Microsoft Patch Tuesday vulnerability dashboard
PatchaPalooza tracks 30,221 Microsoft vulnerabilities across 82 Patch Tuesday releases since January 2020, combining Microsoft's advisories with CISA KEV, EPSS, NVD, public exploits and detection rules.
Latest release: October 2026 Patch Tuesday
3,425 vulnerabilities, 240 critical, 1 exploited in the wild, 3 publicly disclosed.
| CVE | Title | Severity | CVSS | Impact | Status |
|---|---|---|---|---|---|
| CVE-2026-96951 | Windows Shell Security Feature Bypass Vulnerability | High | 8.8 | Security Feature Bypass | Exploited |
| CVE-2026-111497 | Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder | High | 8.1 | Elevation of Privilege | Publicly disclosed |
| CVE-2026-108398 | .NET Framework Security Feature Bypass Vulnerability | High | 8.8 | Security Feature Bypass | Publicly disclosed |
| CVE-2026-100202 | Windows Message Queuing Queue Manager Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-100219 | Microsoft QUIC Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-100222 | Network Policy Server (NPS) Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-102210 | Windows Text Shaping Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-105010 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Critical | 9.8 | Elevation of Privilege | |
| CVE-2026-105016 | Microsoft QUIC Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-21413 | Raw Image Extension Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-69634 | Windows iSCSI Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-69639 | Windows libarchive Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-69886 | Windows Imaging Component Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-70147 | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-70153 | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-70157 | Windows System Information Console Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-70242 | Microsoft Office Outlook Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-70291 | Microsoft Office Outlook Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-70300 | Microsoft Office Word Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-83517 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-83519 | Windows Error Reporting Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-83578 | Microsoft PowerShell Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-83693 | Windows Error Reporting Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-83748 | Windows Error Reporting Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-83780 | Windows CCFFilter Driver Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution |
Showing 25 of 244.
Recently added to CISA KEV
| CVE | Title | Severity | CVSS | Impact | Status | Added to KEV | Release |
|---|---|---|---|---|---|---|---|
| CVE-2026-96951 | Windows Shell Security Feature Bypass Vulnerability | High | 8.8 | Security Feature Bypass | Exploited | October 2026 | |
| CVE-2026-65660 | Microsoft SharePoint Server Remote Code Execution Vulnerability | High | 8.8 | Remote Code Execution | August 2026 | ||
| CVE-2026-85880 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | Exploited | September 2026 | |
| CVE-2026-81963 | Windows Update Stack Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | Exploited | September 2026 | |
| CVE-2026-55040 | Microsoft SharePoint Server Security Feature Bypass Vulnerability | Critical | 9.1 | Security Feature Bypass | July 2026 | ||
| CVE-2026-33824 | Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | April 2026 | ||
| CVE-2026-68820 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | High | 7 | Elevation of Privilege | Exploited | August 2026 | |
| CVE-2026-50522 | Microsoft SharePoint Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | July 2026 | ||
| CVE-2026-58644 | Microsoft SharePoint Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | Exploited | July 2026 | |
| CVE-2026-56164 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Medium | 5.3 | Elevation of Privilege | Exploited | July 2026 | |
| CVE-2026-56155 | Active Directory Federation Services Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | Exploited | July 2026 | |
| CVE-2026-45659 | Microsoft SharePoint Remote Code Execution Vulnerability | High | 8.8 | Remote Code Execution | May 2026 | ||
| CVE-2026-45498 | Microsoft Defender Denial of Service Vulnerability | Medium | 4 | Denial of Service | Exploited | May 2026 | |
| CVE-2026-41091 | Microsoft Defender Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | Exploited | May 2026 | |
| CVE-2026-42897 | Microsoft Exchange Server Spoofing Vulnerability | High | 8.1 | Spoofing | Exploited | May 2026 |
Recently revised
| CVE | Title | Severity | CVSS | Impact | Status | Revised | Release |
|---|---|---|---|---|---|---|---|
| CVE-2026-57083 | Windows Media Photo Codec Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | July 2026 | ||
| CVE-2026-57084 | Windows File Explorer Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | July 2026 | ||
| CVE-2026-62740 | Windows Imaging Component Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | August 2026 | ||
| CVE-2026-62877 | Windows Win32k Elevation of Privilege Vulnerability | High | 7.8 | Remote Code Execution | August 2026 | ||
| CVE-2026-69499 | Windows Imaging Component Remote Code Execution Vulnerability | High | 8.8 | Remote Code Execution | September 2026 | ||
| CVE-2026-69576 | Graphic Fonts Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | September 2026 | ||
| CVE-2026-69609 | Win32k Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | September 2026 | ||
| CVE-2026-73013 | Windows Imaging Component Remote Code Execution Vulnerability | High | 8.8 | Remote Code Execution | September 2026 | ||
| CVE-2026-77491 | Windows GDI Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | September 2026 | ||
| CVE-2026-88097 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | High | 8.1 | Edge - Chromium | September 2026 | ||
| CVE-2026-83831 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | High | 8.8 | Remote Code Execution | October 2026 | ||
| CVE-2026-85890 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | High | 8.8 | Remote Code Execution | October 2026 | ||
| CVE-2026-85897 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | High | 8.8 | Remote Code Execution | October 2026 | ||
| CVE-2026-85898 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | High | 8.8 | Remote Code Execution | October 2026 | ||
| CVE-2026-88090 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Medium | 5.4 | Elevation of Privilege | October 2026 |
Browse by product family
Open Source Software · Windows · ESU · Browser · Mariner · Microsoft Office · Developer Tools · Azure · SQL Server · Microsoft Dynamics · Apps · Other · Server Software · System Center · Exchange Server · Device