Summary

CVE-2026-50481

CVE-2026-50481 is a critical vulnerability in Microsoft Azure Active Directory involving the modification of assumed-immutable data (MAID). An authorized attacker can exploit this flaw to escalate privileges within the environment over a network, potentially leading to unauthorized administrative access.

Affected products:

• Azure Active Directory

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-50481

CVE-2026-50515

CVE-2026-50515 is a critical deserialization of untrusted data vulnerability in Azure Service Bus that permits an authenticated attacker with low privileges to achieve remote code execution. Detection efforts should focus on monitoring anomalous serialized data payloads sent to service bus endpoints and unexpected process execution spawned by the Azure Service Bus service account.

Affected products:

• Azure Service Bus

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-50515

CVE-2026-56161

CVE-2026-56161 describes an improper access control vulnerability in Microsoft Azure Logic Apps. An authenticated attacker can exploit this vulnerability to disclose sensitive information over a network. The vulnerability carries a CVSS 3.1 base score of 9.6, indicating a critical risk.

Affected products:

• Azure Logic Apps

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-56161

CVE-2026-59115

CVE-2026-59115 is a critical path traversal vulnerability in the Microsoft Entra Provisioning Service (SyncFabric). An authorized attacker can leverage this vulnerability by using a specific input string ('.../...//') to elevate their privileges over a network. The vulnerability has a CVSS base score of 9.9, indicating a significant risk to the integrity, confidentiality, and availability of the affected cloud service.

Affected products:

• Microsoft Entra Provisioning Service

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-59115

CVE-2026-59118

CVE-2026-59118 is an improper authorization vulnerability in Microsoft Power Apps that allows an unauthorized attacker to perform a privilege escalation over a network. The vulnerability carries a CVSS 3.1 base score of 9.3, indicating a critical severity impact on confidentiality and integrity, necessitating restricted access controls within the affected cloud service.

Affected products:

• Power Apps

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-59118

CVE-2026-62830

A vulnerability in the Azure SRE Agent stemming from missing authorization (CWE-862) allows an already authorized network attacker to perform privilege escalation. The vulnerability is rated critical with a CVSS 3.1 score of 9.9, as it enables full scope impact across confidentiality, integrity, and availability within the cloud environment.

Affected products:

• Azure SRE Agent

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62830

CVE-2026-62873

The Microsoft 365 Admin Center is vulnerable to an improper verification of cryptographic signature vulnerability (CWE-347). This flaw allows a remote, unauthorized attacker to elevate their privileges over a network, potentially leading to full compromise of confidentiality, integrity, and availability.

Affected products:

• Microsoft 365 Admin Center

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62873

CVE-2026-62896

Microsoft Teams contains an improper authentication vulnerability that allows an authenticated attacker to perform privilege escalation over a network. This flaw represents a critical security risk due to the potential for unauthorized access elevation within the application environment.

Affected products:

• Microsoft Teams

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62896

Related in this roundup: CVE-2026-65667, CVE-2026-62918.

CVE-2026-63508

Microsoft Planetary Computer Pro (GeoCatalog) contains a vulnerability due to missing authentication for a critical function. This allows an unauthorized attacker to perform privilege escalation over a network. The vulnerability is classified as critical and has a CVSS base score of 10.0.

Affected products:

• Microsoft Planetary Computer Pro (GeoCatalog)

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-63508

CVE-2026-65667

CVE-2026-65667 is a critical security vulnerability in Microsoft Teams involving missing authorization (CWE-862). This flaw allows a remote, unauthenticated attacker to elevate privileges over a network, potentially leading to unauthorized access to sensitive information and system integrity compromises.

Affected products:

• Microsoft Teams

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-65667

Related in this roundup: CVE-2026-62896, CVE-2026-62918.

CVE-2026-68823

CVE-2026-68823 involves an exposed dangerous method or function in the Azure Confidential Ledger service, which allows an authorized attacker to achieve remote code execution over a network. The vulnerability is classified as CWE-749 and carries a critical CVSS base score of 9.1.

Affected products:

• Azure Confidential Ledger

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-68823

CVE-2026-70332

CVE-2026-70332 is a Server-Side Request Forgery (SSRF) vulnerability in Microsoft SharePoint Online. An unauthenticated attacker can exploit this flaw to perform spoofing over a network, potentially leading to unauthorized information disclosure, interaction with internal services, or further lateral movement within the cloud environment.

Affected products:

• SharePoint Online

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-70332

CVE-2026-49163

Application Insights Profiler is vulnerable to a path traversal flaw (CWE-22) that allows an authorized attacker to elevate their privileges over a network. This vulnerability indicates improper limitation of a pathname to a restricted directory.

Affected products:

• Application Insights Profiler

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-49163

CVE-2026-62836

CVE-2026-62836 identifies a vulnerability in Azure SQL Managed Instance due to improper restriction of communication channels to intended endpoints. This flaw allows an unauthenticated, remote attacker to escalate privileges over a network connection by exploiting the misconfigured communication path.

Affected products:

• Azure SQL Managed Instance

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62836

CVE-2026-62918

CVE-2026-62918 is a vulnerability in Microsoft Teams involving improper verification of cryptographic signatures. This flaw allows an unauthorized remote attacker to perform spoofing attacks over a network, potentially leading to unauthorized data manipulation or masquerading within the platform.

Affected products:

• Microsoft Teams

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-62918

Related in this roundup: CVE-2026-62896, CVE-2026-65667.

CVE-2026-65668

Microsoft Purview eDiscovery contains an improper access control vulnerability that allows an authenticated attacker to perform a privilege escalation attack over the network. Detection should focus on monitoring unauthorized account role modifications or unexpected administrative actions within the Purview compliance console.

Affected products:

• Microsoft Purview eDiscovery

Source: https://nvd.nist.gov/vuln/detail/CVE-2026-65668

CVE-2026-68480

CVE-2026-68480 relates to a vulnerability in the x86 Safe-RET implementation regarding interrupt injection, which could allow a local attacker to potentially bypass security protections or escalate privileges. Security updates for affected versions of the Windows operating system address the robustness of the return mechanism against these specific interrupt vectors.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68480

Related in this roundup: CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-64564

CVE-2026-64564 involves a vulnerability in the SCTP (Stream Control Transmission Protocol) implementation within Microsoft Windows. The issue occurs during DEL-IP processing, where the ASCONF (Address Configuration Change Chunk) packet handling incorrectly attempts to free its own transport, potentially leading to a use-after-free or memory management error.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64564

Related in this roundup: CVE-2026-68480, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-64590

CVE-2026-64590 identifies an issue within the dma-buf/udmabuf component where a redundant CPU synchronization triggers a cacheline EEXIST warning. This update addresses the underlying logic to ensure proper synchronization handling.

Affected products:

• dma-buf/udmabuf

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64590

CVE-2026-54876

CVE-2026-54876 describes a client-side memory leak vulnerability within the OCSP (Online Certificate Status Protocol) response checking mechanism in Microsoft Windows products.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54876

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-44605

CVE-2026-44605 describes a heap-based buffer overflow vulnerability located in the ndb slot table parsing logic within Rpm. This vulnerability could potentially allow for arbitrary code execution or memory corruption when processing malformed slot tables.

Affected products:

• Rpm

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44605

CVE-2026-64573

A vulnerability identified in the Bluetooth NVM tag length TLV parser leads to an underflow condition. This security update from Microsoft addresses the flaw to prevent potential memory corruption or exploitation within the Bluetooth component.

Affected products:

• Bluetooth

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64573

CVE-2026-64565

CVE-2026-64565 refers to a heap-based buffer overflow vulnerability located within the ims_pcu_process_data() function of the ims-pcu component, potentially allowing for memory corruption or arbitrary code execution.

Affected products:

• ims-pcu

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64565

CVE-2026-64578

CVE-2026-64578 identifies a vulnerability in the ksmbd kernel-mode SMB server, where insufficient validation of compound request sizes before reading StructureSize2 can lead to memory safety issues. Detection engineering should focus on monitoring SMB traffic patterns for malformed or oversized requests that could trigger improper bounds handling.

Affected products:

• ksmbd

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64578

Related in this roundup: CVE-2026-68097, CVE-2026-68130, CVE-2026-68099, CVE-2026-68098.

CVE-2024-21380

CVE-2024-21380 is an information disclosure vulnerability affecting Microsoft Dynamics Business Central and Dynamics NAV. The disclosure indicates an informational update to build numbers provided by Microsoft in the Security Update Guide, with no functional changes described in the provided content.

Affected products:

• Dynamics Business Central
• Dynamics NAV

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21380

Related in this roundup: CVE-2026-40375.

CVE-2025-2308

CVE-2025-2308 is a heap-based buffer overflow vulnerability residing in the H5Z__scaleoffset_decompress_one_byte function within the HDF5 scale-offset filter, potentially allowing for arbitrary code execution if a maliciously crafted HDF5 file is processed.

Affected products:

• HDF5

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-2308

Related in this roundup: CVE-2025-2309.

CVE-2025-2309

CVE-2025-2309 refers to a heap-based buffer overflow vulnerability identified in the HDF5 library specifically within the H5T__bit_copy type conversion logic. The vulnerability could potentially lead to memory corruption or arbitrary code execution if an attacker provides a maliciously crafted HDF5 file to an application utilizing the affected library code for data processing.

Affected products:

• HDF5

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-2309

Related in this roundup: CVE-2025-2308.

CVE-2026-68097

CVE-2026-68097 identifies a vulnerability in ksmbd where the software fails to properly validate the size of an Access Control Entry (ACE) against the number of Security Identifier (SID) sub-authorities. This vulnerability could potentially lead to memory corruption or other instability issues when processing malicious SMB traffic.

Affected products:

• ksmbd

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68097

Related in this roundup: CVE-2026-64578, CVE-2026-68130, CVE-2026-68099, CVE-2026-68098.

CVE-2026-68388

CVE-2026-68388 addresses a vulnerability in the SMB client component of the Windows operating system related to the improper handling of overlapping allocated ranges during fallocate operations, which may lead to memory corruption or instability.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68388

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68187

CVE-2026-68187 describes an unsigned loop counter wrap vulnerability within the transfer_args_to_stack() function in Microsoft software, potentially allowing for memory corruption or unstable execution states.

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68187

CVE-2026-68152

CVE-2026-68152 addresses a use-after-free vulnerability within the AMT delayed works component in Microsoft products, which could potentially lead to system instability or arbitrary code execution.

Affected products:

• AMT

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68152

CVE-2026-68189

CVE-2026-68189 refers to a vulnerability within the Bluetooth hci_sync component in Microsoft Windows. The issue involves a lack of protection during UUID list traversal, which may lead to memory safety issues or instability during Bluetooth stack operations.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68189

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68312

CVE-2026-68312 describes a memory leak vulnerability in the CIFS (Common Internet File System) implementation within the Windows kernel. The issue specifically occurs in the deferred close drain paths when a kmalloc memory allocation fails, leading to a cifsFileInfo object leak, which could potentially be leveraged for denial-of-service conditions.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68312

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68130

CVE-2026-68130 identifies a security vulnerability in the ksmbd component within Microsoft Windows Server. The flaw involves the premature destruction of the previous session before NTLM authentication is fully completed, which could lead to authentication bypass or session handling errors. Security teams should ensure that the provided update is applied to affected server environments to enforce proper session lifecycle management during the authentication handshake.

Affected products:

• ksmbd

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68130

Related in this roundup: CVE-2026-64578, CVE-2026-68097, CVE-2026-68099, CVE-2026-68098.

CVE-2026-68176

CVE-2026-68176 describes a vulnerability in mmiotrace involving a potential NULL pointer dereferencing issue regarding the hiter->dev pointer. This flaw could lead to a system crash or unstable behavior when handled improperly during tracing operations.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68176

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68145

CVE-2026-68145 concerns an out-of-bounds vulnerability in the iomap component, specifically triggered during bitmap_set operations involving zero-length ranges. This flaw could potentially allow for memory corruption, impacting system stability or security.

Affected products:

• iomap

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68145

CVE-2026-68318

CVE-2026-68318 is a vulnerability in pds_core involving a use-after-free condition triggered during the removal process of a workqueue. The issue arises due to improper memory management, which could potentially be exploited to cause a system crash or arbitrary code execution.

Affected products:

• pds_core

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68318

CVE-2026-68118

CVE-2026-68118 describes a vulnerability in the TCP stack implementation where improper handling of challenge ACKs for non-exact RST packets in the SYN-RECEIVED state can be exploited to cause a denial-of-service condition or disrupt network connections.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68118

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68175

CVE-2026-68175 refers to a resource leak vulnerability identified within the mmiotrace trace_pipe close function in Microsoft Windows, which could potentially be leveraged for local denial-of-service conditions or resource exhaustion.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68175

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68328

CVE-2026-68328 identifies a vulnerability within the Windows nfp (Near-Field Proximity) driver related to resource mutex allocation, as reported by the Microsoft Security Response Center.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68328

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68406

CVE-2026-68406 identifies a vulnerability in the wifi cfg80211 subsystem where the PMSR FTM preamble range is improperly validated. This flaw can potentially lead to memory corruption or instability within the wireless driver stack, necessitating a security update to ensure proper bounds checking for wireless frame parameters.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68406

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68317

CVE-2026-68317 refers to a vulnerability in pds_core involving race conditions during auxiliary device addition or deletion. The issue requires patching to ensure stability and prevent potential exploitation via race conditions.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68317

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68099

CVE-2026-68099 is a vulnerability in the ksmbd component within Microsoft Windows, where an integer overflow check in check_add_overflow() fails to correctly restore DACL size, potentially leading to the processing of malformed ACLs. This flaw could be exploited to cause memory corruption or denial of service conditions by submitting specially crafted SMB packets.

Affected products:

• ksmbd

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68099

Related in this roundup: CVE-2026-64578, CVE-2026-68097, CVE-2026-68130, CVE-2026-68098.

CVE-2026-68354

CVE-2026-68354 refers to a vulnerability within the Windows firewire network driver stack involving improper handling of fragmented datagram reassembly, which may allow for potential exploitation during network packet processing.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68354

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68326

CVE-2026-68326 is a vulnerability within the mwifiex Wi-Fi driver, specifically involving improper bounds checking of uAP association event Information Elements (IEs) against the event buffer. This flaw could potentially allow for memory corruption or other impacts depending on how the driver processes malformed association packets.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68326

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68151

CVE-2026-68151 identifies a vulnerability within the binfmt_elf_fdpic loader, which incorrectly handles multiple PT_INTERP segments in an ELF file. By only honoring the first PT_INTERP, the implementation may lead to inconsistencies in how executable files are parsed and executed, potentially impacting system security and loader integrity.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68151

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68343

CVE-2026-68343 describes a vulnerability in the Microsoft SMB client related to the validation of DFS referral PathConsumed. This flaw potentially allows an attacker to manipulate path validation logic within SMB communications.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68343

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68184

CVE-2026-68184 describes a stack-based out-of-bounds read vulnerability within the CDROMVOLCTRL functionality of the Windows CD-ROM driver. This flaw could potentially be leveraged by an attacker to read sensitive data from the stack, though specific exploitation vectors are not detailed beyond the vulnerability type.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68184

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68124

CVE-2026-68124 identifies a buffer overflow vulnerability within the MCTP serial driver components, triggered by the improper handling of zero-length frames. An attacker could potentially exploit this flaw to cause memory corruption or a system crash.

Affected products:

• mctp

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68124

CVE-2026-68401

CVE-2026-68401 describes an out-of-bounds write vulnerability within the arm_ffa component of Microsoft firmware, specifically located in the ffa_setup_and_transmit() function, which requires a security update to remediate.

Affected products:

• firmware

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68401

CVE-2026-68322

CVE-2026-68322 describes a NULL pointer dereference vulnerability within the rds (Reliable Datagram Sockets) component of Microsoft Windows, specifically occurring when IPv6 is disabled. This vulnerability can lead to a system crash, resulting in a denial of service condition.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68322

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68214

CVE-2026-68214 identifies a use-after-free vulnerability located in the rtl2832 driver's remove function (rtl2832_remove) within the Windows kernel. This flaw could potentially be leveraged to trigger system instability or lead to memory corruption, requiring a kernel-level security update to address the lifetime management of the driver object.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68214

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68327

CVE-2026-68327 is a vulnerability identified in the Microsoft wanxl WAN driver component. The vulnerability relates to the handling of hardware reset sequences in relation to Base Address Register (BAR) mapping. Successful exploitation of this issue could potentially lead to undefined system behavior or stability issues within the network driver stack.

Affected products:

• wanxl

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68327

CVE-2026-68188

CVE-2026-68188 describes a use-after-free (UAF) vulnerability within the RFCOMM protocol implementation of the Bluetooth stack, specifically triggered during the set_termios operation.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68188

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68132

CVE-2026-68132 is a vulnerability addressed by Microsoft that involves a deadlock condition occurring during the emergency thaw process on frozen block devices within the Windows operating system.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68132

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68304

CVE-2026-68304 addresses a call trace warning in the brcmfmac wireless driver related to 802.1X-SHA256 authentication processing. While technical details are limited, the issue involves handling of authentication frames within the Broadcom wireless stack.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68304

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68098

CVE-2026-68098 is a vulnerability in the ksmbd kernel-mode SMB server component within Microsoft Windows. The issue involves improper handling of DACL (Discretionary Access Control List) deduplication during ACE (Access Control Entry) copying operations, which may lead to memory safety issues when processing malformed requests.

Affected products:

• ksmbd

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68098

Related in this roundup: CVE-2026-64578, CVE-2026-68097, CVE-2026-68130, CVE-2026-68099.

CVE-2026-68348

CVE-2026-68348 involves an issue in the ASoC (ALSA System on Chip) subsystem specifically related to the tas2781 audio amplifier driver, where firmware description string parsing is not properly bounded, potentially leading to memory corruption or related stability issues.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68348

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68195

CVE-2026-68195 describes a vulnerability in the mt76 driver for MediaTek WiFi chipsets, specifically affecting the mt7615 module. The vulnerability involves improper handling of TXRX_NOTIFY events on non-MMIO buses, requiring a patch to drop these notifications to maintain stability and security.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68195

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68419

CVE-2026-68419 is a vulnerability in the Linux kernel's irdma (RDMA) subsystem. The flaw specifically pertains to the rereg_mr function, which fails to properly validate that the memory region being re-registered is a valid memory region, potentially leading to unauthorized memory access or system instability.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68419

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68171

CVE-2026-68171 refers to a vulnerability in the Linux kernel for the arm64 architecture, specifically related to syscall handling. The flaw involves a synchronization issue where the saved x0 register may not correctly reflect updates made by a tracer during a system call, potentially leading to security boundary bypasses or incorrect syscall execution context.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68171

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-64523

CVE-2026-64523 is a vulnerability in the Microsoft net/handshake component involving the handling of long-lived file references during submission processes, which has been identified and addressed by Microsoft via the Security Update Guide.

Affected products:

• net/handshake

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64523

CVE-2026-64388

CVE-2026-64388 refers to a security update for the Microsoft SMB client component, specifically addressing improper handling of POSIX chown/chgrp operations when using SMB3 POSIX Extensions.

Affected products:

• SMB Client

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-64388

CVE-2025-37938

CVE-2025-37938 refers to a security vulnerability related to the tracing of event formats containing '%*p' sequences. The provided content is a placeholder index for a Microsoft Security Response Center advisory, and specific technical details regarding the vulnerability's impact, affected products, or exploitation vectors are not currently available within the source text.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-37938

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2026-68207, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-68207

CVE-2026-68207 involves an error in the Video4Linux2 (v4l2) device registration process within the Linux kernel, specifically related to improper cleanup during probe errors. This flaw could potentially lead to inconsistent system states or kernel-level instability upon initialization failure.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68207

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-50472, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-50472

A heap-based buffer overflow vulnerability in the Windows LUA File Virtualization (LUAFV) filter driver allows a locally authenticated attacker to escalate privileges to the level of the kernel or system.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50472

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-59132, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.

CVE-2026-56174

CVE-2026-56174 describes an elevation of privilege vulnerability in Windows Narrator Braille caused by an untrusted search path. An attacker with local access can exploit this vulnerability to execute code or perform operations with higher privileges than their account typically permits.

Affected products:

• Windows Narrator

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56174

CVE-2026-58650

CVE-2026-58650 describes an authorization bypass vulnerability in Visual Studio Code where a user-controlled key can be leveraged to bypass security features locally. An unauthorized attacker requires local access to exploit this flaw, which stems from improper handling of authorization keys.

Affected products:

• Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58650

Related in this roundup: CVE-2026-59113, CVE-2026-47285, CVE-2026-69320, CVE-2026-69278, CVE-2026-69306, CVE-2026-70336, CVE-2026-54981.

CVE-2026-65768

Microsoft Teams for Android contains a path traversal vulnerability that allows a remote, unauthorized attacker to execute arbitrary code on the target device via network-based exploitation.

Affected products:

• Teams

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65768

Related in this roundup: CVE-2026-65767.

CVE-2026-57105

CVE-2026-57105 is a spoofing vulnerability in Microsoft Office SharePoint caused by improper neutralization of input during web page generation. An authenticated attacker can exploit this cross-site scripting vulnerability to conduct spoofing attacks over the network.

Affected products:

• SharePoint

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57105

Related in this roundup: CVE-2026-70321, CVE-2026-70324, CVE-2026-70306.

CVE-2026-62829

CVE-2026-62829 is a cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server that allows an authenticated attacker to perform spoofing attacks over a network by injecting malicious input during web page generation.

Affected products:

• SharePoint Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62829

Related in this roundup: CVE-2026-62827, CVE-2026-62837, CVE-2026-63514, CVE-2026-63512, CVE-2026-63516, CVE-2026-63520, CVE-2026-64922, CVE-2026-65658, CVE-2026-65663, CVE-2026-65660, CVE-2026-65665, CVE-2026-70355, CVE-2026-64897, CVE-2026-64900, CVE-2026-64902, CVE-2026-64901, CVE-2026-64916, CVE-2026-64921, CVE-2026-66805, CVE-2026-66808, CVE-2026-70326, CVE-2026-58639, CVE-2026-62839, CVE-2026-62917.

CVE-2026-62827

CVE-2026-62827 is an elevation of privilege vulnerability in Microsoft SharePoint Server caused by improper authentication, allowing an authenticated attacker to elevate their privileges over a network.

Affected products:

• SharePoint Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62827

Related in this roundup: CVE-2026-62829, CVE-2026-62837, CVE-2026-63514, CVE-2026-63512, CVE-2026-63516, CVE-2026-63520, CVE-2026-64922, CVE-2026-65658, CVE-2026-65663, CVE-2026-65660, CVE-2026-65665, CVE-2026-70355, CVE-2026-64897, CVE-2026-64900, CVE-2026-64902, CVE-2026-64901, CVE-2026-64916, CVE-2026-64921, CVE-2026-66805, CVE-2026-66808, CVE-2026-70326, CVE-2026-58639, CVE-2026-62839, CVE-2026-62917.

CVE-2026-62837

CVE-2026-62837 describes a relative path traversal vulnerability in Microsoft SharePoint Server that allows an authenticated attacker to perform unauthorized information disclosure over the network.

Affected products:

• SharePoint Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62837

Related in this roundup: CVE-2026-62829, CVE-2026-62827, CVE-2026-63514, CVE-2026-63512, CVE-2026-63516, CVE-2026-63520, CVE-2026-64922, CVE-2026-65658, CVE-2026-65663, CVE-2026-65660, CVE-2026-65665, CVE-2026-70355, CVE-2026-64897, CVE-2026-64900, CVE-2026-64902, CVE-2026-64901, CVE-2026-64916, CVE-2026-64921, CVE-2026-66805, CVE-2026-66808, CVE-2026-70326, CVE-2026-58639, CVE-2026-62839, CVE-2026-62917.

CVE-2026-63514

CVE-2026-63514 is a remote code execution vulnerability in Microsoft SharePoint Server caused by improper deserialization of untrusted data. An authorized attacker can exploit this flaw over the network to execute arbitrary code within the context of the application.

Affected products:

• SharePoint Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63514

Related in this roundup: CVE-2026-62829, CVE-2026-62827, CVE-2026-62837, CVE-2026-63512, CVE-2026-63516, CVE-2026-63520, CVE-2026-64922, CVE-2026-65658, CVE-2026-65663, CVE-2026-65660, CVE-2026-65665, CVE-2026-70355, CVE-2026-64897, CVE-2026-64900, CVE-2026-64902, CVE-2026-64901, CVE-2026-64916, CVE-2026-64921, CVE-2026-66805, CVE-2026-66808, CVE-2026-70326, CVE-2026-58639, CVE-2026-62839, CVE-2026-62917.

CVE-2026-63512

CVE-2026-63512 is a security vulnerability in Microsoft SharePoint Server that results from incorrect authorization handling. An attacker who has obtained authorized access to the system can exploit this flaw to perform unauthorized tampering with data or configuration over a network, potentially undermining system integrity.

Affected products:

• SharePoint Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63512

Related in this roundup: CVE-2026-62829, CVE-2026-62827, CVE-2026-62837, CVE-2026-63514, CVE-2026-63516, CVE-2026-63520, CVE-2026-64922, CVE-2026-65658, CVE-2026-65663, CVE-2026-65660, CVE-2026-65665, CVE-2026-70355, CVE-2026-64897, CVE-2026-64900, CVE-2026-64902, CVE-2026-64901, CVE-2026-64916, CVE-2026-64921, CVE-2026-66805, CVE-2026-66808, CVE-2026-70326, CVE-2026-58639, CVE-2026-62839, CVE-2026-62917.

CVE-2026-63516

Microsoft SharePoint Server contains a vulnerability due to deserialization of untrusted data. An authorized attacker can leverage this flaw to perform spoofing attacks over a network.

Affected products:

• SharePoint Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63516

Related in this roundup: CVE-2026-62829, CVE-2026-62827, CVE-2026-62837, CVE-2026-63514, CVE-2026-63512, CVE-2026-63520, CVE-2026-64922, CVE-2026-65658, CVE-2026-65663, CVE-2026-65660, CVE-2026-65665, CVE-2026-70355, CVE-2026-64897, CVE-2026-64900, CVE-2026-64902, CVE-2026-64901, CVE-2026-64916, CVE-2026-64921, CVE-2026-66805, CVE-2026-66808, CVE-2026-70326, CVE-2026-58639, CVE-2026-62839, CVE-2026-62917.

CVE-2026-63520

CVE-2026-63520 is a remote code execution vulnerability in Microsoft SharePoint Server caused by improper input validation. An unauthenticated attacker can exploit this flaw over a network to execute arbitrary code on the affected server.

Affected products:

• SharePoint Server

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63520

Related in this roundup: CVE-2026-62829, CVE-2026-62827, CVE-2026-62837, CVE-2026-63514, CVE-2026-63512, CVE-2026-63516, CVE-2026-64922, CVE-2026-65658, CVE-2026-65663, CVE-2026-65660, CVE-2026-65665, CVE-2026-70355, CVE-2026-64897, CVE-2026-64900, CVE-2026-64902, CVE-2026-64901, CVE-2026-64916, CVE-2026-64921, CVE-2026-66805, CVE-2026-66808, CVE-2026-70326, CVE-2026-58639, CVE-2026-62839, CVE-2026-62917.

CVE-2026-40375

CVE-2026-40375 is an information disclosure vulnerability in Microsoft Dynamics Business Central resulting from a missing authorization check. An authenticated attacker on the network can leverage this flaw to access sensitive information without proper authorization.

Affected products:

• Dynamics Business Central

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40375

Related in this roundup: CVE-2024-21380.

CVE-2026-54113

CVE-2026-54113 is a denial of service vulnerability in the Windows Kernel due to improper resource allocation limits within the Remote Procedure Call (RPC) implementation. An unauthorized network-based attacker can exploit this flaw to exhaust system resources, leading to a crash or service disruption.

Affected products:

• Windows Kernel

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54113

Related in this roundup: CVE-2026-61930, CVE-2026-62737, CVE-2026-62708, CVE-2026-62749, CVE-2026-65773.

CVE-2026-54984

A heap-based buffer overflow vulnerability in the Windows Imaging Component allows an unauthorized local attacker to achieve remote code execution by processing specially crafted image files.

Affected products:

• Windows Imaging Component

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54984

Related in this roundup: CVE-2026-62740.

CVE-2026-49179

CVE-2026-49179 describes a command injection vulnerability in Windows Active Directory Domain Services that enables unauthorized network-based remote code execution. Attackers can leverage this flaw to execute arbitrary commands by sending specially crafted inputs to the affected directory service.

Affected products:

• Active Directory Domain Services

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49179

CVE-2026-58612

CVE-2026-58612 is a server-side request forgery (SSRF) vulnerability in Microsoft PowerShell Core that allows an unauthorized attacker to perform unauthorized network requests to disclose sensitive information.

Affected products:

• PowerShell Core

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58612

Related in this roundup: CVE-2026-70337.

CVE-2026-59113

CVE-2026-59113 describes a missing authorization vulnerability in Visual Studio Code that allows a remote, unauthenticated attacker to execute arbitrary code via the network.

Affected products:

• Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59113

Related in this roundup: CVE-2026-58650, CVE-2026-47285, CVE-2026-69320, CVE-2026-69278, CVE-2026-69306, CVE-2026-70336, CVE-2026-54981.

CVE-2026-47299

CVE-2026-47299 is an elevation of privilege vulnerability in the Azure Monitor Agent caused by improper neutralization of special elements used in a command (command injection). An authorized attacker can exploit this flaw over a network to elevate their privileges on the targeted system.

Affected products:

• Azure Monitor Agent

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47299

CVE-2026-47285

CVE-2026-47285 is a command injection vulnerability in Visual Studio Code that permits an unauthorized attacker to disclose sensitive information over the network due to improper neutralization of special command elements.

Affected products:

• Visual Studio Code

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47285

Related in this roundup: CVE-2026-58650, CVE-2026-59113, CVE-2026-69320, CVE-2026-69278, CVE-2026-69306, CVE-2026-70336, CVE-2026-54981.

CVE-2026-59124

Microsoft High Performance Computing (HPC) Pack is vulnerable to remote code execution due to improper deserialization of untrusted data, allowing an unauthorized attacker to execute arbitrary code over the network.

Affected products:

• High Performance Computing Pack

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59124

CVE-2026-59127

CVE-2026-59127 describes an elevation of privilege vulnerability in the Windows Installer service caused by an integer overflow or wraparound condition. A local attacker with low-level authorization can exploit this flaw to gain elevated privileges on the affected system.

Affected products:

• Windows Installer

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59127

Related in this roundup: CVE-2026-61925, CVE-2026-70344, CVE-2026-70345, CVE-2026-70346, CVE-2026-70347, CVE-2026-61938, CVE-2026-62768, CVE-2026-65774.

CVE-2026-59128

CVE-2026-59128 is an out-of-bounds read vulnerability in the Windows Encrypting File System (EFS). An authorized attacker with local access can exploit this flaw to disclose sensitive information, potentially bypassing security controls related to file encryption.

Affected products:

• Windows Encrypting File System

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59128

CVE-2026-59133

CVE-2026-59133 describes a vulnerability in Microsoft High Performance Computing (HPC) Pack that allows an authenticated attacker to perform a privilege escalation over the network due to the application executing with unnecessary elevated privileges.

Affected products:

• High Performance Computing (HPC) Pack

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59133

CVE-2026-59132

CVE-2026-59132 describes a denial of service vulnerability in the Windows TCP/IP stack. An unauthenticated attacker could trigger this vulnerability by sending specially crafted packets to a target system, resulting in a system crash or service disruption.

Affected products:

• Windows

Source: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59132

Related in this roundup: CVE-2026-68480, CVE-2026-64564, CVE-2026-54876, CVE-2026-68388, CVE-2026-68189, CVE-2026-68312, CVE-2026-68176, CVE-2026-68118, CVE-2026-68175, CVE-2026-68328, CVE-2026-68406, CVE-2026-68317, CVE-2026-68354, CVE-2026-68326, CVE-2026-68151, CVE-2026-68343, CVE-2026-68184, CVE-2026-68322, CVE-2026-68214, CVE-2026-68188, CVE-2026-68132, CVE-2026-68304, CVE-2026-68348, CVE-2026-68195, CVE-2026-68419, CVE-2026-68171, CVE-2025-37938, CVE-2026-68207, CVE-2026-50472, CVE-2026-61927, CVE-2026-61937, CVE-2026-61933, CVE-2026-61934, CVE-2026-61936, CVE-2026-62702, CVE-2026-62712, CVE-2026-62746, CVE-2026-62735, CVE-2026-62739, CVE-2026-62754, CVE-2026-62766, CVE-2026-62773, CVE-2026-62774, CVE-2026-62779, CVE-2026-62792, CVE-2026-62798, CVE-2026-62795, CVE-2026-62796, CVE-2026-62876, CVE-2026-62877, CVE-2026-65662, CVE-2026-65672, CVE-2026-65678, CVE-2026-65784, CVE-2026-70307, CVE-2026-42976, CVE-2026-6726, CVE-2026-61358, CVE-2026-61360, CVE-2026-61926, CVE-2026-61929, CVE-2026-62698, CVE-2026-62700, CVE-2026-62711, CVE-2026-62721, CVE-2026-62733, CVE-2026-62743, CVE-2026-62730, CVE-2026-62757, CVE-2026-62741, CVE-2026-62770, CVE-2026-62780, CVE-2026-62781, CVE-2026-62786, CVE-2026-62788, CVE-2026-62793, CVE-2026-62811, CVE-2026-62880, CVE-2026-62885, CVE-2026-62887, CVE-2026-62888, CVE-2026-65775, CVE-2026-65776, CVE-2026-65794, CVE-2026-56179.