Microsoft is publishing 167 vulnerabilities on April 2026 Patch Tuesday . Microsoft is aware of exploitation in the wild for one of today’s vulnerabilities, and public disclosure for one other. Microsoft evaluates 19 of the vulnerabilities published today as more likely to see future exploitation. So far this month, Microsoft has provided patches to address 80 browser vulnerabilities, which are not included in the Patch Tuesday count above.
Regular Patch Tuesday watchers will know that these vulnerability totals are significantly higher than usual, especially the browser numbers. Late last week, Microsoft published patches to resolve more than 60 browser vulnerabilities in a single day, which is a new record in that very specific category.
It might be tempting to imagine that this sudden spike was tied to the buzz around the announcement a week ago today of Project Glasswing , but this is not the case. Edge is based on the Chromium engine, and the Chromium maintainers acknowledge a wide range of researchers for the vulnerabilities which Microsoft republished last Friday. This reflects a significant industry-wide uptick in the volume of vulnerability reports over the past few weeks. A safe conclusion is that this increase in volume is driven by ever-expanding AI capabilities. We should expect to see further increases in vulnerability reporting volume as the impact of AI models extend further, both in terms of capability and availability.
When everything is changing rapidly, it can be tempting to look to familiar things for comfort. SharePoint admins should start by addressing CVE-2026-32201 , an exploited-in-the-wild spoofing vulnerability. The advisory doesn’t offer much detail, but does mention CWE-20: Improper Input Validation and low impact to confidentiality and integrity, with no impact to availability. Of course, the greatest attacker impact is typically achieved by chaining together multiple vulnerabilities that by themselves might not seem so bad.
Ever-increasing novel AI capabilities in offensive cybersecurity now appear to provide real competition for all but the most elite human researchers; if it was ever valid to suppose that a vulnerability with a CVSS v3 base score of 6.5 was unlikely to cause much pain, it’s certainly not a safe defensive assumption in 2026. Patches are available for all supported versions of SharePoint, including SharePoint 2016, which moves beyond extended support on July 14, 2026.
Microsoft Defender receives a patch today for CVE-2026-33825 , a local privilege escalation vulnerability for which Microsoft is aware of public disclosure. Successful exploitation leads to SYSTEM privileges, so this is certainly worth patching sooner rather than later. Microsoft points out that no action should be required to install this update, since the Microsoft Defender Antimalware Platform automatically updates by default. A further silver lining is that systems that have disabled Microsoft Defender are not in an exploitable state. Hopefully, any such system is running a suitable third-party replacement for Defender’s capabilities.
The Windows Internet Key Exchange (IKE) Services Extensions is the site of CVE-2026-33824 , a critical unauthenticated remote code execution vulnerability. Exploitation requires an attacker to send specially crafted packets to a Windows machine with IKE v2 enabled, which could enable remote code execution. Vulnerabilities leading to unauthenticated RCE against modern Windows assets are relatively rare, or we’d see more wormable vulnerabilities self-propagating across the internet. However, since IKE provides secure tunnel negotiation services, for instance for VPNs, it is necessarily exposed to untrusted networks and reachable in a pre-authorization context. It’s hard to imagine this turning into a rampaging internet-wide worm, but there’s plenty of scope for initial access abuse, so this IKE vulnerability is still yikes.
The advisory does contain a section with potential mitigations for anyone unable to patch immediately, which center on least-privilege restriction of relevant UDP traffic. This same portion of the advisory also furnishes a helpful link to the definition of the word “mitigations” in the MSDN glossary. All versions of Windows back as far as Server 2016 and Windows 10 1607 LTSC receive patches.
The advisory credits both the WARP and MORSE (Microsoft Offensive Research & Security Engineering) teams at Microsoft. MORSE appears in Acknowledgements over the past few years, but today marks the first explicit mention of WARP in a Microsoft security advisory Acknowledgements section; we can speculate that WARP is an internal designator for the Microsoft Windows Enterprise Security Team.
In Microsoft lifecycle news, extended support ends April 14, 2026 for a wide range of Microsoft product legacy enterprise tools, including Dynamics C5 2016 , Dynamics NAV 2016 , App-V 5.0 and App-V 5.1 , UE-V 2.1 , and BitLocker Administration and Monitoring 2.5 SP1 . Microsoft .NET 9 STS (Standard Term Support, as distinct from Long Term Support) was originally scheduled to move past the end of support in May 2026, but late last year, Microsoft granted a six-month extension , so that .NET 9 STS now reaches end of support on November 10, 2026.
Azure Logic Apps Elevation of Privilege Vulnerability
Exploitation Less Likely
Azure Monitor Agent Elevation of Privilege Vulnerability
Exploitation Less Likely
Azure Monitor Agent Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft High Performance Compute (HPC) Pack Elevation of Privilege Vulnerability
Exploitation Less Likely
.NET and Visual Studio Denial of Service Vulnerability
Exploitation Less Likely
.NET Denial of Service Vulnerability
Exploitation Less Likely
.NET Framework Denial of Service Vulnerability
Exploitation Less Likely
.NET Framework Denial of Service Vulnerability
Exploitation Less Likely
.NET Spoofing Vulnerability
Exploitation Less Likely
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Exploitation Less Likely
GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Exploitation Less Likely
GitHub: CVE-2026-32631 'git clone' from manipulated repositories can leak NTLM hashes
Exploitation Less Likely
HackerOne: CVE-2026-21637 TLS PSK/ALPN Callback Exceptions Bypass Error Handlers
Microsoft PowerShell Security Feature Bypass Vulnerability
Exploitation Less Likely
Active Directory Spoofing Vulnerability
Exploitation Less Likely
Connected User Experiences and Telemetry Service Denial of Service Vulnerability
Exploitation Less Likely
Desktop Window Manager Elevation of Privilege Vulnerability
Exploitation Less Likely
Desktop Window Manager Elevation of Privilege Vulnerability
Exploitation More Likely
Desktop Window Manager Elevation of Privilege Vulnerability
Exploitation Less Likely
Desktop Window Manager Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft Brokering File System Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
Exploitation Less Likely
Microsoft Management Console Elevation of Privilege Vulnerability
Exploitation More Likely
MITRE: CVE-2026-25250 Secure Boot disable Eazy Fix
Exploitation Less Likely
Package Catalog Information Disclosure Vulnerability
Exploitation Unlikely
PowerShell Elevation of Privilege Vulnerability
Exploitation Less Likely
Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability
Exploitation Less Likely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Less Likely
Remote Desktop Licensing Service Elevation of Privilege Vulnerability
Exploitation Less Likely
Remote Desktop Licensing Service Elevation of Privilege Vulnerability
Exploitation Less Likely
Remote Desktop Spoofing Vulnerability
Exploitation More Likely
Remote Procedure Call Information Disclosure Vulnerability
Exploitation Unlikely
UEFI Secure Boot Security Feature Bypass Vulnerability
Exploitation More Likely
Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
Exploitation Less Likely
Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
Exploitation Less Likely
Web Account Manager Information Disclosure Vulnerability
Exploitation Unlikely
Win32k Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Active Directory Remote Code Execution Vulnerability
Exploitation More Likely
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Biometric Service Security Feature Bypass Vulnerability
Exploitation Less Likely
Windows BitLocker Security Feature Bypass Vulnerability
Exploitation More Likely
Windows Boot Manager Security Feature Bypass Vulnerability
Exploitation Less Likely
Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows COM Elevation of Privilege Vulnerability
Exploitation More Likely
Windows COM Server Information Disclosure Vulnerability
Exploitation Unlikely
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Exploitation More Likely
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Encrypted File System (EFS) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
Exploitation More Likely
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows GDI Information Disclosure Vulnerability
Exploitation Less Likely
Windows GDI Information Disclosure Vulnerability
Exploitation Less Likely
Windows Hello Security Feature Bypass Vulnerability
Exploitation More Likely
Windows Hyper-V Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Hyper-V Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Installer Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Kerberos Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Kernel Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Kernel Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Kernel Information Disclosure Vulnerability
Exploitation Less Likely
Windows Kernel Information Disclosure Vulnerability
Exploitation Less Likely
Windows Kernel Information Disclosure Vulnerability
Exploitation Less Likely
Windows Kernel Memory Information Disclosure Vulnerability
Exploitation More Likely
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Exploitation Less Likely
Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Management Services Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows OLE Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Print Spooler Information Disclosure Vulnerability
Exploitation Unlikely
Windows Projected File System Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Projected File System Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Projected File System Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Projected File System Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Projected File System Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Recovery Environment Security Feature Bypass Vulnerability
Exploitation Less Likely
Windows Service Elevation of Privilege Vulnerability
Exploitation More Likely
Windows Sensor Data Service Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Server Update Service (WSUS) Tampering Vulnerability
Exploitation Less Likely
Windows Shell Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Shell Information Disclosure Vulnerability
Exploitation Less Likely
Windows Shell Security Feature Bypass Vulnerability
Exploitation More Likely
Windows Shell Spoofing Vulnerability
Exploitation More Likely
Windows Simple and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Simple and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Simple and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Snipping Tool Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Snipping Tool Spoofing Vulnerability
Exploitation Unlikely
Windows Speech Brokered Api Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Speech Brokered Api Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Speech Runtime Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows TCP/IP Remote Code Execution Vulnerability
Exploitation Less Likely
Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability
Exploitation More Likely
Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability
Exploitation More Likely
Windows UPnP Device Host Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows UPnP Device Host Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows UPnP Device Host Elevation of Privilege Vulnerability
Exploitation More Likely
Windows UPnP Device Host Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows UPnP Device Host Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows UPnP Device Host Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows UPnP Device Host Information Disclosure Vulnerability
Exploitation Less Likely
Windows UPnP Device Host Remote Code Execution Vulnerability
Exploitation Less Likely
Windows User Interface Core Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows User Interface Core Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows User Interface Core Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows User Interface Core Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
Exploitation Less Likely
Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Exploitation Unlikely
Microsoft Power Apps Security Feature Bypass
Exploitation Less Likely
Microsoft Excel Information Disclosure Vulnerability
Exploitation Less Likely
Microsoft Excel Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Excel Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Excel Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Excel Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Office Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft PowerPoint Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Detected
Microsoft Word Information Disclosure Vulnerability
Exploitation Less Likely
Microsoft Word Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Word Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Word Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Word Remote Code Execution Vulnerability
Exploitation Less Likely
netfilter: nfnetlink_log: account for netlink header size
net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
net/x25: Fix overflow when accumulating packets
net/sched: cls_flow: fix NULL pointer dereference on shared blocks
netfilter: nf_conntrack_expect: use expect->helper
netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
net: bonding: fix use-after-free in bond_xmit_broadcast()
bridge: mrp: reject zero test interval to avoid OOM panic
net/sched: cls_fw: fix NULL pointer dereference on shared blocks
netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD
netfilter: ipset: drop logically empty buckets in mtype_del
Microsoft SQL Server Remote Code Execution Vulnerability
Exploitation Less Likely
SQL Server Elevation of Privilege Vulnerability
Exploitation Less Likely
SQL Server Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft Defender Elevation of Privilege Vulnerability
Exploitation More Likely
Active Directory Spoofing Vulnerability
Exploitation Less Likely
AMD: CVE-2023-20585 IOMMU Write Buffer Vulnerability
Exploitation Less Likely
Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege Vulnerability
Exploitation Less Likely
Connected User Experiences and Telemetry Service Denial of Service Vulnerability
Exploitation Less Likely
Desktop Window Manager Elevation of Privilege Vulnerability
Exploitation Less Likely
Desktop Window Manager Elevation of Privilege Vulnerability
Exploitation More Likely
Desktop Window Manager Elevation of Privilege Vulnerability
Exploitation More Likely
Desktop Window Manager Elevation of Privilege Vulnerability
Exploitation Less Likely
Desktop Window Manager Elevation of Privilege Vulnerability
Exploitation Less Likely
HTTP.sys Denial of Service Vulnerability
Exploitation Less Likely
Microsoft Brokering File System Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft Brokering File System Elevation of Privilege Vulnerability
Exploitation Unlikely
Microsoft Brokering File System Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
Exploitation Less Likely
Microsoft Management Console Elevation of Privilege Vulnerability
Exploitation More Likely
MITRE: CVE-2026-25250 Secure Boot disable Eazy Fix
Exploitation Less Likely
Package Catalog Information Disclosure Vulnerability
Exploitation Unlikely
PowerShell Elevation of Privilege Vulnerability
Exploitation Less Likely
Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability
Exploitation Less Likely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Less Likely
Remote Desktop Licensing Service Elevation of Privilege Vulnerability
Exploitation Less Likely
Remote Desktop Licensing Service Elevation of Privilege Vulnerability
Exploitation Less Likely
Remote Desktop Spoofing Vulnerability
Exploitation More Likely
Remote Procedure Call Information Disclosure Vulnerability
Exploitation Unlikely
UEFI Secure Boot Security Feature Bypass Vulnerability
Exploitation More Likely
UEFI Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
Exploitation Less Likely
Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
Exploitation Less Likely
Web Account Manager Information Disclosure Vulnerability
Exploitation Unlikely
Win32k Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Active Directory Remote Code Execution Vulnerability
Exploitation More Likely
Windows Admin Center Spoofing Vulnerability
Exploitation Less Likely
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Biometric Service Security Feature Bypass Vulnerability
Exploitation Less Likely
Windows BitLocker Security Feature Bypass Vulnerability
Exploitation More Likely
Windows Boot Manager Security Feature Bypass Vulnerability
Exploitation Less Likely
Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows COM Elevation of Privilege Vulnerability
Exploitation More Likely
Windows COM Server Information Disclosure Vulnerability
Exploitation Unlikely
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Exploitation More Likely
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Encrypted File System (EFS) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
Exploitation More Likely
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows GDI Information Disclosure Vulnerability
Exploitation Less Likely
Windows GDI Information Disclosure Vulnerability
Exploitation Less Likely
Windows Graphics Component Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Hello Security Feature Bypass Vulnerability
Exploitation More Likely
Windows Hello Security Feature Bypass Vulnerability
Exploitation Less Likely
Windows Hyper-V Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Hyper-V Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Installer Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Kerberos Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Kernel Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Kernel Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Kernel Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Kernel Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Kernel Information Disclosure Vulnerability
Exploitation Less Likely
Windows Kernel Information Disclosure Vulnerability
Exploitation Less Likely
Windows Kernel Information Disclosure Vulnerability
Exploitation Less Likely
Windows Kernel Memory Information Disclosure Vulnerability
Exploitation More Likely
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Exploitation Less Likely
Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Management Services Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows OLE Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Print Spooler Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Print Spooler Information Disclosure Vulnerability
Exploitation Unlikely
Windows Projected File System Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Projected File System Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Projected File System Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Projected File System Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Projected File System Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Recovery Environment Security Feature Bypass Vulnerability
Exploitation Less Likely
Windows Redirected Drive Buffering System Denial of Service Vulnerability
Exploitation Less Likely
Windows Service Elevation of Privilege Vulnerability
Exploitation More Likely
Windows Sensor Data Service Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Server Update Service (WSUS) Tampering Vulnerability
Exploitation Less Likely
Windows Shell Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Shell Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Shell Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Shell Information Disclosure Vulnerability
Exploitation Less Likely
Windows Shell Security Feature Bypass Vulnerability
Exploitation More Likely
Windows Shell Spoofing Vulnerability
Exploitation More Likely
Windows Simple and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Simple and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Simple and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Snipping Tool Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Snipping Tool Spoofing Vulnerability
Exploitation Unlikely
Windows Speech Brokered Api Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Speech Brokered Api Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Speech Runtime Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows TCP/IP Remote Code Execution Vulnerability
Exploitation Less Likely
Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability
Exploitation More Likely
Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability
Exploitation More Likely
Windows UPnP Device Host Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows UPnP Device Host Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows UPnP Device Host Elevation of Privilege Vulnerability
Exploitation More Likely
Windows UPnP Device Host Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows UPnP Device Host Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows UPnP Device Host Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows UPnP Device Host Information Disclosure Vulnerability
Exploitation Less Likely
Windows UPnP Device Host Remote Code Execution Vulnerability
Exploitation Less Likely
Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows User Interface Core Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows User Interface Core Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows User Interface Core Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows User Interface Core Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
Exploitation Less Likely
Windows WalletService Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Win32k Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Detected
Microsoft Defender Elevation of Privilege Vulnerability
Exploitation More Likely
Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Exploitation Less Likely
Vulnerabilities and Exploits
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
