CVE tracker

Microsoft Patch Tuesday

What Microsoft fixes on the second Tuesday of every month – straight from the official Security Update Guide: number of vulnerabilities, critical and already exploited ones (zero-days), affected products and the history of the last 24 months.

663vulnerabilities fixed (CVEs)

75of them critical

3exploited (zero-day)

1publicly disclosed

Tue, 10 Nov 2026Next Patch Tuesday
in 10 days and 0 hours

← Back to the month overview

All CVEs – Patch Tuesday July 2026

663 vulnerabilities

CVE-2026-58644CriticalCVSS 9.8Exploited (zero-day)Remote code execution

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft Office · KB5002880 KB5002874 KB5002873 · MSRC

CVE-2026-56155ImportantCVSS 7.8Exploited (zero-day)Elevation of privilege

Active Directory Federation Services Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099536 KB5099535 · MSRC

CVE-2026-56164ModerateCVSS 5.3Exploited (zero-day)Elevation of privilege

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Microsoft Office · KB5002891 KB5002883 KB5002882 · MSRC

CVE-2026-56191CriticalCVSS 10.0Tampering

Microsoft Exchange Online Tampering Vulnerability

Server software (Exchange, SharePoint …) · MSRC

CVE-2026-57106CriticalCVSS 10.0Elevation of privilege

Data Quality Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-58275CriticalCVSS 10.0Elevation of privilege

Azure DNS Elevation of Privilege Vulnerability

Microsoft Office · MSRC

CVE-2026-58630CriticalCVSS 10.0Elevation of privilege

Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-62825CriticalCVSS 10.0Elevation of privilege

Azure Key Vault Elevation of Privilege Vulnerability

Microsoft Office · MSRC

CVE-2026-66803CriticalCVSS 10.0Remote code execution

Azure Cosmos DB Remote Code Execution Vulnerability

Azure · MSRC

CVE-2026-45499CriticalCVSS 9.9Elevation of privilege

Azure OpenAI Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-50517CriticalCVSS 9.9Remote code execution

Microsoft M365 Copilot Remote Code Execution Vulnerability

Apps · MSRC

CVE-2026-54120CriticalCVSS 9.9Remote code execution

Microsoft Surface Remote Code Execution Vulnerability

Browser (Edge) · MSRC

CVE-2026-57092CriticalCVSS 9.9Elevation of privilege

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

CVE-2026-57100CriticalCVSS 9.9Elevation of privilege

Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-50518CriticalCVSS 9.8Remote code execution

Windows DHCP Server Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099536 KB5099535 · MSRC

CVE-2026-50522CriticalCVSS 9.8Remote code execution

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft Office · KB5002891 KB5002883 KB5002882 · MSRC

CVE-2026-54117CriticalCVSS 9.8Remote code execution

Microsoft SQL Server Remote Code Execution Vulnerability

SQL Server · KB5102333 KB5101346 · MSRC

CVE-2026-54118CriticalCVSS 9.8Remote code execution

Microsoft SQL Server Remote Code Execution Vulnerability

SQL Server · KB5102339 KB5102336 KB5102334 KB5102337 · MSRC

CVE-2026-55010CriticalCVSS 9.8Remote code execution

Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability

Other · MSRC

CVE-2026-55944CriticalCVSS 9.8Remote code execution

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

Microsoft Dynamics · MSRC

CVE-2026-56159CriticalCVSS 9.8Remote code execution

DHCP Server Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099536 KB5099535 · MSRC

CVE-2026-56165CriticalCVSS 9.8Remote code execution

Microsoft Account Remote Code Execution Vulnerability

Azure · MSRC

CVE-2026-56188CriticalCVSS 9.8Remote code execution

Windows Server Network driver Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

CVE-2026-50380CriticalCVSS 9.6Remote code execution

Windows GDI+ Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

CVE-2026-55008CriticalCVSS 9.6Spoofing

Microsoft Exchange Server Spoofing Vulnerability

Windows ESU (Extended Security Updates), Server software (Exchange, SharePoint …) · KB5103215 KB5103214 KB5103213 KB5103212 · MSRC

CVE-2026-41106CriticalCVSS 9.3Elevation of privilege

Microsoft 365 Copilot Elevation of Privilege Vulnerability

Apps · MSRC

CVE-2026-62835CriticalCVSS 9.3Information disclosure

Azure Portal Information Disclosure Vulnerability

Azure · MSRC

CVE-2026-55040CriticalCVSS 9.1Security feature bypass

Microsoft SharePoint Server Security Feature Bypass Vulnerability

Microsoft Office · KB5002891 KB5002883 KB5002882 · MSRC

CVE-2026-48564CriticalCVSS 8.8Remote code execution

DHCP Server Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099536 KB5099535 · MSRC

CVE-2026-50370CriticalCVSS 8.8Remote code execution

DHCP Server Service Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099536 KB5099535 · MSRC

CVE-2026-50382CriticalCVSS 8.8Remote code execution

DirectX Graphics Kernel Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

CVE-2026-50444CriticalCVSS 8.8Elevation of privilege

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099536 KB5099535 · MSRC

CVE-2026-50474CriticalCVSS 8.8Remote code execution

Remote Desktop Client Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

CVE-2026-54121CriticalCVSS 8.8Elevation of privilege

Active Directory Certificate Services Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099536 KB5099535 · MSRC

CVE-2026-54982CriticalCVSS 8.8Remote code execution

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

CVE-2026-54999CriticalCVSS 8.8Remote code execution

Windows TCP/IP Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

CVE-2026-57087CriticalCVSS 8.8Remote code execution

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

CVE-2026-57090CriticalCVSS 8.8Remote code execution

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

CVE-2026-57094CriticalCVSS 8.8Remote code execution

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

CVE-2026-58608CriticalCVSS 8.8Remote code execution

Windows Print Spooler Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

CVE-2026-56167CriticalCVSS 8.5Elevation of privilege

Azure AI Search Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2026-54128CriticalCVSS 8.4Remote code execution

Windows DHCP Client Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

CVE-2026-54992CriticalCVSS 8.4Remote code execution

Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

CVE-2026-55045CriticalCVSS 8.4Remote code execution

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office · KB5002891 KB5002892 KB5002883 KB5002885 · MSRC

CVE-2026-50680CriticalCVSS 8.2Elevation of privilege

Windows Hyper-V Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

CVE-2026-49164CriticalCVSS 8.1Remote code execution

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

CVE-2026-50694CriticalCVSS 8.1Remote code execution

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

CVE-2026-54995CriticalCVSS 8.1Remote code execution

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

CVE-2026-35425CriticalCVSS 8.0Remote code execution

Azure API Management (APIM) Remote Code Execution Vulnerability

Azure · MSRC

CVE-2026-42982CriticalCVSS 7.8Elevation of privilege

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5099538 KB5099540 KB5099539 KB5099536 · MSRC

Sources

The tracker combines official, freely usable data sources – updated continuously:

NVD (NIST) – CVEs, rating (CVSS), affected products
CISA KEV – vulnerabilities confirmed by CISA as actively exploited
CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
FIRST EPSS – probability of exploitation
Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
PoC-in-GitHub – public proof-of-concept repositories
Metasploit (Rapid7) – modules of the Metasploit Framework
Exploit-DB (OffSec) – archive of public exploits (links only)
Patch days: official vendor pages (linked per vendor) (Vendor patch days)

Affected? We can help.

We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.

Get in touch RSS feed