CVE tracker

Microsoft Patch Tuesday

What Microsoft fixes on the second Tuesday of every month – straight from the official Security Update Guide: number of vulnerabilities, critical and already exploited ones (zero-days), affected products and the history of the last 24 months.

97vulnerabilities fixed (CVEs)

19of them critical

0exploited (zero-day)

2publicly disclosed

Tue, 10 Nov 2026Next Patch Tuesday
in 10 days and 0 hours

← Back to the month overview

All CVEs – Patch Tuesday March 2026

97 vulnerabilities

CVE-2026-32169CriticalCVSS 10.0Elevation of privilege

Azure Cloud Shell Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-21536CriticalCVSS 9.8Remote code execution

Microsoft Devices Pricing Program Remote Code Execution Vulnerability

Other · MSRC

CVE-2026-32191CriticalCVSS 9.8Remote code execution

Microsoft Bing Images Remote Code Execution Vulnerability

Browser (Edge) · MSRC

CVE-2026-32194CriticalCVSS 9.8Remote code execution

Microsoft Bing Images Remote Code Execution Vulnerability

Browser (Edge) · MSRC

CVE-2026-23658CriticalCVSS 8.6Elevation of privilege

Azure DevOps: msazure Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-23659CriticalCVSS 8.6Information disclosure

Azure Data Factory Information Disclosure Vulnerability

Azure · MSRC

CVE-2026-26125CriticalCVSS 8.6Elevation of privilege

Payment Orchestrator Service Elevation of Privilege Vulnerability

Other · MSRC

CVE-2026-26138CriticalCVSS 8.6Elevation of privilege

Microsoft Purview Elevation of Privilege Vulnerability

Microsoft Office · MSRC

CVE-2026-26139CriticalCVSS 8.6Elevation of privilege

Microsoft Purview Elevation of Privilege Vulnerability

Microsoft Office · MSRC

CVE-2026-26110CriticalCVSS 8.4Remote code execution

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office · KB5002838 · MSRC

CVE-2026-26113CriticalCVSS 8.4Remote code execution

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office · KB5002850 KB5002851 KB5002843 KB5002845 · MSRC

CVE-2026-26144CriticalCVSS 7.5Information disclosure

Microsoft Excel Information Disclosure Vulnerability

Microsoft Office · MSRC

CVE-2026-23651CriticalCVSS 6.7Elevation of privilege

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-26124CriticalCVSS 6.7Elevation of privilege

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-26120CriticalCVSS 6.5Tampering

Microsoft Bing Tampering Vulnerability

Apps · MSRC

CVE-2026-26122CriticalCVSS 6.5Information disclosure

Microsoft ACI Confidential Containers Information Disclosure Vulnerability

Azure · MSRC

CVE-2026-26136CriticalCVSS 6.5Information disclosure

Microsoft Copilot Information Disclosure Vulnerability

Other · MSRC

CVE-2026-24299CriticalCVSS 5.3Information disclosure

M365 Copilot Information Disclosure Vulnerability

Apps · MSRC

CVE-2026-26137CriticalElevation of privilege

Microsoft Exchange Elevation of Privilege Vulnerability

Server software (Exchange, SharePoint …) · MSRC

CVE-2026-20967ImportantCVSS 8.8Elevation of privilege

System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability

System Center and Defender · MSRC

CVE-2026-21262ImportantCVSS 8.8Publicly disclosedElevation of privilege

Microsoft SQL Server Elevation of Privilege Vulnerability

SQL Server · KB5077472 KB5077470 KB5077474 KB5077471 · MSRC

CVE-2026-23654ImportantCVSS 8.8Remote code execution

GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability

Open source software · MSRC

CVE-2026-23669ImportantCVSS 8.8Remote code execution

RPC Runtime Library Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5079466 KB5078752 KB5078766 KB5078737 · MSRC

CVE-2026-24283ImportantCVSS 8.8Elevation of privilege

Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability

Windows · KB5079466 KB5078740 KB5078736 KB5079473 · MSRC

CVE-2026-25177ImportantCVSS 8.8Elevation of privilege

Active Directory Domain Services Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5078752 KB5078766 KB5078737 KB5078885 · MSRC

CVE-2026-25188ImportantCVSS 8.8Elevation of privilege

Windows Telephony Service Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5079466 KB5078752 KB5078766 KB5078737 · MSRC

CVE-2026-26106ImportantCVSS 8.8Remote code execution

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Office · KB5002850 KB5002845 KB5002843 · MSRC

CVE-2026-26114ImportantCVSS 8.8Remote code execution

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Office · KB5002850 KB5002845 · MSRC

CVE-2026-26115ImportantCVSS 8.8Elevation of privilege

SQL Server Elevation of Privilege Vulnerability

SQL Server · KB5077468 KB5077472 KB5077474 KB5077471 · MSRC

CVE-2026-26116ImportantCVSS 8.8Elevation of privilege

SQL Server Elevation of Privilege Vulnerability

SQL Server · KB5077468 KB5077466 · MSRC

CVE-2026-26118ImportantCVSS 8.8Elevation of privilege

Azure MCP Server Tools Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-26109ImportantCVSS 8.4Remote code execution

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office · KB5002846 KB5002849 · MSRC

CVE-2026-26105ImportantCVSS 8.1Spoofing

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Office · KB5002850 KB5002845 KB5002843 · MSRC

CVE-2026-26148ImportantCVSS 8.1Elevation of privilege

Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-25172ImportantCVSS 8.0Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5079466 KB5078752 KB5078766 KB5078737 · MSRC

CVE-2026-25173ImportantCVSS 8.0Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5079466 KB5078752 KB5078766 KB5078737 · MSRC

CVE-2026-26111ImportantCVSS 8.0Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5078752 KB5078766 KB5078737 KB5078885 · MSRC

CVE-2026-23660ImportantCVSS 7.8Elevation of privilege

Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-23665ImportantCVSS 7.8Elevation of privilege

Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-23672ImportantCVSS 7.8Elevation of privilege

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5078766 KB5078737 KB5078752 KB5078885 · MSRC

CVE-2026-23673ImportantCVSS 7.8Elevation of privilege

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5079466 KB5078766 KB5078737 KB5078752 · MSRC

CVE-2026-24287ImportantCVSS 7.8Elevation of privilege

Windows Kernel Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5078766 KB5078737 KB5078885 KB5078752 · MSRC

CVE-2026-24289ImportantCVSS 7.8Elevation of privilege

Windows Kernel Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5079466 KB5078752 KB5078766 KB5078737 · MSRC

CVE-2026-24290ImportantCVSS 7.8Elevation of privilege

Windows Projected File System Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5079466 KB5078766 KB5078737 KB5078752 · MSRC

CVE-2026-24291ImportantCVSS 7.8Elevation of privilege

Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5078752 KB5078766 KB5078737 KB5078885 · MSRC

CVE-2026-24292ImportantCVSS 7.8Elevation of privilege

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5078752 KB5078766 KB5078737 KB5078885 · MSRC

CVE-2026-24293ImportantCVSS 7.8Elevation of privilege

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5079466 KB5078766 KB5078737 KB5078885 · MSRC

CVE-2026-24294ImportantCVSS 7.8Elevation of privilege

Windows SMB Server Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5078752 KB5078766 KB5078737 KB5078885 · MSRC

CVE-2026-25165ImportantCVSS 7.8Elevation of privilege

Performance Counters for Windows Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5079466 KB5078752 KB5078766 KB5078737 · MSRC

CVE-2026-25166ImportantCVSS 7.8Remote code execution

Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability

Developer tools (.NET, Visual Studio …) · MSRC

Sources

The tracker combines official, freely usable data sources – updated continuously:

NVD (NIST) – CVEs, rating (CVSS), affected products
CISA KEV – vulnerabilities confirmed by CISA as actively exploited
CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
FIRST EPSS – probability of exploitation
Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
PoC-in-GitHub – public proof-of-concept repositories
Metasploit (Rapid7) – modules of the Metasploit Framework
Exploit-DB (OffSec) – archive of public exploits (links only)
Patch days: official vendor pages (linked per vendor) (Vendor patch days)

Affected? We can help.

We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.

Get in touch RSS feed