CVE tracker

Microsoft Patch Tuesday

What Microsoft fixes on the second Tuesday of every month – straight from the official Security Update Guide: number of vulnerabilities, critical and already exploited ones (zero-days), affected products and the history of the last 24 months.

124vulnerabilities fixed (CVEs)

17of them critical

2exploited (zero-day)

1publicly disclosed

Tue, 10 Nov 2026Next Patch Tuesday
in 10 days and 0 hours

← Back to the month overview

All CVEs – Patch Tuesday January 2026

124 vulnerabilities

CVE-2026-21509ImportantCVSS 7.8Exploited (zero-day)Security feature bypass

Microsoft Office Security Feature Bypass Vulnerability

Microsoft Office · KB5002713 · MSRC

CVE-2026-20805ImportantCVSS 5.5Exploited (zero-day)Information disclosure

Desktop Window Manager Information Disclosure Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-24304CriticalCVSS 9.9Elevation of privilege

Azure Resource Manager Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-24306CriticalCVSS 9.8Elevation of privilege

Azure Front Door Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-21264CriticalCVSS 9.3Spoofing

Microsoft Account Spoofing Vulnerability

Azure · MSRC

CVE-2026-24305CriticalCVSS 9.3Elevation of privilege

Azure Entra ID Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-24307CriticalCVSS 9.3Information disclosure

M365 Copilot Information Disclosure Vulnerability

Apps · MSRC

CVE-2026-20944CriticalCVSS 8.4Remote code execution

Microsoft Word Remote Code Execution Vulnerability

Microsoft Office · MSRC

CVE-2026-20952CriticalCVSS 8.4Remote code execution

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office · KB5002826 · MSRC

CVE-2026-20953CriticalCVSS 8.4Remote code execution

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office · KB5002826 · MSRC

CVE-2026-21227CriticalCVSS 8.2Elevation of privilege

Azure Logic Apps Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-20822CriticalCVSS 7.8Elevation of privilege

Windows Graphics Component Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20955CriticalCVSS 7.8Remote code execution

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office · KB5002824 · MSRC

CVE-2026-20957CriticalCVSS 7.8Remote code execution

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office · KB5002824 KB5002831 · MSRC

CVE-2026-20854CriticalCVSS 7.5Remote code execution

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

Windows · KB5073379 KB5074109 · MSRC

CVE-2026-21520CriticalCVSS 7.5Information disclosure

Copilot Studio Information Disclosure Vulnerability

Microsoft Office · MSRC

CVE-2026-21521CriticalCVSS 7.4Information disclosure

Word Copilot Information Disclosure Vulnerability

Apps · MSRC

CVE-2026-21524CriticalCVSS 7.4Information disclosure

Azure Data Explorer Information Disclosure Vulnerability

Azure · MSRC

CVE-2026-20876CriticalCVSS 6.7Elevation of privilege

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Windows · KB5073379 KB5074109 KB5073455 KB5073450 · MSRC

CVE-2026-20963ImportantCVSS 9.8Remote code execution

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft Office · KB5002828 KB5002825 KB5002822 · MSRC

CVE-2026-20868ImportantCVSS 8.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20947ImportantCVSS 8.8Remote code execution

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Office · KB5002828 KB5002827 KB5002825 KB5002823 · MSRC

CVE-2026-20856ImportantCVSS 8.1Remote code execution

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20931ImportantCVSS 8.0Elevation of privilege

Windows Telephony Service Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20960ImportantCVSS 8.0Remote code execution

PowerApps Desktop Client Remote Code Execution Vulnerability

Azure · MSRC

CVE-2026-20809ImportantCVSS 7.8Elevation of privilege

Windows Kernel Memory Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20810ImportantCVSS 7.8Elevation of privilege

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073724 · MSRC

CVE-2026-20811ImportantCVSS 7.8Elevation of privilege

Win32k Elevation of Privilege Vulnerability

Windows · KB5073457 KB5073379 KB5074109 KB5073455 · MSRC

CVE-2026-20816ImportantCVSS 7.8Elevation of privilege

Windows Installer Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20817ImportantCVSS 7.8Elevation of privilege

Windows Error Reporting Service Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073457 KB5073724 KB5073379 KB5074109 · MSRC

CVE-2026-20820ImportantCVSS 7.8Elevation of privilege

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073457 KB5073723 KB5073724 KB5073379 · MSRC

CVE-2026-20826ImportantCVSS 7.8Information disclosure

Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20831ImportantCVSS 7.8Elevation of privilege

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20832ImportantCVSS 7.8Elevation of privilege

Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20837ImportantCVSS 7.8Remote code execution

Windows Media Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20840ImportantCVSS 7.8Remote code execution

Windows NTFS Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20843ImportantCVSS 7.8Elevation of privilege

Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20857ImportantCVSS 7.8Elevation of privilege

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5074109 KB5073723 KB5073457 KB5073724 · MSRC

CVE-2026-20858ImportantCVSS 7.8Elevation of privilege

Windows Management Services Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20859ImportantCVSS 7.8Elevation of privilege

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Windows · KB5073379 KB5074109 · MSRC

CVE-2026-20860ImportantCVSS 7.8Elevation of privilege

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20861ImportantCVSS 7.8Elevation of privilege

Windows Management Services Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20864ImportantCVSS 7.8Elevation of privilege

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20865ImportantCVSS 7.8Elevation of privilege

Windows Management Services Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20866ImportantCVSS 7.8Elevation of privilege

Windows Management Services Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20867ImportantCVSS 7.8Elevation of privilege

Windows Management Services Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20870ImportantCVSS 7.8Elevation of privilege

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Windows · KB5073379 KB5074109 · MSRC

CVE-2026-20871ImportantCVSS 7.8Elevation of privilege

Desktop Window Manager Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073457 KB5073724 KB5073379 KB5074109 · MSRC

CVE-2026-20873ImportantCVSS 7.8Elevation of privilege

Windows Management Services Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

CVE-2026-20874ImportantCVSS 7.8Elevation of privilege

Windows Management Services Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5073723 KB5073457 KB5073724 KB5073379 · MSRC

Sources

The tracker combines official, freely usable data sources – updated continuously:

NVD (NIST) – CVEs, rating (CVSS), affected products
CISA KEV – vulnerabilities confirmed by CISA as actively exploited
CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
FIRST EPSS – probability of exploitation
Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
PoC-in-GitHub – public proof-of-concept repositories
Metasploit (Rapid7) – modules of the Metasploit Framework
Exploit-DB (OffSec) – archive of public exploits (links only)
Patch days: official vendor pages (linked per vendor) (Vendor patch days)

Affected? We can help.

We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.

Get in touch RSS feed