MICROSOFT PATCH REPORTS  APRIL

REPORTY 2026  January  February  March  April  May  June  July  August  September  October  November  December

April 2026 Security Updates

This release consists of the following 173 Microsoft CVEs:

Tag CVE Base Score CVSS Vector Exploitability FAQs? Workarounds? Mitigations?
Windows Boot Loader CVE-2026-0390 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Windows COM CVE-2026-20806 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows Recovery Environment Agent CVE-2026-20928 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Management Services CVE-2026-20930 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office SharePoint CVE-2026-20945 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Azure IOT Central CVE-2026-21515 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C N/A Yes No No
GitHub Copilot and Visual Studio Code CVE-2026-23653 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office Word CVE-2026-23657 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
.NET Framework CVE-2026-23666 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C Exploitation Less Likely No No No
Windows Virtualization-Based Security (VBS) Enclave CVE-2026-23670 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Partner Center CVE-2026-24303 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C N/A Yes No No
Applocker Filter Driver (applockerfltr.sys) CVE-2026-25184 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft PowerShell CVE-2026-26143 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Power Apps CVE-2026-26149 9.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:T/RC:C Exploitation Less Likely Yes No No
Microsoft Purview CVE-2026-26150 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C N/A Yes No No
Windows Remote Desktop CVE-2026-26151 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Windows Cryptographic Services CVE-2026-26152 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Encrypting File System (EFS) CVE-2026-26153 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Server Update Service CVE-2026-26154 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Local Security Authority Subsystem Service (LSASS) CVE-2026-26155 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Role: Windows Hyper-V CVE-2026-26156 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Remote Desktop Licensing Service CVE-2026-26159 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Remote Desktop Licensing Service CVE-2026-26160 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Sensor Data Service CVE-2026-26161 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows OLE CVE-2026-26162 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Kernel CVE-2026-26163 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Shell CVE-2026-26165 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Shell CVE-2026-26166 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Push Notifications CVE-2026-26167 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Ancillary Function Driver for WinSock CVE-2026-26168 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Kernel Memory CVE-2026-26169 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Microsoft PowerShell CVE-2026-26170 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
.NET CVE-2026-26171 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C Exploitation Less Likely No No No
Windows Push Notifications CVE-2026-26172 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Ancillary Function Driver for WinSock CVE-2026-26173 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Server Update Service CVE-2026-26174 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Boot Manager CVE-2026-26175 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Client Side Caching driver (csc.sys) CVE-2026-26176 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Ancillary Function Driver for WinSock CVE-2026-26177 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Advanced Rasterization Platform CVE-2026-26178 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Kernel CVE-2026-26179 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Kernel CVE-2026-26180 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Brokering File System CVE-2026-26181 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Ancillary Function Driver for WinSock CVE-2026-26182 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows RPC API CVE-2026-26183 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Projected File System CVE-2026-26184 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Hello CVE-2026-27906 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Windows Storage Spaces Controller CVE-2026-27907 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows TDI Translation Driver (tdx.sys) CVE-2026-27908 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Microsoft Windows Search Component CVE-2026-27909 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Windows Installer CVE-2026-27910 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows User Interface Core CVE-2026-27911 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows Kerberos CVE-2026-27912 8.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows BitLocker CVE-2026-27913 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Microsoft Management Console CVE-2026-27914 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Windows Universal Plug and Play (UPnP) Device Host CVE-2026-27915 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Universal Plug and Play (UPnP) Device Host CVE-2026-27916 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) CVE-2026-27917 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Shell CVE-2026-27918 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Universal Plug and Play (UPnP) Device Host CVE-2026-27919 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Universal Plug and Play (UPnP) Device Host CVE-2026-27920 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows TCP/IP CVE-2026-27921 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Windows Ancillary Function Driver for WinSock CVE-2026-27922 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Desktop Window Manager CVE-2026-27923 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Desktop Window Manager CVE-2026-27924 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Universal Plug and Play (UPnP) Device Host CVE-2026-27925 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Cloud Files Mini Filter Driver CVE-2026-27926 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Projected File System CVE-2026-27927 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Hello CVE-2026-27928 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows LUAFV CVE-2026-27929 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows GDI CVE-2026-27930 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows GDI CVE-2026-27931 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows SSDP Service CVE-2026-32068 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows Projected File System CVE-2026-32069 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Common Log File System Driver CVE-2026-32070 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Windows Local Security Authority Subsystem Service (LSASS) CVE-2026-32071 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C Exploitation Less Likely No No No
Windows Active Directory CVE-2026-32072 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely No No No
Windows Ancillary Function Driver for WinSock CVE-2026-32073 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Projected File System CVE-2026-32074 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Universal Plug and Play (UPnP) Device Host CVE-2026-32075 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Windows Storage Spaces Controller CVE-2026-32076 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Universal Plug and Play (UPnP) Device Host CVE-2026-32077 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Projected File System CVE-2026-32078 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows File Explorer CVE-2026-32079 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows WalletService CVE-2026-32080 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows File Explorer CVE-2026-32081 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows SSDP Service CVE-2026-32082 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows SSDP Service CVE-2026-32083 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows File Explorer CVE-2026-32084 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows Remote Procedure Call CVE-2026-32085 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Function Discovery Service (fdwsd.dll) CVE-2026-32086 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Function Discovery Service (fdwsd.dll) CVE-2026-32087 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Biometric Service CVE-2026-32088 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Speech Brokered Api CVE-2026-32089 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Speech Brokered Api CVE-2026-32090 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Microsoft Brokering File System CVE-2026-32091 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Function Discovery Service (fdwsd.dll) CVE-2026-32093 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Role: Windows Hyper-V CVE-2026-32149 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Function Discovery Service (fdwsd.dll) CVE-2026-32150 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Shell CVE-2026-32151 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Desktop Window Manager CVE-2026-32152 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Microsoft Windows Speech CVE-2026-32153 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Desktop Window Manager CVE-2026-32154 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Desktop Window Manager CVE-2026-32155 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Universal Plug and Play (UPnP) Device Host CVE-2026-32156 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Remote Desktop Client CVE-2026-32157 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Push Notifications CVE-2026-32158 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows Push Notifications CVE-2026-32159 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Push Notifications CVE-2026-32160 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows COM CVE-2026-32162 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Windows User Interface Core CVE-2026-32163 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows User Interface Core CVE-2026-32164 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows User Interface Core CVE-2026-32165 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
SQL Server CVE-2026-32167 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Azure Monitor Agent CVE-2026-32168 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Azure Logic Apps CVE-2026-32171 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
SQL Server CVE-2026-32176 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
.NET CVE-2026-32178 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely No No No
Microsoft Windows CVE-2026-32181 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C Exploitation Less Likely No No No
Windows Snipping Tool CVE-2026-32183 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft High Performance Compute Pack (HPC) CVE-2026-32184 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office Excel CVE-2026-32188 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office Excel CVE-2026-32189 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office CVE-2026-32190 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Azure Monitor Agent CVE-2026-32192 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Kernel CVE-2026-32195 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Admin Center CVE-2026-32196 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office Excel CVE-2026-32197 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office Excel CVE-2026-32198 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office Excel CVE-2026-32199 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office PowerPoint CVE-2026-32200 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office SharePoint CVE-2026-32201 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:F/RL:O/RC:C Exploitation Detected Yes No No
Windows Shell CVE-2026-32202 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C Exploitation More Likely Yes No No
.NET and Visual Studio CVE-2026-32203 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C Exploitation Less Likely No No No
Microsoft Dynamics 365 (Online) CVE-2026-32210 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C N/A Yes No No
Universal Plug and Play (upnp.dll) CVE-2026-32212 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Universal Plug and Play (upnp.dll) CVE-2026-32214 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Kernel CVE-2026-32215 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Redirected Drive Buffering CVE-2026-32216 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C Exploitation Less Likely No No No
Windows Kernel CVE-2026-32217 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Kernel CVE-2026-32218 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Brokering File System CVE-2026-32219 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows Virtualization-Based Security (VBS) Enclave CVE-2026-32220 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Graphics Component CVE-2026-32221 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Win32K - ICOMP CVE-2026-32222 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows USB Print Driver CVE-2026-32223 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Server Update Service CVE-2026-32224 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows Shell CVE-2026-32225 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
.NET Framework CVE-2026-32226 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office Word CVE-2026-33095 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows HTTP.sys CVE-2026-33096 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C Exploitation Less Likely No No Yes
Windows Container Isolation FS Filter Driver CVE-2026-33098 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows Ancillary Function Driver for WinSock CVE-2026-33099 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Ancillary Function Driver for WinSock CVE-2026-33100 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Print Spooler Components CVE-2026-33101 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
M365 Copilot CVE-2026-33102 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C N/A Yes No No
Microsoft Dynamics 365 (on-premises) CVE-2026-33103 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows Win32K - GRFX CVE-2026-33104 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office Word CVE-2026-33114 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office Word CVE-2026-33115 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
.NET, .NET Framework, Visual Studio CVE-2026-33116 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C Exploitation Less Likely No No No
Microsoft Edge (Chromium-based) CVE-2026-33118 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C N/A Yes No No
Microsoft Edge (Chromium-based) CVE-2026-33119 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
SQL Server CVE-2026-33120 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Bing CVE-2026-33819 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C N/A Yes No No

| Microsoft Office Word | CVE-2026-33822 | 6.1 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C | Exploitation Less Likely | Yes | No | No | | Windows IKE Extension | CVE-2026-33824 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C | Exploitation Less Likely | Yes | No | Yes | | Microsoft Defender | CVE-2026-33825 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C | Exploitation More Likely | Yes | No | No | | Windows Active Directory | CVE-2026-33826 | 8.0 | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C | Exploitation More Likely | Yes | No | No | | Windows TCP/IP | CVE-2026-33827 | 8.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C | Exploitation Less Likely | Yes | No | No | | Windows Snipping Tool | CVE-2026-33829 | 4.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C | Exploitation Unlikely | Yes | No | No | | Microsoft Entra ID Entitlement Management | CVE-2026-35431 | 10.0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C | N/A | Yes | No | No |

We are republishing 139 non-Microsoft CVEs:

CNA Tag CVE FAQs? Workarounds? Mitigations?
AMD Input-Output Memory Management Unit (IOMMU) CVE-2023-20585 No No No
HackerOne Node.js CVE-2026-21637 No No No
MITRE Windows Secure Boot CVE-2026-25250 Yes No No
GitHub GitHub Repo: Git for Windows CVE-2026-32631 No No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5272 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5273 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5274 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5275 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5276 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5277 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5279 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5280 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5281 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5283 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5284 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5285 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5286 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5287 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5289 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5290 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5291 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5292 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5858 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5859 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5860 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5861 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5862 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5863 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5864 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5865 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5866 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5867 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5868 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5869 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5870 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5871 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5872 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5873 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5874 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5875 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5876 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5877 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5878 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5879 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5880 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5881 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5882 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5883 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5884 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5885 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5886 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5887 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5888 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5889 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5890 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5891 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5892 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5893 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5894 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5895 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5896 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5897 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5898 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5899 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5900 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5901 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5902 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5903 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5904 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5905 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5906 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5907 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5908 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5909 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5910 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5911 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5912 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5913 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5914 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5915 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5918 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-5919 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6296 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6297 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6298 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6299 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6300 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6301 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6302 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6303 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6304 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6305 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6306 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6307 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6308 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6309 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6310 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6311 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6312 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6313 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6314 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6316 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6317 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6318 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6359 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6360 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6361 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6362 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6363 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6364 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6919 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-6921 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7363 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7344 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7343 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7333 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7360 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7359 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7358 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7334 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7357 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7356 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7354 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7353 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7351 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7350 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7349 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7348 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7335 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7336 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7337 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7347 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7346 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7345 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7338 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7341 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7339 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7340 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-7355 Yes No No

Security Update Guide Blog Posts

Date Blog Post
October 31, 2025 You asked, we delivered: Introducing new features for an improved security experience
October 28, 2025 Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know
October 22, 2025 Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond
November 12, 2024 Toward greater transparency: Publishing machine-readable CSAF files
June 27, 2024 Toward greater transparency: Unveiling Cloud Service CVEs
April 9, 2024 Toward greater transparency: Security Update Guide now shares CWEs for CVEs
January 6, 2023 Publishing CBL-Mariner CVEs on the Security Update Guide CVRF API
January 11, 2022 Coming Soon: New Security Update Guide Notification System
February 9, 2021 Continuing to Listen: Good News about the Security Update Guide API
January 13, 2021 Security Update Guide Supports CVEs Assigned by Industry Partners
December 8, 2020 Security Update Guide: Let’s keep the conversation going
November 9, 2020 Vulnerability Descriptions in the New Version of the Security Update Guide

Relevant Resources

  • The new Hotpatching feature is now generally available. Please see Hotpatching feature for Windows Server Azure Edition virtual machines (VMs) for more information.
  • Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see Windows Lifecycle Facts Sheet.
  • Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes.
  • A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
  • In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
  • Customers running Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

Known Issues

You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.

For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).

KB Article Applies To
5082060 Windows Server 2022 23H2
5082063 Windows Server 2025
5082142 Windows Server 2022