MSRC update 2026-11-13T08:40:40Z
This commit is contained in:
Vulnerability Bot committed
1 parent
39c686cdc7
commit
6014f0fded
34 files changed
+34
-34
No files matched your search
@@ -1 +1 @@
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-173-microsoft-cves\">This release consists of the following 173 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows Boot Loader</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-0390\">CVE-2026-0390</a></td>\n<td>6.7</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows COM</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-20806\">CVE-2026-20806</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Recovery Environment Agent</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-20928\">CVE-2026-20928</a></td>\n<td>4.6</td>\n<td>CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Management Services</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-20930\">CVE-2026-20930</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office SharePoint</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-20945\">CVE-2026-20945</a></td>\n<td>4.6</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure IOT Central</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-21515\">CVE-2026-21515</a></td>\n<td>9.9</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>GitHub Copilot and Visual Studio Code</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23653\">CVE-2026-23653</a></td>\n<td>5.7</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Word</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23657\">CVE-2026-23657</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET Framework</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23666\">CVE-2026-23666</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Virtualization-Based Security (VBS) Enclave</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23670\">CVE-2026-23670</a></td>\n<td>5.7</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Partner Center</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-24303\">CVE-2026-24303</a></td>\n<td>9.6</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Applocker Filter Driver (applockerfltr.sys)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-25184\">CVE-2026-25184</a></td>\n<td>7.0</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft PowerShell</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-26143\">CVE-2026-26143</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Power Apps</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-26149\">CVE-2026-26149</a></td>\n<td>9.0</td>\n<td>CVSS:3.1/AV:N/ACLine truncated
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-173-microsoft-cves\">This release consists of the following 173 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows Boot Loader</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-0390\">CVE-2026-0390</a></td>\n<td>6.7</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows COM</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-20806\">CVE-2026-20806</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Recovery Environment Agent</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-20928\">CVE-2026-20928</a></td>\n<td>4.6</td>\n<td>CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Management Services</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-20930\">CVE-2026-20930</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office SharePoint</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-20945\">CVE-2026-20945</a></td>\n<td>4.6</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure IOT Central</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-21515\">CVE-2026-21515</a></td>\n<td>9.9</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>GitHub Copilot and Visual Studio Code</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23653\">CVE-2026-23653</a></td>\n<td>5.7</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Word</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23657\">CVE-2026-23657</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET Framework</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23666\">CVE-2026-23666</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Virtualization-Based Security (VBS) Enclave</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23670\">CVE-2026-23670</a></td>\n<td>5.7</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Partner Center</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-24303\">CVE-2026-24303</a></td>\n<td>9.6</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Applocker Filter Driver (applockerfltr.sys)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-25184\">CVE-2026-25184</a></td>\n<td>7.0</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft PowerShell</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-26143\">CVE-2026-26143</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Power Apps</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-26149\">CVE-2026-26149</a></td>\n<td>9.0</td>\n<td>CVSS:3.1/AV:N/ACLine truncated
|
||||
@@ -1 +1 @@
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-457-microsoft-cves\">This release consists of 457 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Product Family</th>\n<th>Updates per Product/Version</th>\n<th>Vulnerabilities Addressed</th>\n<th>Distinct Updates</th>\n<th>Type of Update</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Azure</td>\n<td>1</td>\n<td>29</td>\n<td>15</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Defender</td>\n<td>1</td>\n<td>2</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Developer Tools</td>\n<td>1</td>\n<td>27</td>\n<td>36</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Edge</td>\n<td>1</td>\n<td>16</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Exchange Server</td>\n<td>1</td>\n<td>8</td>\n<td>4</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Office</td>\n<td>1</td>\n<td>99</td>\n<td>11</td>\n<td>Cumulative (except 2016)</td>\n</tr>\n<tr>\n<td>Office 2016</td>\n<td>1</td>\n<td>99</td>\n<td>18</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Other</td>\n<td>1</td>\n<td>9</td>\n<td>4</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>SharePoint Server</td>\n<td>1</td>\n<td>30</td>\n<td>3</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Windows</td>\n<td>1</td>\n<td>240</td>\n<td>32</td>\n<td>Cumulative</td>\n</tr>\n</tbody>\n</table>\n<h3 id=\"notable-cves\">Notable CVEs</h3>\n<table>\n<thead>\n<tr>\n<th>CVE ID</th>\n<th>Title</th>\n<th>Notable Item</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62832\">CVE-2026-62832</a></td>\n<td>Windows User Profile Service Elevation of Privilege Vulnerability</td>\n<td>Publicly Known</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68820\">CVE-2026-68820</a></td>\n<td>Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69414\">CVE-2026-69414</a></td>\n<td>Microsoft Defender Elevation of Privilege Vulnerability</td>\n<td>Publicly Known</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-2-non-microsoft-cves-listed-and-350-chrome-cves\">We are republishing 2 non-Microsoft CVEs (listed) and 350 Chrome CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>CNA</th>\n<th>Tag</th>\n<th>CVE</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>MITRE</td>\n<td>Windows TPM</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-6726\">CVE-2026-6726</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>MITRE</td>\n<td>Windows TPM</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-6727\">CVE-2026-6727</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>October 31, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience\">You asked, we delivered: Introducing new features for an improved security experience</a></td>\n</tr>\n<tr>\n<td>October 28, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315\">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td>\n</tr>\n<tr>\n<td>October 22, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td>\n</tr>\n<tr>\n<td>November 12, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CSAF-Blog\">Toward greater transparency: Publishing machine-readable CSAF files</a></td>\n</tr>\n<tr>\n<td>June 27, 2024</td>\n<td><a href=\"https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/\">Toward greater transparency: Unveiling Cloud Service CVEs</a></td>\n</tr>\n<tr>\n<td>April 9, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CWE-Blog\">Toward greater transparency: Security Update Guide now shares CWEs for CVEs</a></td>\n</tr>\n<tr>\n<td>January 6, 2023</td>\n<td><a href=\"https://msrc.microsoft.com/blog/2023/01/publishing-cbl-mariner-cves-on-the-security-update-guide-cvrf-api/\">Publishing CBL-Mariner CVEs on the Security Update Guide CVRF API</a></td>\n</tr>\n<tr>\n<td>January 11, 2022</td>\n<td><a href=\"https://aka.ms/SUGNotificationProfile\">Coming Soon: New Security Update Guide Notification System</a></td>\n</tr>\n<tr>\n<td>February 9, 2021</td>\n<td><a href=\"https://msrc-blog.mLine truncated
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-457-microsoft-cves\">This release consists of 457 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Product Family</th>\n<th>Updates per Product/Version</th>\n<th>Vulnerabilities Addressed</th>\n<th>Distinct Updates</th>\n<th>Type of Update</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Azure</td>\n<td>1</td>\n<td>29</td>\n<td>15</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Defender</td>\n<td>1</td>\n<td>2</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Developer Tools</td>\n<td>1</td>\n<td>27</td>\n<td>36</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Edge</td>\n<td>1</td>\n<td>16</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Exchange Server</td>\n<td>1</td>\n<td>8</td>\n<td>4</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Office</td>\n<td>1</td>\n<td>99</td>\n<td>11</td>\n<td>Cumulative (except 2016)</td>\n</tr>\n<tr>\n<td>Office 2016</td>\n<td>1</td>\n<td>99</td>\n<td>18</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Other</td>\n<td>1</td>\n<td>9</td>\n<td>4</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>SharePoint Server</td>\n<td>1</td>\n<td>30</td>\n<td>3</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Windows</td>\n<td>1</td>\n<td>240</td>\n<td>32</td>\n<td>Cumulative</td>\n</tr>\n</tbody>\n</table>\n<h3 id=\"notable-cves\">Notable CVEs</h3>\n<table>\n<thead>\n<tr>\n<th>CVE ID</th>\n<th>Title</th>\n<th>Notable Item</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62832\">CVE-2026-62832</a></td>\n<td>Windows User Profile Service Elevation of Privilege Vulnerability</td>\n<td>Publicly Known</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68820\">CVE-2026-68820</a></td>\n<td>Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69414\">CVE-2026-69414</a></td>\n<td>Microsoft Defender Elevation of Privilege Vulnerability</td>\n<td>Publicly Known</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-2-non-microsoft-cves-listed-and-350-chrome-cves\">We are republishing 2 non-Microsoft CVEs (listed) and 350 Chrome CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>CNA</th>\n<th>Tag</th>\n<th>CVE</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>MITRE</td>\n<td>Windows TPM</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-6726\">CVE-2026-6726</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>MITRE</td>\n<td>Windows TPM</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-6727\">CVE-2026-6727</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>October 31, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience\">You asked, we delivered: Introducing new features for an improved security experience</a></td>\n</tr>\n<tr>\n<td>October 28, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315\">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td>\n</tr>\n<tr>\n<td>October 22, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td>\n</tr>\n<tr>\n<td>November 12, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CSAF-Blog\">Toward greater transparency: Publishing machine-readable CSAF files</a></td>\n</tr>\n<tr>\n<td>June 27, 2024</td>\n<td><a href=\"https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/\">Toward greater transparency: Unveiling Cloud Service CVEs</a></td>\n</tr>\n<tr>\n<td>April 9, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CWE-Blog\">Toward greater transparency: Security Update Guide now shares CWEs for CVEs</a></td>\n</tr>\n<tr>\n<td>January 6, 2023</td>\n<td><a href=\"https://msrc.microsoft.com/blog/2023/01/publishing-cbl-mariner-cves-on-the-security-update-guide-cvrf-api/\">Publishing CBL-Mariner CVEs on the Security Update Guide CVRF API</a></td>\n</tr>\n<tr>\n<td>January 11, 2022</td>\n<td><a href=\"https://aka.ms/SUGNotificationProfile\">Coming Soon: New Security Update Guide Notification System</a></td>\n</tr>\n<tr>\n<td>February 9, 2021</td>\n<td><a href=\"https://msrc-blog.mLine truncated
|
||||
@@ -1 +1 @@
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-220-microsoft-cves\">This release consists of the following 220 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Nuance PowerScribe</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-26142\">CVE-2026-26142</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Bot Service</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32174\">CVE-2026-32174</a></td>\n<td>7.7</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Azure Kubernetes Service</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32193\">CVE-2026-32193</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32208\">CVE-2026-32208</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office SharePoint</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33113\">CVE-2026-33113</a></td>\n<td>5.4</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Azure Attestation service and Device Health Attestation Service</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33828\">CVE-2026-33828</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Ancillary Function Driver for WinSock</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-34335\">CVE-2026-34335</a></td>\n<td>7.0</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics 365 (on-premises)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-40371\">CVE-2026-40371</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Visual Studio Code</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-40376\">CVE-2026-40376</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Universal Disk Format File System Driver (UDFS)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-40404\">CVE-2026-40404</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Universal Disk Format File System Driver (UDFS)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-40409\">CVE-2026-40409</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Kinect</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-41092\">CVE-2026-41092</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Stack Edge</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-41098\">CVE-2026-41098</a></td>\n<td>8.4</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Windows DNS</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-Line truncated
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-220-microsoft-cves\">This release consists of the following 220 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Nuance PowerScribe</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-26142\">CVE-2026-26142</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Bot Service</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32174\">CVE-2026-32174</a></td>\n<td>7.7</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Azure Kubernetes Service</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32193\">CVE-2026-32193</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32208\">CVE-2026-32208</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office SharePoint</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33113\">CVE-2026-33113</a></td>\n<td>5.4</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Azure Attestation service and Device Health Attestation Service</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33828\">CVE-2026-33828</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Ancillary Function Driver for WinSock</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-34335\">CVE-2026-34335</a></td>\n<td>7.0</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics 365 (on-premises)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-40371\">CVE-2026-40371</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Visual Studio Code</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-40376\">CVE-2026-40376</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Universal Disk Format File System Driver (UDFS)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-40404\">CVE-2026-40404</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Universal Disk Format File System Driver (UDFS)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-40409\">CVE-2026-40409</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Kinect</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-41092\">CVE-2026-41092</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Stack Edge</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-41098\">CVE-2026-41098</a></td>\n<td>8.4</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Windows DNS</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-Line truncated
|
||||
@@ -1 +1 @@
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-97-microsoft-cves\">This release consists of the following 97 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Microsoft Edge for Android</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-0385\">CVE-2026-0385</a></td>\n<td>5.0</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C</td>\n<td></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>System Center Operations Manager</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-20967\">CVE-2026-20967</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-21262\">CVE-2026-21262</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Devices Pricing Program</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-21536\">CVE-2026-21536</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Compute Gallery</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23651\">CVE-2026-23651</a></td>\n<td>6.7</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>GitHub Repo: zero-shot-scfoundation</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23654\">CVE-2026-23654</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows App Installer</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23656\">CVE-2026-23656</a></td>\n<td>5.9</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure DevOps</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23658\">CVE-2026-23658</a></td>\n<td>8.6</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Data Factory</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23659\">CVE-2026-23659</a></td>\n<td>8.6</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Portal Windows Admin Center</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23660\">CVE-2026-23660</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure IoT Explorer</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23661\">CVE-2026-23661</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure IoT Explorer</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23662\">CVE-2026-23662</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure IoT Explorer</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23664\">CVE-2026-23664</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Linux Virtual Machines</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23665\">CVE-2026-23665</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>ExpLine truncated
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-97-microsoft-cves\">This release consists of the following 97 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Microsoft Edge for Android</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-0385\">CVE-2026-0385</a></td>\n<td>5.0</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C</td>\n<td></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>System Center Operations Manager</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-20967\">CVE-2026-20967</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-21262\">CVE-2026-21262</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Devices Pricing Program</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-21536\">CVE-2026-21536</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Compute Gallery</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23651\">CVE-2026-23651</a></td>\n<td>6.7</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>GitHub Repo: zero-shot-scfoundation</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23654\">CVE-2026-23654</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows App Installer</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23656\">CVE-2026-23656</a></td>\n<td>5.9</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure DevOps</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23658\">CVE-2026-23658</a></td>\n<td>8.6</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Data Factory</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23659\">CVE-2026-23659</a></td>\n<td>8.6</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Portal Windows Admin Center</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23660\">CVE-2026-23660</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure IoT Explorer</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23661\">CVE-2026-23661</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure IoT Explorer</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23662\">CVE-2026-23662</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure IoT Explorer</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23664\">CVE-2026-23664</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Linux Virtual Machines</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23665\">CVE-2026-23665</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>ExpLine truncated
|
||||
@@ -1 +1 @@
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-161-microsoft-cves\">This release consists of the following 161 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows Rich Text Edit</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-21530\">CVE-2026-21530</a></td>\n<td>6.7</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Power Pages</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23652\">CVE-2026-23652</a></td>\n<td>10.0</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Entra ID</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23663\">CVE-2026-23663</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>M365 Copilot</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-26129\">CVE-2026-26129</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Compute Gallery</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-26147\">CVE-2026-26147</a></td>\n<td>7.7</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>M365 Copilot</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-26164\">CVE-2026-26164</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Native WiFi Miniport Driver</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32161\">CVE-2026-32161</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Rich Text Edit Control</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32170\">CVE-2026-32170</a></td>\n<td>6.7</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32175\">CVE-2026-32175</a></td>\n<td>4.3</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32177\">CVE-2026-32177</a></td>\n<td>7.3</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Teams</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32185\">CVE-2026-32185</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Monitor Agent</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32204\">CVE-2026-32204</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Machine Learning</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32207\">CVE-2026-32207</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Filtering Platform (WFP)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32209\">CVE-2026-32209</a></td>\n<td>4.4</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure MLine truncated
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-161-microsoft-cves\">This release consists of the following 161 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows Rich Text Edit</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-21530\">CVE-2026-21530</a></td>\n<td>6.7</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Power Pages</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23652\">CVE-2026-23652</a></td>\n<td>10.0</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Entra ID</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-23663\">CVE-2026-23663</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>M365 Copilot</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-26129\">CVE-2026-26129</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Compute Gallery</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-26147\">CVE-2026-26147</a></td>\n<td>7.7</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>N/A</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>M365 Copilot</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-26164\">CVE-2026-26164</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Native WiFi Miniport Driver</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32161\">CVE-2026-32161</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Rich Text Edit Control</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32170\">CVE-2026-32170</a></td>\n<td>6.7</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32175\">CVE-2026-32175</a></td>\n<td>4.3</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32177\">CVE-2026-32177</a></td>\n<td>7.3</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Teams</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32185\">CVE-2026-32185</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Monitor Agent</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32204\">CVE-2026-32204</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Machine Learning</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32207\">CVE-2026-32207</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Filtering Platform (WFP)</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32209\">CVE-2026-32209</a></td>\n<td>4.4</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure MLine truncated
|
||||
@@ -1 +1 @@
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-1094-microsoft-cves\">This release consists of 1094 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Product Family</th>\n<th>Updates per Product/Version</th>\n<th>Vulnerabilities Addressed</th>\n<th>Distinct Updates</th>\n<th>Type of Update</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Azure</td>\n<td>1</td>\n<td>20</td>\n<td></td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Defender</td>\n<td>1</td>\n<td>1</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Developer Tools</td>\n<td>1</td>\n<td>53</td>\n<td>28</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Exchange Server</td>\n<td>1</td>\n<td>9</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Office</td>\n<td>1</td>\n<td>174</td>\n<td>7</td>\n<td>Cumulative (except 2016)</td>\n</tr>\n<tr>\n<td>Other</td>\n<td>1</td>\n<td>25</td>\n<td></td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td>1</td>\n<td>59</td>\n<td>13</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SharePoint Server</td>\n<td>1</td>\n<td>27</td>\n<td>3</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Windows</td>\n<td>1</td>\n<td>726</td>\n<td></td>\n<td>Cumulative</td>\n</tr>\n</tbody>\n</table>\n<h3 id=\"notable-cves\">Notable CVEs</h3>\n<table>\n<thead>\n<tr>\n<th>CVE ID</th>\n<th>Title</th>\n<th>Notable Item</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124194\">CVE-2026-124194</a></td>\n<td>Microsoft Outlook Spoofing Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-165-non-microsoft-cve-chrome-cves-not-listed\">We are republishing 165 non-Microsoft CVE (Chrome CVEs not listed):</h2>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Date</td>\n<td>Blog Post</td>\n</tr>\n<tr>\n<td>-----</td>\n<td>-----</td>\n</tr>\n<tr>\n<td>October 13, 2026</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2026/10/using-risk-cohorts-to-prioritize-security-updates\">Using risk cohorts to prioritize security updates</a></td>\n</tr>\n<tr>\n<td>October 31, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience\">You asked, we delivered: Introducing new features for an improved security experience</a></td>\n</tr>\n<tr>\n<td>October 28, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315\">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td>\n</tr>\n<tr>\n<td>October 22, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td>\n</tr>\n<tr>\n<td>November 12, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CSAF-Blog\">Toward greater transparency: Publishing machine-readable CSAF files</a></td>\n</tr>\n<tr>\n<td>June 27, 2024</td>\n<td><a href=\"https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/\">Toward greater transparency: Unveiling Cloud Service CVEs</a></td>\n</tr>\n<tr>\n<td>April 9, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CWE-Blog\">Toward greater transparency: Security Update Guide now shares CWEs for CVEs</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-resources\">Relevant Resources</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A list of the latest servicing stack updates for each operating system can be found in <a href=\"https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001\Line truncated
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-1094-microsoft-cves\">This release consists of 1094 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Product Family</th>\n<th>Updates per Product/Version</th>\n<th>Vulnerabilities Addressed</th>\n<th>Distinct Updates</th>\n<th>Type of Update</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Azure</td>\n<td>1</td>\n<td>20</td>\n<td></td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Defender</td>\n<td>1</td>\n<td>1</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Developer Tools</td>\n<td>1</td>\n<td>53</td>\n<td>28</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Exchange Server</td>\n<td>1</td>\n<td>9</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Office</td>\n<td>1</td>\n<td>174</td>\n<td>7</td>\n<td>Cumulative (except 2016)</td>\n</tr>\n<tr>\n<td>Other</td>\n<td>1</td>\n<td>25</td>\n<td></td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td>1</td>\n<td>59</td>\n<td>13</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SharePoint Server</td>\n<td>1</td>\n<td>27</td>\n<td>3</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Windows</td>\n<td>1</td>\n<td>726</td>\n<td></td>\n<td>Cumulative</td>\n</tr>\n</tbody>\n</table>\n<h3 id=\"notable-cves\">Notable CVEs</h3>\n<table>\n<thead>\n<tr>\n<th>CVE ID</th>\n<th>Title</th>\n<th>Notable Item</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-124194\">CVE-2026-124194</a></td>\n<td>Microsoft Outlook Spoofing Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-165-non-microsoft-cve-chrome-cves-not-listed\">We are republishing 165 non-Microsoft CVE (Chrome CVEs not listed):</h2>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Date</td>\n<td>Blog Post</td>\n</tr>\n<tr>\n<td>-----</td>\n<td>-----</td>\n</tr>\n<tr>\n<td>October 13, 2026</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2026/10/using-risk-cohorts-to-prioritize-security-updates\">Using risk cohorts to prioritize security updates</a></td>\n</tr>\n<tr>\n<td>October 31, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience\">You asked, we delivered: Introducing new features for an improved security experience</a></td>\n</tr>\n<tr>\n<td>October 28, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315\">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td>\n</tr>\n<tr>\n<td>October 22, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td>\n</tr>\n<tr>\n<td>November 12, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CSAF-Blog\">Toward greater transparency: Publishing machine-readable CSAF files</a></td>\n</tr>\n<tr>\n<td>June 27, 2024</td>\n<td><a href=\"https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/\">Toward greater transparency: Unveiling Cloud Service CVEs</a></td>\n</tr>\n<tr>\n<td>April 9, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CWE-Blog\">Toward greater transparency: Security Update Guide now shares CWEs for CVEs</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-resources\">Relevant Resources</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A list of the latest servicing stack updates for each operating system can be found in <a href=\"https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001\Line truncated
|
||||
@@ -1 +1 @@
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-1474-microsoft-cves\">This release consists of the following 1474 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Product Family</th>\n<th style=\"text-align: right;\">Vulnerabilities Addressed</th>\n<th style=\"text-align: right;\">Distinct Updates</th>\n<th>Update Type</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows</td>\n<td style=\"text-align: right;\">1,105</td>\n<td style=\"text-align: right;\">39</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Office</td>\n<td style=\"text-align: right;\">164</td>\n<td style=\"text-align: right;\">11</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SharePoint Server</td>\n<td style=\"text-align: right;\">37</td>\n<td style=\"text-align: right;\">1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td style=\"text-align: right;\">22</td>\n<td style=\"text-align: right;\">8</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Exchange Server</td>\n<td style=\"text-align: right;\">7</td>\n<td style=\"text-align: right;\">8</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Developer Tools (Dev Div)</td>\n<td style=\"text-align: right;\">65</td>\n<td style=\"text-align: right;\">103</td>\n<td>Mixed</td>\n</tr>\n<tr>\n<td>Azure</td>\n<td style=\"text-align: right;\">15</td>\n<td style=\"text-align: right;\">20</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Defender</td>\n<td style=\"text-align: right;\">4</td>\n<td style=\"text-align: right;\">3</td>\n<td>Automatic</td>\n</tr>\n<tr>\n<td>Edge</td>\n<td style=\"text-align: right;\">0</td>\n<td style=\"text-align: right;\">1</td>\n<td>Automatic</td>\n</tr>\n<tr>\n<td>Other</td>\n<td style=\"text-align: right;\">35</td>\n<td style=\"text-align: right;\">33</td>\n<td>Individual</td>\n</tr>\n</tbody>\n</table>\n<h3 id=\"notable-cves\">Notable CVEs</h3>\n<table>\n<thead>\n<tr>\n<th>CVE ID</th>\n<th>Title</th>\n<th>Notable Item</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951\">CVE-2026-96951</a></td>\n<td>Windows Shell Security Feature Bypass Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108398\">CVE-2026-108398</a></td>\n<td>.NET Framework Security Feature Bypass Vulnerability</td>\n<td>Publicly disclosed</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111497\">CVE-2026-111497</a></td>\n<td>Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder</td>\n<td>Publicly disclosed</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-753-non-microsoft-cve-chrome-cves-not-listed\">We are republishing 753 non-Microsoft CVE (Chrome CVEs not listed):</h2>\n<table>\n<thead>\n<tr>\n<th>CNA</th>\n<th>CVE ID</th>\n<th>Title</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Cisco Talos</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21413\">CVE-2026-21413</a></td>\n<td>Raw Image Extension Remote Code Execution Vulnerability</td>\n</tr>\n<tr>\n<td>Google</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111497\">CVE-2026-111497</a></td>\n<td>Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder</td>\n</tr>\n<tr>\n<td>GitHub_M</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92707\">CVE-2026-92707</a></td>\n<td>MessagePack-CSharp Denial of Service Vulnerability</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>October 13, 2026</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2026/10/using-risk-cohorts-to-prioritize-security-updates\">Using risk cohorts to prioritize security updates</a></td>\n</tr>\n<tr>\n<td>October 31, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience\">You asked, we delivered: Introducing new features for an improved security experience</a></td>\n</tr>\n<tr>\n<td>October 28, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315\">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td>\n</tr>\n<tr>\n<td>October 22, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td>\n</tr>\n<tr>\n<td>November 12, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CSAF-Blog\">Toward greater transparency: Publishing machine-readable CSAF files</a></td>\n</tr>\n<tr>\n<td>June 2Line truncated
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-1474-microsoft-cves\">This release consists of the following 1474 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Product Family</th>\n<th style=\"text-align: right;\">Vulnerabilities Addressed</th>\n<th style=\"text-align: right;\">Distinct Updates</th>\n<th>Update Type</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows</td>\n<td style=\"text-align: right;\">1,105</td>\n<td style=\"text-align: right;\">39</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Office</td>\n<td style=\"text-align: right;\">164</td>\n<td style=\"text-align: right;\">11</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SharePoint Server</td>\n<td style=\"text-align: right;\">37</td>\n<td style=\"text-align: right;\">1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td style=\"text-align: right;\">22</td>\n<td style=\"text-align: right;\">8</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Exchange Server</td>\n<td style=\"text-align: right;\">7</td>\n<td style=\"text-align: right;\">8</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Developer Tools (Dev Div)</td>\n<td style=\"text-align: right;\">65</td>\n<td style=\"text-align: right;\">103</td>\n<td>Mixed</td>\n</tr>\n<tr>\n<td>Azure</td>\n<td style=\"text-align: right;\">15</td>\n<td style=\"text-align: right;\">20</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Defender</td>\n<td style=\"text-align: right;\">4</td>\n<td style=\"text-align: right;\">3</td>\n<td>Automatic</td>\n</tr>\n<tr>\n<td>Edge</td>\n<td style=\"text-align: right;\">0</td>\n<td style=\"text-align: right;\">1</td>\n<td>Automatic</td>\n</tr>\n<tr>\n<td>Other</td>\n<td style=\"text-align: right;\">35</td>\n<td style=\"text-align: right;\">33</td>\n<td>Individual</td>\n</tr>\n</tbody>\n</table>\n<h3 id=\"notable-cves\">Notable CVEs</h3>\n<table>\n<thead>\n<tr>\n<th>CVE ID</th>\n<th>Title</th>\n<th>Notable Item</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951\">CVE-2026-96951</a></td>\n<td>Windows Shell Security Feature Bypass Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108398\">CVE-2026-108398</a></td>\n<td>.NET Framework Security Feature Bypass Vulnerability</td>\n<td>Publicly disclosed</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111497\">CVE-2026-111497</a></td>\n<td>Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder</td>\n<td>Publicly disclosed</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-753-non-microsoft-cve-chrome-cves-not-listed\">We are republishing 753 non-Microsoft CVE (Chrome CVEs not listed):</h2>\n<table>\n<thead>\n<tr>\n<th>CNA</th>\n<th>CVE ID</th>\n<th>Title</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Cisco Talos</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21413\">CVE-2026-21413</a></td>\n<td>Raw Image Extension Remote Code Execution Vulnerability</td>\n</tr>\n<tr>\n<td>Google</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111497\">CVE-2026-111497</a></td>\n<td>Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder</td>\n</tr>\n<tr>\n<td>GitHub_M</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92707\">CVE-2026-92707</a></td>\n<td>MessagePack-CSharp Denial of Service Vulnerability</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>October 13, 2026</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2026/10/using-risk-cohorts-to-prioritize-security-updates\">Using risk cohorts to prioritize security updates</a></td>\n</tr>\n<tr>\n<td>October 31, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience\">You asked, we delivered: Introducing new features for an improved security experience</a></td>\n</tr>\n<tr>\n<td>October 28, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315\">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td>\n</tr>\n<tr>\n<td>October 22, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td>\n</tr>\n<tr>\n<td>November 12, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CSAF-Blog\">Toward greater transparency: Publishing machine-readable CSAF files</a></td>\n</tr>\n<tr>\n<td>June 2Line truncated
|
||||
@@ -1 +1 @@
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-999-microsoft-cves\">This release consists of the following 999 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Product Family</th>\n<th>Updates per Product/Version</th>\n<th>Vulnerabilities Addressed</th>\n<th>Distinct Updates</th>\n<th>Type of Update</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Azure</td>\n<td>1</td>\n<td>24</td>\n<td>5</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Developer Tools</td>\n<td>1</td>\n<td>24</td>\n<td>24</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Exchange Server</td>\n<td>1</td>\n<td>9</td>\n<td>4</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Office</td>\n<td>1</td>\n<td>122</td>\n<td>19</td>\n<td>Cumulative (except 2016)</td>\n</tr>\n<tr>\n<td>Office 2016</td>\n<td>1</td>\n<td>122</td>\n<td>11</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Other</td>\n<td>1</td>\n<td>24</td>\n<td>19</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>SharePoint Server</td>\n<td>1</td>\n<td>16</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SQL</td>\n<td>1</td>\n<td>61</td>\n<td>9</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Windows</td>\n<td>1</td>\n<td>714</td>\n<td>17</td>\n<td>Cumulative</td>\n</tr>\n</tbody>\n</table>\n<h3 id=\"notable-cves\">Notable CVEs</h3>\n<table>\n<thead>\n<tr>\n<th>CVE ID</th>\n<th>Title</th>\n<th>Notable Item</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880\">CVE-2026-85880</a></td>\n<td>Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963\">CVE-2026-81963</a></td>\n<td>Windows Update Stack Elevation of Privilege Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85921\">CVE-2026-85921</a></td>\n<td>Windows Secure Kernel Mode Elevation of Privilege Vulnerability</td>\n<td>Out-of-Band Release</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-25-non-microsoft-cves\">We are republishing 25 non-Microsoft CVEs</h2>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>October 31, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience\">You asked, we delivered: Introducing new features for an improved security experience</a></td>\n</tr>\n<tr>\n<td>October 28, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315\">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td>\n</tr>\n<tr>\n<td>October 22, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td>\n</tr>\n<tr>\n<td>November 12, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CSAF-Blog\">Toward greater transparency: Publishing machine-readable CSAF files</a></td>\n</tr>\n<tr>\n<td>June 27, 2024</td>\n<td><a href=\"https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/\">Toward greater transparency: Unveiling Cloud Service CVEs</a></td>\n</tr>\n<tr>\n<td>April 9, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CWE-Blog\">Toward greater transparency: Security Update Guide now shares CWEs for CVEs</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-resources\">Relevant Resources</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A listLine truncated
|
||||
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-999-microsoft-cves\">This release consists of the following 999 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Product Family</th>\n<th>Updates per Product/Version</th>\n<th>Vulnerabilities Addressed</th>\n<th>Distinct Updates</th>\n<th>Type of Update</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Azure</td>\n<td>1</td>\n<td>24</td>\n<td>5</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Developer Tools</td>\n<td>1</td>\n<td>24</td>\n<td>24</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Exchange Server</td>\n<td>1</td>\n<td>9</td>\n<td>4</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Office</td>\n<td>1</td>\n<td>122</td>\n<td>19</td>\n<td>Cumulative (except 2016)</td>\n</tr>\n<tr>\n<td>Office 2016</td>\n<td>1</td>\n<td>122</td>\n<td>11</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Other</td>\n<td>1</td>\n<td>24</td>\n<td>19</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>SharePoint Server</td>\n<td>1</td>\n<td>16</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SQL</td>\n<td>1</td>\n<td>61</td>\n<td>9</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Windows</td>\n<td>1</td>\n<td>714</td>\n<td>17</td>\n<td>Cumulative</td>\n</tr>\n</tbody>\n</table>\n<h3 id=\"notable-cves\">Notable CVEs</h3>\n<table>\n<thead>\n<tr>\n<th>CVE ID</th>\n<th>Title</th>\n<th>Notable Item</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880\">CVE-2026-85880</a></td>\n<td>Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963\">CVE-2026-81963</a></td>\n<td>Windows Update Stack Elevation of Privilege Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85921\">CVE-2026-85921</a></td>\n<td>Windows Secure Kernel Mode Elevation of Privilege Vulnerability</td>\n<td>Out-of-Band Release</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-25-non-microsoft-cves\">We are republishing 25 non-Microsoft CVEs</h2>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>October 31, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience\">You asked, we delivered: Introducing new features for an improved security experience</a></td>\n</tr>\n<tr>\n<td>October 28, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315\">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td>\n</tr>\n<tr>\n<td>October 22, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td>\n</tr>\n<tr>\n<td>November 12, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CSAF-Blog\">Toward greater transparency: Publishing machine-readable CSAF files</a></td>\n</tr>\n<tr>\n<td>June 27, 2024</td>\n<td><a href=\"https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/\">Toward greater transparency: Unveiling Cloud Service CVEs</a></td>\n</tr>\n<tr>\n<td>April 9, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CWE-Blog\">Toward greater transparency: Security Update Guide now shares CWEs for CVEs</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-resources\">Relevant Resources</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A listLine truncated
|
||||
Reference in new issue
Block a user