MICROSOFT PATCH REPORTS  MARCH

REPORTY 2026  January  February  March  April  May  June  July  August  September  October  November  December

March 2026 Security Updates

This release consists of the following 97 Microsoft CVEs:

Tag CVE Base Score CVSS Vector Exploitability FAQs? Workarounds? Mitigations?
Microsoft Edge for Android CVE-2026-0385 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C   Yes No No
System Center Operations Manager CVE-2026-20967 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
SQL Server CVE-2026-21262 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Devices Pricing Program CVE-2026-21536 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Azure Compute Gallery CVE-2026-23651 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C Exploitation Less Likely Yes No No
GitHub Repo: zero-shot-scfoundation CVE-2026-23654 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows App Installer CVE-2026-23656 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Azure DevOps CVE-2026-23658 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C N/A Yes No No
Azure Data Factory CVE-2026-23659 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C N/A Yes No No
Azure Portal Windows Admin Center CVE-2026-23660 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Azure IoT Explorer CVE-2026-23661 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Azure IoT Explorer CVE-2026-23662 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Azure IoT Explorer CVE-2026-23664 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Azure Linux Virtual Machines CVE-2026-23665 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Broadcast DVR CVE-2026-23667 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Microsoft Graphics Component CVE-2026-23668 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
RPC Runtime CVE-2026-23669 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Bluetooth RFCOM Protocol Driver CVE-2026-23671 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Universal Disk Format File System Driver (UDFS) CVE-2026-23672 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows Resilient File System (ReFS) CVE-2026-23673 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows MapUrlToZone CVE-2026-23674 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Push Message Routing Service CVE-2026-24282 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows File Server CVE-2026-24283 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Win32K CVE-2026-24285 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Kernel CVE-2026-24287 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Mobile Broadband CVE-2026-24288 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Kernel CVE-2026-24289 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Windows Projected File System CVE-2026-24290 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Accessibility Infrastructure (ATBroker.exe) CVE-2026-24291 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Connected Devices Platform Service (Cdpsvc) CVE-2026-24292 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Ancillary Function Driver for WinSock CVE-2026-24293 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows SMB Server CVE-2026-24294 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Windows Device Association Service CVE-2026-24295 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Device Association Service CVE-2026-24296 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows Kerberos CVE-2026-24297 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
M365 Copilot CVE-2026-24299 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C N/A Yes No No
Windows Performance Counters CVE-2026-25165 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows System Image Manager CVE-2026-25166 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Microsoft Brokering File System CVE-2026-25167 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Graphics Component CVE-2026-25168 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C Exploitation Less Likely No No No
Microsoft Graphics Component CVE-2026-25169 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C Exploitation Less Likely No No No
Role: Windows Hyper-V CVE-2026-25170 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Authentication Methods CVE-2026-25171 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Routing and Remote Access Service (RRAS) CVE-2026-25172 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Routing and Remote Access Service (RRAS) CVE-2026-25173 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Extensible File Allocation CVE-2026-25174 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows NTFS CVE-2026-25175 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Ancillary Function Driver for WinSock CVE-2026-25176 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Active Directory Domain Services CVE-2026-25177 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Ancillary Function Driver for WinSock CVE-2026-25178 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Ancillary Function Driver for WinSock CVE-2026-25179 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Graphics Component CVE-2026-25180 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows GDI+ CVE-2026-25181 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Shell Link Processing CVE-2026-25185 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Accessibility Infrastructure (ATBroker.exe) CVE-2026-25186 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Winlogon CVE-2026-25187 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
Windows Telephony Service CVE-2026-25188 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Windows DWM Core Library CVE-2026-25189 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows GDI CVE-2026-25190 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office SharePoint CVE-2026-26105 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office SharePoint CVE-2026-26106 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office Excel CVE-2026-26107 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office Excel CVE-2026-26108 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office Excel CVE-2026-26109 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Microsoft Office CVE-2026-26110 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Routing and Remote Access Service (RRAS) CVE-2026-26111 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office Excel CVE-2026-26112 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office CVE-2026-26113 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office SharePoint CVE-2026-26114 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
SQL Server CVE-2026-26115 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
SQL Server CVE-2026-26116 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Azure Windows Virtual Machine Agent CVE-2026-26117 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Azure MCP Server CVE-2026-26118 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Bing CVE-2026-26120 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:P/RL:O/RC:C N/A Yes No No
Azure IoT Explorer CVE-2026-26121 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely No No No
Azure Compute Gallery CVE-2026-26122 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Authenticator CVE-2026-26123 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Azure Compute Gallery CVE-2026-26124 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C Exploitation Less Likely Yes No No
Payment Orchestrator Service CVE-2026-26125 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C N/A Yes No No
.NET CVE-2026-26127 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C Exploitation Unlikely No No No
Windows SMB Server CVE-2026-26128 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
ASP.NET Core CVE-2026-26130 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C Exploitation Less Likely No No No
.NET CVE-2026-26131 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Windows Kernel CVE-2026-26132 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation More Likely Yes No No
M365 Copilot CVE-2026-26133 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Office CVE-2026-26134 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Less Likely Yes No No
Microsoft Copilot CVE-2026-26136 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C   No No No
Microsoft Exchange CVE-2026-26137     N/A Yes No No
Microsoft Purview CVE-2026-26138 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C N/A Yes No No
Microsoft Purview CVE-2026-26139 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C N/A Yes No No
Azure Arc CVE-2026-26141 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Microsoft Office Excel CVE-2026-26144 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Azure Entra ID CVE-2026-26148 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C Exploitation Unlikely Yes No No
Azure Cloud Shell CVE-2026-32169 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C N/A Yes No No
Microsoft Edge (Chromium-based) CVE-2026-32187 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C Exploitation Unlikely Yes No No
Microsoft Bing Images CVE-2026-32191 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C N/A Yes No No
Microsoft Bing Images CVE-2026-32194 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C N/A Yes No No

We are republishing 75 non-Microsoft CVEs:

CNA Tag CVE FAQs? Workarounds? Mitigations?
GitHub Microsoft Semantic Kernel Python SDK CVE-2026-26030 Yes Yes No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3536 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3537 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3538 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3539 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3540 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3541 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3542 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3543 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3544 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3545 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3909 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3910 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3913 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3914 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3915 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3916 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3917 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3918 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3919 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3920 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3921 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3922 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3923 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3924 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3925 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3926 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3927 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3928 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3929 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3930 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3931 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3932 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3934 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3935 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3936 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3937 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3938 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3939 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3940 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3941 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-3942 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4440 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4441 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4442 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4443 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4444 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4445 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4446 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4447 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4448 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4449 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4450 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4451 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4452 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4453 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4454 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4455 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4456 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4457 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4458 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4459 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4460 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4461 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4462 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4463 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4464 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4673 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4674 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4675 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4676 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4677 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4678 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4679 Yes No No
Chrome Microsoft Edge (Chromium-based) CVE-2026-4680 Yes No No

Security Update Guide Blog Posts

Date Blog Post
June 27, 2024 Toward greater transparency: Unveiling Cloud Service CVEs
April 9, 2024 Toward greater transparency: Security Update Guide now shares CWEs for CVEs
January 6, 2023 Publishing CBL-Mariner CVEs on the Security Update Guide CVRF API
January 11, 2022 Coming Soon: New Security Update Guide Notification System
February 9, 2021 Continuing to Listen: Good News about the Security Update Guide API
January 13, 2021 Security Update Guide Supports CVEs Assigned by Industry Partners
December 8, 2020 Security Update Guide: Let’s keep the conversation going
November 9, 2020 Vulnerability Descriptions in the New Version of the Security Update Guide

Relevant Resources

  • The new Hotpatching feature is now generally available. Please see Hotpatching feature for Windows Server Azure Edition virtual machines (VMs) for more information.
  • Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see Windows Lifecycle Facts Sheet.
  • Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes.
  • A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
  • In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
  • Customers running Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

Known Issues

You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.

For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).

KB Article Applies To
5078734 Windows Server 2022 23H2
5078736 Windows Server 2025 Hotpatch
5078737 Windows Server 2022 Hotpatch
5078740 Windows Server 2025
5078752 Windows 10, version 1809, Windows Server 2019
5078766 Windows Server 2022