2026-105010 Patch Tuesday Microsoft — Microsoft Windows Search Component Elevation of Privilege Vulnerability EPSS 0.9%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 9.8.
#143 14 Elevated CVE-2026-83782 Patch Tuesday Microsoft — Windows Shell Remote Code Execution Vulnerability EPSS 0.9%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 9.8.
#144 14 Elevated CVE-2026-84015 Patch Tuesday Microsoft — Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability EPSS 0.9%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 9.8.
#145 14 Elevated CVE-2026-85792 Patch Tuesday Microsoft — Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability EPSS 0.9%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 9.8.
#146 14 Elevated CVE-2026-96219 Patch Tuesday Microsoft — Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability EPSS 0.9%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 9.8.
#147 14 Elevated CVE-2026-96909 Patch Tuesday Microsoft — Windows BitLocker Remote Code Execution Vulnerability EPSS 0.9%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 9.8.
#148 14 Elevated CVE-2026-96924 Patch Tuesday Microsoft — Windows OLE Remote Code Execution Vulnerability EPSS 0.9%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 9.8.
#149 14 Elevated CVE-2026-70188 Patch Tuesday Microsoft — ASP.NET Core Security Feature Bypass Vulnerability EPSS 0.8%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and CVSS base score 9.1.
#150 14 Elevated CVE-2026-88092 Patch Tuesday Microsoft — ASP.NET Core Tampering Vulnerability EPSS 0.8%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and CVSS base score 9.4.
#151 14 Elevated CVE-2026-69634 Patch Tuesday Microsoft — Windows iSCSI Remote Code Execution Vulnerability EPSS 0.8%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and CVSS base score 9.8.
#152 14 Elevated CVE-2026-69639 Patch Tuesday Microsoft — Windows libarchive Remote Code Execution Vulnerability EPSS 0.8%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and CVSS base score 9.8.
#153 14 Elevated CVE-2026-69886 Patch Tuesday Microsoft — Windows Imaging Component Remote Code Execution Vulnerability EPSS 0.8%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and CVSS base score 9.8.
#154 14 Elevated CVE-2026-96934 Patch Tuesday Microsoft — Windows DHCP Server Remote Code Execution Vulnerability EPSS 0.7%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.007, and CVSS base score 9.8.
#155 14 Elevated CVE-2026-83748 Patch Tuesday Microsoft — Windows Error Reporting Remote Code Execution Vulnerability EPSS 0.7%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.007, and CVSS base score 9.8.
#156 14 Elevated CVE-2026-83935 Patch Tuesday Microsoft — Microsoft XML Remote Code Execution Vulnerability EPSS 0.7%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.007, and CVSS base score 9.8.
#157 14 Elevated CVE-2026-97815 Patch Tuesday Microsoft — Windows Error Reporting Remote Code Execution Vulnerability EPSS 0.7%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.007, and CVSS base score 9.8.
#158 14 Elevated CVE-2026-96096 Patch Tuesday Microsoft — Windows Media Player Remote Code Execution Vulnerability EPSS 0.7%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.007, and CVSS base score 9.8.
#159 14 Elevated CVE-2026-96113 Patch Tuesday Microsoft — Windows Domain Name Service Remote Code Execution Vulnerability EPSS 0.7%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.007, and CVSS base score 9.8.
#160 14 Elevated CVE-2026-102238 Patch Tuesday Microsoft — Visual Studio Code Remote Code Execution Vulnerability EPSS 0.7%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.006, and CVSS base score 9.6.
#161 14 Elevated CVE-2026-83862 Patch Tuesday Microsoft — Windows Network Load Balancing Remote Code Execution Vulnerability EPSS 0.6%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.006, and CVSS base score 9.8.
#162 14 Elevated CVE-2026-83869 Patch Tuesday Microsoft — Windows Domain Name Service Remote Code Execution Vulnerability EPSS 0.6%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.006, and CVSS base score 9.8.
#163 14 Elevated CVE-2026-85928 Patch Tuesday Microsoft — Windows Volume Manager Extension Driver Remote Code Execution Vulnerability EPSS 0.6%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.006, and CVSS base score 9.8.
#164 14 Elevated CVE-2026-96252 Patch Tuesday Microsoft — Active Directory Federation Services (AD FS) Spoofing Vulnerability EPSS 0.5%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.005, and CVSS base score 9.1.
#165 14 Elevated CVE-2026-94510 Patch Tuesday Microsoft — Microsoft Bookings Elevation of Privilege Vulnerability EPSS 0.4%
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and CVSS base score 9.9.
#166 14 Elevated CVE-2026-96858 Patch Tuesday Microsoft — Windows Security Account Manager Tampering Vulnerability EPSS 0.4%, Microsoft: exploitation more likely
EVRS 14/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.004, and Microsoft Exploitability Index: Exploitation More Likely.
#167 13 Elevated CVE-2026-70049 Patch Tuesday Microsoft — Microsoft Configuration Manager Elevation of Privilege Vulnerability EPSS 2.3%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.023, and CVSS base score 8.0.
#168 13 Elevated CVE-2026-85900 Patch Tuesday Microsoft — Microsoft Office SharePoint Remote Code Execution Vulnerability EPSS 1.5%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.015, and CVSS base score 8.8.
#169 13 Elevated CVE-2026-70035 Patch Tuesday Microsoft — .NET Framework Remote Code Execution Vulnerability EPSS 1.3%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.013, and CVSS base score 8.8.
#170 13 Elevated CVE-2026-83520 Patch Tuesday Microsoft — .NET Remote Code Execution Vulnerability EPSS 1.3%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.013, and CVSS base score 8.8.
#171 13 Elevated CVE-2026-70297 Patch Tuesday Microsoft — Skype for Business Remote Code Execution Vulnerability EPSS 1.0%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 8.8.
#172 13 Elevated CVE-2026-83746 Patch Tuesday Microsoft — Skype for Business Elevation of Privilege Vulnerability EPSS 1.0%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 8.1.
#173 13 Elevated CVE-2026-69943 Patch Tuesday Microsoft — Microsoft Office SharePoint Remote Code Execution Vulnerability EPSS 1.0%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 8.8.
#174 13 Elevated CVE-2026-83784 Patch Tuesday Microsoft — Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability EPSS 1.0%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 8.8.
#175 13 Elevated CVE-2026-88136 Patch Tuesday Microsoft — Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability EPSS 1.0%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.010, and CVSS base score 8.8.
#176 13 Elevated CVE-2026-70266 Patch Tuesday Microsoft — Microsoft Office SharePoint Elevation of Privilege Vulnerability EPSS 0.9%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 8.8.
#177 13 Elevated CVE-2026-83923 Patch Tuesday Microsoft — Microsoft OpenSSH for Windows Remote Code Execution Vulnerability EPSS 0.9%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 8.8.
#178 13 Elevated CVE-2026-102226 Patch Tuesday Microsoft — Dynamics Business Central Elevation of Privilege Vulnerability EPSS 0.9%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 8.8.
#179 13 Elevated CVE-2026-70069 Patch Tuesday Microsoft — Windows DHCP Server Remote Code Execution Vulnerability EPSS 0.9%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 8.8.
#180 13 Elevated CVE-2026-83889 Patch Tuesday Microsoft — Windows DNS Server Remote Code Execution Vulnerability EPSS 0.9%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 8.8.
#181 13 Elevated CVE-2026-108467 Patch Tuesday Microsoft — Microsoft PostScript Printer Driver Remote Code Execution Vulnerability EPSS 0.9%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 8.8.
#182 13 Elevated CVE-2026-102863 Patch Tuesday Microsoft — Microsoft Office SharePoint Elevation of Privilege Vulnerability EPSS 0.9%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 8.8.
#183 13 Elevated CVE-2026-108463 Patch Tuesday Microsoft — Windows SmartScreen Security Feature Bypass Vulnerability EPSS 0.9%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 8.8.
#184 13 Elevated CVE-2026-65674 Patch Tuesday Microsoft — Microsoft SQL Server Remote Code Execution Vulnerability EPSS 0.9%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 8.8.
#185 13 Elevated CVE-2026-70167 Patch Tuesday Microsoft — Windows Domain Name Service Remote Code Execution Vulnerability EPSS 0.9%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 8.8.
#186 13 Elevated CVE-2026-85931 Patch Tuesday Microsoft — Windows Distributed File System (DFS) Remote Code Execution Vulnerability EPSS 0.9%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 8.8.
#187 13 Elevated CVE-2026-88142 Patch Tuesday Microsoft — Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability EPSS 0.9%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 8.8.
#188 13 Elevated CVE-2026-88165 Patch Tuesday Microsoft — Windows Active Directory Domain Services Remote Code Execution Vulnerability EPSS 0.9%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.009, and CVSS base score 8.8.
#189 13 Elevated CVE-2026-87697 Patch Tuesday Microsoft — .NET Remote Code Execution Vulnerability EPSS 0.8%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and CVSS base score 8.8.
#190 13 Elevated CVE-2026-100220 Patch Tuesday Microsoft — Windows Media Video Decoder Remote Code Execution Vulnerability EPSS 0.8%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and CVSS base score 8.8.
#191 13 Elevated CVE-2026-70068 Patch Tuesday Microsoft — Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability EPSS 0.8%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and CVSS base score 8.8.
#192 13 Elevated CVE-2026-70089 Patch Tuesday Microsoft — Windows GDI Remote Code Execution Vulnerability EPSS 0.8%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and CVSS base score 8.8.
#193 13 Elevated CVE-2026-70149 Patch Tuesday Microsoft — Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability EPSS 0.8%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and CVSS base score 8.8.
#194 13 Elevated CVE-2026-70210 Patch Tuesday Microsoft — Windows OLE DB Elevation of Privilege Vulnerability EPSS 0.8%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and CVSS base score 8.8.
#195 13 Elevated CVE-2026-70262 Patch Tuesday Microsoft — WebDAV Elevation of Privilege Vulnerability EPSS 0.8%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and CVSS base score 8.8.
#196 13 Elevated CVE-2026-77496 Patch Tuesday Microsoft — Windows Imaging Component Remote Code Execution Vulnerability EPSS 0.8%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and CVSS base score 8.8.
#197 13 Elevated CVE-2026-83523 Patch Tuesday Microsoft — Windows Image Acquisition Remote Code Execution Vulnerability EPSS 0.8%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and CVSS base score 8.8.
#198 13 Elevated CVE-2026-83688 Patch Tuesday Microsoft — Remote Desktop Client Remote Code Execution Vulnerability EPSS 0.8%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and CVSS base score 8.8.
#199 13 Elevated CVE-2026-103572 Patch Tuesday Microsoft — Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability EPSS 0.8%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and CVSS base score 8.8.
#200 13 Elevated CVE-2026-100209 Patch Tuesday Microsoft — Microsoft Office Excel Remote Code Execution Vulnerability EPSS 0.8%
EVRS 13/100 · EVRS priority: Elevated. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: An EPSS probability of 0.008, and CVSS base score 8.8.