Microsoft Security Updates — August 2026

This roundup covers 494 Microsoft security vulnerabilities. CVSS base scores range from 5.5 to 10.0. None are reported as actively exploited at the time of release. The issues affect .NET, .NET Core, AMT, Access, Active Directory Certificate Services, Active Directory Domain Services, Application Information Services, Application Insights Profiler, Azure Active Directory, Azure Arc, Azure Attestation, Azure Confidential Ledger, Azure CycleCloud, Azure Data Factory, Azure Data Manager for Energy, Azure Kubernetes Service, Azure Logic Apps, Azure Managed Instance for Apache Cassandra, Azure Monitor Agent, Azure SQL Database, Azure SQL Managed Instance, Azure SRE Agent, Azure Service Bus, Azure Stack HCI, Azure Storage Explorer, Azure Virtual Machines, Bluetooth, COM, Capability Access Management Service, Copilot, Defender for Endpoint, Desktop Window Manager, Dynamics 365, Dynamics Business Central, Edge, Entra Connect, Excel, Exchange Online, Exchange Server, GitHub Copilot, HDF5, High Performance Computing, High Performance Computing Pack, Hyper-V, Local Security Authority Server, Microsoft .NET Framework, Microsoft 365 Admin Center, Microsoft Copilot in Azure, Microsoft Entra, Microsoft Entra Provisioning Service, Microsoft Fabric, Microsoft Malware Protection Engine, Microsoft Partner Center, Microsoft Planetary Computer Pro, Microsoft Purview eDiscovery, Microsoft QUIC, Microsoft Teams, Office, Office Access, Office Word, OneDrive, Outlook, Power Apps, Power BI, PowerPoint, PowerShell, PowerShell Core, Reliable Multicast Transport Driver, Remote Desktop Client, Remote Desktop Services, Remote Help, Remote Registry Service, Routing and Remote Access Service, Rpm, SMB Client, SQL Server, SharePoint, SharePoint Online, SharePoint Server, Teams, Virtual Hard Disk, Visual Studio Code, Visual Studio Code CoPilot Chat Extension, Windows, Windows Ancillary Function Driver for WinSock, Windows Autopilot, Windows Backup Engine, Windows Bind Filter Driver, Windows Cloud Files Mini Filter Driver, Windows Common Log File System Driver, Windows Container Isolation FS Filter Driver, Windows Cross Device Service, Windows DHCP Client, Windows DHCP Server, Windows DNS, Windows DNS Server, Windows DWM Core Library, Windows Deployment Services, Windows Device Association Service, Windows Display Enhancement Service, Windows Encrypting File System, Windows Event Logging Service, Windows GDI+, Windows Graphics Kernel, Windows HTTP Protocol Stack, Windows HTTP.sys, Windows Hello, Windows Imaging Component, Windows Installer, Windows Kerberos, Windows Kernel, Windows Key Guard, Windows LDAP, Windows License Manager, Windows MIDI Service, Windows MIDI Service Module, Windows Management Instrumentation, Windows Management Services, Windows Message Queuing, Windows Modern Device Management, Windows NTFS, Windows Narrator, Windows Network Connection Broker, Windows Network File System, Windows Package Manager, Windows Program Compatibility Assistant Service, Windows Projected File System, Windows Push Notifications, Windows Remote Access API, Windows Remote Access Connection Manager, Windows Remote Desktop Services, Windows SMB Client, Windows SMB Server, Windows Search Component, Windows Secure Socket Tunneling Protocol, Windows Sensor Data Service, Windows Storage, Windows Storage Port Driver, Windows Telephony Service, Windows Universal Disk Format File System Driver, Windows User Profile Service, Windows Work Folder Service, Windows iSCSI Target Service, Winlogon, Word, dma-buf/udmabuf, firmware, ims-pcu, iomap, ksmbd, mctp, net/handshake, pds_core, wanxl.

Summary

CVE-2026-50481

CVE-2026-50481 is a critical vulnerability in Microsoft Azure Active Directory involving the modification of assumed-immutable data (MAID). An authorized attacker can exploit this flaw to escalate privileges within the environment over a network, potentially leading to unauthorized administrative access.

Affected products:

• Azure Active Directory

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-50481

CVE-2026-50515

CVE-2026-50515 is a critical deserialization of untrusted data vulnerability in Azure Service Bus that permits an authenticated attacker with low privileges to achieve remote code execution. Detection efforts should focus on monitoring anomalous serialized data payloads sent to service bus endpoints and unexpected process execution spawned by the Azure Service Bus service account.

Affected products:

• Azure Service Bus

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-50515

CVE-2026-56161

CVE-2026-56161 describes an improper access control vulnerability in Microsoft Azure Logic Apps. An authenticated attacker can exploit this vulnerability to disclose sensitive information over a network. The vulnerability carries a CVSS 3.1 base score of 9.6, indicating a critical risk.

Affected products:

• Azure Logic Apps

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-56161

Related in this roundup: CVE-2026-69400.

CVE-2026-59115

CVE-2026-59115 is a critical path traversal vulnerability in the Microsoft Entra Provisioning Service (SyncFabric). An authorized attacker can leverage this vulnerability by using a specific input string ('.../...//') to elevate their privileges over a network. The vulnerability has a CVSS base score of 9.9, indicating a significant risk to the integrity, confidentiality, and availability of the affected cloud service.

Affected products:

• Microsoft Entra Provisioning Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-59115

CVE-2026-59118

CVE-2026-59118 is an improper authorization vulnerability in Microsoft Power Apps that allows an unauthorized attacker to perform a privilege escalation over a network. The vulnerability carries a CVSS 3.1 base score of 9.3, indicating a critical severity impact on confidentiality and integrity, necessitating restricted access controls within the affected cloud service.

Affected products:

• Power Apps

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-59118

CVE-2026-62830

A vulnerability in the Azure SRE Agent stemming from missing authorization (CWE-862) allows an already authorized network attacker to perform privilege escalation. The vulnerability is rated critical with a CVSS 3.1 score of 9.9, as it enables full scope impact across confidentiality, integrity, and availability within the cloud environment.

Affected products:

• Azure SRE Agent

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62830

CVE-2026-62873

The Microsoft 365 Admin Center is vulnerable to an improper verification of cryptographic signature vulnerability (CWE-347). This flaw allows a remote, unauthorized attacker to elevate their privileges over a network, potentially leading to full compromise of confidentiality, integrity, and availability.

Affected products:

• Microsoft 365 Admin Center

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62873

CVE-2026-62896

Microsoft Teams contains an improper authentication vulnerability that allows an authenticated attacker to perform privilege escalation over a network. This flaw represents a critical security risk due to the potential for unauthorized access elevation within the application environment.

Affected products:

• Microsoft Teams

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62896

Related in this roundup: CVE-2026-65667, CVE-2026-62918.

CVE-2026-63508

Microsoft Planetary Computer Pro (GeoCatalog) contains a vulnerability due to missing authentication for a critical function. This allows an unauthorized attacker to perform privilege escalation over a network. The vulnerability is classified as critical and has a CVSS base score of 10.0.

Affected products:

• Microsoft Planetary Computer Pro (GeoCatalog)

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-63508

CVE-2026-65667

CVE-2026-65667 is a critical security vulnerability in Microsoft Teams involving missing authorization (CWE-862). This flaw allows a remote, unauthenticated attacker to elevate privileges over a network, potentially leading to unauthorized access to sensitive information and system integrity compromises.

Affected products:

• Microsoft Teams

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-65667

Related in this roundup: CVE-2026-62896, CVE-2026-62918.

CVE-2026-68823

CVE-2026-68823 involves an exposed dangerous method or function in the Azure Confidential Ledger service, which allows an authorized attacker to achieve remote code execution over a network. The vulnerability is classified as CWE-749 and carries a critical CVSS base score of 9.1.

Affected products:

• Azure Confidential Ledger

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68823

CVE-2026-70332

CVE-2026-70332 is a Server-Side Request Forgery (SSRF) vulnerability in Microsoft SharePoint Online. An unauthenticated attacker can exploit this flaw to perform spoofing over a network, potentially leading to unauthorized information disclosure, interaction with internal services, or further lateral movement within the cloud environment.

Affected products:

• SharePoint Online

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-70332

CVE-2026-49163

Application Insights Profiler is vulnerable to a path traversal flaw (CWE-22) that allows an authorized attacker to elevate their privileges over a network. This vulnerability indicates improper limitation of a pathname to a restricted directory.

Affected products:

• Application Insights Profiler

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-49163

CVE-2026-62836

CVE-2026-62836 identifies a vulnerability in Azure SQL Managed Instance due to improper restriction of communication channels to intended endpoints. This flaw allows an unauthenticated, remote attacker to escalate privileges over a network connection by exploiting the misconfigured communication path.

Affected products:

• Azure SQL Managed Instance

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62836

CVE-2026-62918

CVE-2026-62918 is a vulnerability in Microsoft Teams involving improper verification of cryptographic signatures. This flaw allows an unauthorized remote attacker to perform spoofing attacks over a network, potentially leading to unauthorized data manipulation or masquerading within the platform.

Affected products:

• Microsoft Teams

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62918

Related in this roundup: CVE-2026-62896, CVE-2026-65667.

CVE-2026-65668

Microsoft Purview eDiscovery contains an improper access control vulnerability that allows an authenticated attacker to perform a privilege escalation attack over the network. Detection should focus on monitoring unauthorized account role modifications or unexpected administrative actions within the Purview compliance console.

Affected products:

• Microsoft Purview eDiscovery

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-65668

CVE-2026-68480

CVE-2026-68480 relates to a vulnerability in the x86 Safe-RET implementation regarding interrupt injection, which could allow a local attacker to potentially bypass security protections or escalate privileges. Security updates for affected versions of the Windows operating system address the robustness of the return mechanism against these specific interrupt vectors.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68480

Related in this roundup: CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-64564

CVE-2026-64564 involves a vulnerability in the SCTP (Stream Control Transmission Protocol) implementation within Microsoft Windows. The issue occurs during DEL-IP processing, where the ASCONF (Address Configuration Change Chunk) packet handling incorrectly attempts to free its own transport, potentially leading to a use-after-free or memory management error.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64564

Related in this roundup: CVE-2026-68480, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-64590

CVE-2026-64590 identifies an issue within the dma-buf/udmabuf component where a redundant CPU synchronization triggers a cacheline EEXIST warning. This update addresses the underlying logic to ensure proper synchronization handling.

Affected products:

• dma-buf/udmabuf

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64590

CVE-2026-54876

CVE-2026-54876 describes a client-side memory leak vulnerability within the OCSP (Online Certificate Status Protocol) response checking mechanism in Microsoft Windows products.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54876

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-44605

CVE-2026-44605 describes a heap-based buffer overflow vulnerability located in the ndb slot table parsing logic within Rpm. This vulnerability could potentially allow for arbitrary code execution or memory corruption when processing malformed slot tables.

Affected products:

• Rpm

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44605

CVE-2026-64573

A vulnerability identified in the Bluetooth NVM tag length TLV parser leads to an underflow condition. This security update from Microsoft addresses the flaw to prevent potential memory corruption or exploitation within the Bluetooth component.

Affected products:

• Bluetooth

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64573

CVE-2026-64565

CVE-2026-64565 refers to a heap-based buffer overflow vulnerability located within the ims_pcu_process_data() function of the ims-pcu component, potentially allowing for memory corruption or arbitrary code execution.

Affected products:

• ims-pcu

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64565

CVE-2026-64578

CVE-2026-64578 identifies a vulnerability in the ksmbd kernel-mode SMB server, where insufficient validation of compound request sizes before reading StructureSize2 can lead to memory safety issues. Detection engineering should focus on monitoring SMB traffic patterns for malformed or oversized requests that could trigger improper bounds handling.

Affected products:

• ksmbd

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64578

Related in this roundup: CVE-2026-68097, CVE-2026-68130, CVE-2026-68099, CVE-2026-68098.

CVE-2024-21380

CVE-2024-21380 is an information disclosure vulnerability affecting Microsoft Dynamics Business Central and Dynamics NAV. The disclosure indicates an informational update to build numbers provided by Microsoft in the Security Update Guide, with no functional changes described in the provided content.

Affected products:

• Dynamics Business Central
• Dynamics NAV

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21380

Related in this roundup: CVE-2026-40375.

CVE-2025-2308

CVE-2025-2308 is a heap-based buffer overflow vulnerability residing in the H5Z__scaleoffset_decompress_one_byte function within the HDF5 scale-offset filter, potentially allowing for arbitrary code execution if a maliciously crafted HDF5 file is processed.

Affected products:

• HDF5

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-2308

Related in this roundup: CVE-2025-2309.

CVE-2025-2309

CVE-2025-2309 refers to a heap-based buffer overflow vulnerability identified in the HDF5 library specifically within the H5T__bit_copy type conversion logic. The vulnerability could potentially lead to memory corruption or arbitrary code execution if an attacker provides a maliciously crafted HDF5 file to an application utilizing the affected library code for data processing.

Affected products:

• HDF5

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-2309

Related in this roundup: CVE-2025-2308.

CVE-2026-68097

CVE-2026-68097 identifies a vulnerability in ksmbd where the software fails to properly validate the size of an Access Control Entry (ACE) against the number of Security Identifier (SID) sub-authorities. This vulnerability could potentially lead to memory corruption or other instability issues when processing malicious SMB traffic.

Affected products:

• ksmbd

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68097

Related in this roundup: CVE-2026-64578, CVE-2026-68130, CVE-2026-68099, CVE-2026-68098.

CVE-2026-68388

CVE-2026-68388 addresses a vulnerability in the SMB client component of the Windows operating system related to the improper handling of overlapping allocated ranges during fallocate operations, which may lead to memory corruption or instability.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68388

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68187

CVE-2026-68187 describes an unsigned loop counter wrap vulnerability within the transfer_args_to_stack() function in Microsoft software, potentially allowing for memory corruption or unstable execution states.

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68187

CVE-2026-68152

CVE-2026-68152 addresses a use-after-free vulnerability within the AMT delayed works component in Microsoft products, which could potentially lead to system instability or arbitrary code execution.

Affected products:

• AMT

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68152

CVE-2026-68189

CVE-2026-68189 refers to a vulnerability within the Bluetooth hci_sync component in Microsoft Windows. The issue involves a lack of protection during UUID list traversal, which may lead to memory safety issues or instability during Bluetooth stack operations.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68189

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68312

CVE-2026-68312 describes a memory leak vulnerability in the CIFS (Common Internet File System) implementation within the Windows kernel. The issue specifically occurs in the deferred close drain paths when a kmalloc memory allocation fails, leading to a cifsFileInfo object leak, which could potentially be leveraged for denial-of-service conditions.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68312

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68130

CVE-2026-68130 identifies a security vulnerability in the ksmbd component within Microsoft Windows Server. The flaw involves the premature destruction of the previous session before NTLM authentication is fully completed, which could lead to authentication bypass or session handling errors. Security teams should ensure that the provided update is applied to affected server environments to enforce proper session lifecycle management during the authentication handshake.

Affected products:

• ksmbd

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68130

Related in this roundup: CVE-2026-64578, CVE-2026-68097, CVE-2026-68099, CVE-2026-68098.

CVE-2026-68176

CVE-2026-68176 describes a vulnerability in mmiotrace involving a potential NULL pointer dereferencing issue regarding the hiter->dev pointer. This flaw could lead to a system crash or unstable behavior when handled improperly during tracing operations.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68176

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68145

CVE-2026-68145 concerns an out-of-bounds vulnerability in the iomap component, specifically triggered during bitmap_set operations involving zero-length ranges. This flaw could potentially allow for memory corruption, impacting system stability or security.

Affected products:

• iomap

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68145

CVE-2026-68318

CVE-2026-68318 is a vulnerability in pds_core involving a use-after-free condition triggered during the removal process of a workqueue. The issue arises due to improper memory management, which could potentially be exploited to cause a system crash or arbitrary code execution.

Affected products:

• pds_core

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68318

CVE-2026-68118

CVE-2026-68118 describes a vulnerability in the TCP stack implementation where improper handling of challenge ACKs for non-exact RST packets in the SYN-RECEIVED state can be exploited to cause a denial-of-service condition or disrupt network connections.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68118

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68175

CVE-2026-68175 refers to a resource leak vulnerability identified within the mmiotrace trace_pipe close function in Microsoft Windows, which could potentially be leveraged for local denial-of-service conditions or resource exhaustion.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68175

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68328

CVE-2026-68328 identifies a vulnerability within the Windows nfp (Near-Field Proximity) driver related to resource mutex allocation, as reported by the Microsoft Security Response Center.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68328

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68406

CVE-2026-68406 identifies a vulnerability in the wifi cfg80211 subsystem where the PMSR FTM preamble range is improperly validated. This flaw can potentially lead to memory corruption or instability within the wireless driver stack, necessitating a security update to ensure proper bounds checking for wireless frame parameters.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68406

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68317

CVE-2026-68317 refers to a vulnerability in pds_core involving race conditions during auxiliary device addition or deletion. The issue requires patching to ensure stability and prevent potential exploitation via race conditions.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68317

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68099

CVE-2026-68099 is a vulnerability in the ksmbd component within Microsoft Windows, where an integer overflow check in check_add_overflow() fails to correctly restore DACL size, potentially leading to the processing of malformed ACLs. This flaw could be exploited to cause memory corruption or denial of service conditions by submitting specially crafted SMB packets.

Affected products:

• ksmbd

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68099

Related in this roundup: CVE-2026-64578, CVE-2026-68097, CVE-2026-68130, CVE-2026-68098.

CVE-2026-68354

CVE-2026-68354 refers to a vulnerability within the Windows firewire network driver stack involving improper handling of fragmented datagram reassembly, which may allow for potential exploitation during network packet processing.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68354

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68326

CVE-2026-68326 is a vulnerability within the mwifiex Wi-Fi driver, specifically involving improper bounds checking of uAP association event Information Elements (IEs) against the event buffer. This flaw could potentially allow for memory corruption or other impacts depending on how the driver processes malformed association packets.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68326

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68151

CVE-2026-68151 identifies a vulnerability within the binfmt_elf_fdpic loader, which incorrectly handles multiple PT_INTERP segments in an ELF file. By only honoring the first PT_INTERP, the implementation may lead to inconsistencies in how executable files are parsed and executed, potentially impacting system security and loader integrity.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68151

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68343

CVE-2026-68343 describes a vulnerability in the Microsoft SMB client related to the validation of DFS referral PathConsumed. This flaw potentially allows an attacker to manipulate path validation logic within SMB communications.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68343

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68184

CVE-2026-68184 describes a stack-based out-of-bounds read vulnerability within the CDROMVOLCTRL functionality of the Windows CD-ROM driver. This flaw could potentially be leveraged by an attacker to read sensitive data from the stack, though specific exploitation vectors are not detailed beyond the vulnerability type.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68184

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68124

CVE-2026-68124 identifies a buffer overflow vulnerability within the MCTP serial driver components, triggered by the improper handling of zero-length frames. An attacker could potentially exploit this flaw to cause memory corruption or a system crash.

Affected products:

• mctp

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68124

CVE-2026-68401

CVE-2026-68401 describes an out-of-bounds write vulnerability within the arm_ffa component of Microsoft firmware, specifically located in the ffa_setup_and_transmit() function, which requires a security update to remediate.

Affected products:

• firmware

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68401

CVE-2026-68322

CVE-2026-68322 describes a NULL pointer dereference vulnerability within the rds (Reliable Datagram Sockets) component of Microsoft Windows, specifically occurring when IPv6 is disabled. This vulnerability can lead to a system crash, resulting in a denial of service condition.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68322

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68214

CVE-2026-68214 identifies a use-after-free vulnerability located in the rtl2832 driver's remove function (rtl2832_remove) within the Windows kernel. This flaw could potentially be leveraged to trigger system instability or lead to memory corruption, requiring a kernel-level security update to address the lifetime management of the driver object.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68214

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68327

CVE-2026-68327 is a vulnerability identified in the Microsoft wanxl WAN driver component. The vulnerability relates to the handling of hardware reset sequences in relation to Base Address Register (BAR) mapping. Successful exploitation of this issue could potentially lead to undefined system behavior or stability issues within the network driver stack.

Affected products:

• wanxl

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68327

CVE-2026-68188

CVE-2026-68188 describes a use-after-free (UAF) vulnerability within the RFCOMM protocol implementation of the Bluetooth stack, specifically triggered during the set_termios operation.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68188

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68132

CVE-2026-68132 is a vulnerability addressed by Microsoft that involves a deadlock condition occurring during the emergency thaw process on frozen block devices within the Windows operating system.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68132

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68304

CVE-2026-68304 addresses a call trace warning in the brcmfmac wireless driver related to 802.1X-SHA256 authentication processing. While technical details are limited, the issue involves handling of authentication frames within the Broadcom wireless stack.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68304

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68098

CVE-2026-68098 is a vulnerability in the ksmbd kernel-mode SMB server component within Microsoft Windows. The issue involves improper handling of DACL (Discretionary Access Control List) deduplication during ACE (Access Control Entry) copying operations, which may lead to memory safety issues when processing malformed requests.

Affected products:

• ksmbd

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68098

Related in this roundup: CVE-2026-64578, CVE-2026-68097, CVE-2026-68130, CVE-2026-68099.

CVE-2026-68348

CVE-2026-68348 involves an issue in the ASoC (ALSA System on Chip) subsystem specifically related to the tas2781 audio amplifier driver, where firmware description string parsing is not properly bounded, potentially leading to memory corruption or related stability issues.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68348

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68195

CVE-2026-68195 describes a vulnerability in the mt76 driver for MediaTek WiFi chipsets, specifically affecting the mt7615 module. The vulnerability involves improper handling of TXRX_NOTIFY events on non-MMIO buses, requiring a patch to drop these notifications to maintain stability and security.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68195

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68419

CVE-2026-68419 is a vulnerability in the Linux kernel's irdma (RDMA) subsystem. The flaw specifically pertains to the rereg_mr function, which fails to properly validate that the memory region being re-registered is a valid memory region, potentially leading to unauthorized memory access or system instability.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68419

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68171

CVE-2026-68171 refers to a vulnerability in the Linux kernel for the arm64 architecture, specifically related to syscall handling. The flaw involves a synchronization issue where the saved x0 register may not correctly reflect updates made by a tracer during a system call, potentially leading to security boundary bypasses or incorrect syscall execution context.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68171

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-64523

CVE-2026-64523 is a vulnerability in the Microsoft net/handshake component involving the handling of long-lived file references during submission processes, which has been identified and addressed by Microsoft via the Security Update Guide.

Affected products:

• net/handshake

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64523

CVE-2026-64388

CVE-2026-64388 refers to a security update for the Microsoft SMB client component, specifically addressing improper handling of POSIX chown/chgrp operations when using SMB3 POSIX Extensions.

Affected products:

• SMB Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64388

CVE-2025-37938

CVE-2025-37938 refers to a security vulnerability related to the tracing of event formats containing '%*p' sequences. The provided content is a placeholder index for a Microsoft Security Response Center advisory, and specific technical details regarding the vulnerability's impact, affected products, or exploitation vectors are not currently available within the source text.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-37938

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68207

CVE-2026-68207 involves an error in the Video4Linux2 (v4l2) device registration process within the Linux kernel, specifically related to improper cleanup during probe errors. This flaw could potentially lead to inconsistent system states or kernel-level instability upon initialization failure.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68207

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-50472

A heap-based buffer overflow vulnerability in the Windows LUA File Virtualization (LUAFV) filter driver allows a locally authenticated attacker to escalate privileges to the level of the kernel or system.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50472

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.