Microsoft is publishing 200 vulnerabilities on June 2026 Patch Tuesday . Microsoft is not aware of exploitation in the wild for any of these vulnerabilities, and is aware of public disclosure for three. This is similar to last month’s Patch Tuesday, however several of last month’s vulnerabilities ended up on CISA KEV in the days following their publication. So far this month, Microsoft has provided patches to address 360 browser vulnerabilities, which is an order of magnitude more than has been typical in any given month over the past few years. As usual, browser vulns are not included in the Patch Tuesday count above. Indeed, the vast, and presumably sustained, uptick in the number of browser vulnerabilities has led to Microsoft no longer enumerating Chromium CVEs in the Security Update Guide. Other vulnerability categories, especially Linux kernel vulnerabilities, are seeing a similar increase in AI-assisted vulnerability reports.
In recent weeks, an independent vulnerability researcher going by the pseudonym Nightmare Eclipse has attracted significant attention by publishing details of six Microsoft vulnerabilities, including elevation of privilege vulnerabilities in Defender, and a Secure Boot disk encryption bypass. The researcher provided full proof-of-concept code for some, and provided significant-but-incomplete detail around the path to exploitation for others. Microsoft has confirmed that these disclosures were not coordinated, and it is clear that the relationship between this researcher and Microsoft is less than cordial. Two of the disclosures emerged in the hours after last month’s Patch Tuesday, which provides maximum visibility, while limiting Microsoft’s ability to respond without out-of-cycle patches.
At time of writing, Microsoft has provided mitigation advice and patches for CVE-2026-33825 , CVE-2026-45585 , CVE-2026-45498 , and CVE-2026-41091 , leaving only two elevation of privilege vulnerabilities unpatched, known as MiniPlasma and GreenPlasma. However, a recent blog post by Nightmare Eclipse with the title “7” has been widely interpreted to mean that there is at least one more vulnerability to come. The post contained no content other than an image of Albert Vesker, a character from the Resident Evil video game series who formerly worked as a researcher for a technology corporation before going rogue. Any inference around the possible meaning of the image is left as an exercise for the reader.
Given the timing of last month’s disclosures in the hours following Patch Tuesday, a further high-friction disclosure today would perhaps be unsurprising. Indeed, a new blog post and a new GitHub account from the same researcher have emerged in the hours following Microsoft’s publication of the June 2026 Patch Tuesday updates. The apparent seventh disclosure is nicknamed RoguePlanet, and appears to describe another elevation of privilege to SYSTEM in Defender.
It is not at all difficult to understand why Microsoft and many blue team practitioners are deeply alarmed by the partial or even full disclosure of proof-of-concept code for an ongoing series of vulnerabilities affecting fully-patched Windows systems. However, multiple leading voices in the broader vulnerability disclosure community have expressed concern that Microsoft’s invocation of the Digital Crimes Unit in a May 27, 2026 blog post may yet prove counterproductive, especially if it causes other researchers to back away from mutually beneficial engagements with MSRC. A few days later, MSRC issued a further statement clarifying that they have no intention of pursuing action against security researchers, but only those who break the law or engage in malicious activity causing real harm. For now, one safe conclusion is that this unusually sensational Microsoft vulnerability management story arc is far from over.
Every so often, a new round of denial of service vulnerabilities emerge which affect web servers implementing HTTP/2 and HTTP/3 standards. This class of vulnerabilities is likely to expand further as researchers, including the discoverers of CVE-2026-49160 , use advances in LLM capability to probe not just specific software, but also the standards on which software rests. Microsoft warns that exploitation leads to uncontrolled resource consumption over a network, and expects that exploitation is more likely. The advisory credits both a third-party research firm and OpenAI’s Codex.
Microsoft has not yet directly addressed another HTTP/2 vulnerability which allows trivial denial-of-service against the default HTTP/2 configuration of multiple web server platforms, including Microsoft IIS. CVE-2026-49975, also known as HTTP/2 Bomb, became public knowledge a week ago. This denial of service works by exhausting memory on the target server, and unlike a distributed denial of service attack, there is no requirement that an attacker control a large amount of bandwidth. Patches are available for NGINX and Apache, with IIS presumably to follow at some point. If practically possible, disabling HTTP/2 is a valid mitigation.
The Microsoft PowerToys utility provides a wide variety of useful control and configuration options for Windows power users which aren’t otherwise easily accessible. It turns out that PowerToys also offers an undocumented extra: local elevation of privilege to SYSTEM via successful exploitation of CVE-2026-42902 . It is worth noting that the fix was included in PowerToys v0.99.1 on April 29, 2026, without any apparent mention in the release notes . Attackers with patch-diffing toolkits may well take note of this discrepancy.
There are no significant Microsoft product lifecycle changes this month. SQL Server 2016 moves beyond regular extended support and into the pay-to-play Extended Security Updates (ESU) phase after July 14, 2026. On that same date, SharePoint 2016 and 2019 will also move past extended support, but since there’s no ESU available, the only remaining option for fully-supported self-hosted SharePoint after the middle of month will be SharePoint Subscription Edition.
Microsoft Bing Spoofing Vulnerability
Exploitation Less Likely
Microsoft PC Manager Security Feature Bypass Vulnerability
Exploitation Unlikely
Microsoft PowerToys Elevation of Privilege Vulnerability
Exploitation Less Likely
Office for Android Spoofing Vulnerability
Exploitation Unlikely
Windows Graphics Component Remote Code Execution Vulnerability
Exploitation More Likely
Windows Graphics Component Remote Code Execution Vulnerability
Exploitation More Likely
Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability
Exploitation Unlikely
Azure Stack Edge Remote Code Execution Vulnerability
Exploitation Unlikely
Azure Stack Edge Spoofing Vulnerability
Exploitation Less Likely
.NET SDK Elevation of Privilege Vulnerability
Exploitation Less Likely
.NET Tampering Vulnerability
Exploitation Unlikely
ASP.NET Core Denial of Service Vulnerability
Exploitation Less Likely
Microsoft Live Canvas SDK Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability
Exploitation Less Likely
Visual Studio Code Elevation of Privilege Vulnerability
Exploitation Less Likely
Visual Studio Code Elevation of Privilege Vulnerability
Exploitation Unlikely
Visual Studio Code Information Disclosure Vulnerability
Exploitation Less Likely
Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability
Exploitation Less Likely
Visual Studio Code Security Feature Bypass Vulnerability
Exploitation Less Likely
Visual Studio Code Tampering Vulnerability
Exploitation Less Likely
ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]
Exploitation Less Likely
DHCP Client Service Remote Code Execution Vulnerability
Exploitation Less Likely
HTTP.sys Denial of Service Vulnerability
Exploitation More Likely
HTTP.sys Remote Code Execution Vulnerability
Exploitation More Likely
Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability
Exploitation Less Likely
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft Exchange Server Elevation of Privilege Vulnerability
Exploitation Unlikely
Microsoft Exchange Server Information Disclosure Vulnerability
Exploitation Unlikely
Microsoft Exchange Server Information Disclosure Vulnerability
Exploitation Unlikely
Microsoft Exchange Server Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Exchange Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft Exchange Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft Exchange Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft Graphics Component Elevation of Privilege Vulnerability
Exploitation More Likely
Microsoft Kinect Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability
Exploitation Less Likely
NT OS Kernel Elevation of Privilege Vulnerability
Exploitation More Likely
NT OS Kernel Elevation of Privilege Vulnerability
Exploitation Less Likely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Less Likely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Unlikely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Less Likely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Unlikely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Less Likely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Less Likely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Less Likely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation More Likely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Less Likely
Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
UEFI Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
UEFI Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Application Identity (AppID) Information Disclosure Vulnerability
Exploitation Less Likely
Windows BitLocker Security Feature Bypass Vulnerability
Exploitation Less Likely
Windows BitLocker Security Feature Bypass Vulnerability
Exploitation More Likely
Windows BitLocker Security Feature Bypass Vulnerability
Exploitation More Likely
Windows Bluetooth Port Driver Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Bluetooth Service Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Boot Manager Security Feature Bypass Vulnerability
Exploitation Less Likely
Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability
Exploitation More Likely
Windows Deployment Services (WDS) Remote Code Execution
Exploitation Less Likely
Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows DHCP Client Information Disclosure Vulnerability
Exploitation Unlikely
Windows DHCP Client Information Disclosure Vulnerability
Exploitation Unlikely
Windows DNS Client Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows DWM Core Library Elevation of Privilege Vulnerability
Exploitation More Likely
Windows DWM Core Library Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows DWM Core Library Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability
Exploitation Less Likely
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Graphics Component Remote Code Execution Vulnerability
Exploitation More Likely
Windows Graphics Component Remote Code Execution Vulnerability
Exploitation More Likely
Windows Hyper-V Information Disclosure Vulnerability
Exploitation Less Likely
Windows Hyper-V Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Hyper-V Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Internet (wininet.dll) Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Kerberos Denial of Service Vulnerability
Exploitation Unlikely
Windows Kerberos Denial of Service Vulnerability
Exploitation Less Likely
Windows Kerberos Key Distribution Center (KDC) Remote Code Execution
Exploitation Unlikely
Windows Kernel Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Kernel Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Kernel Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Mark of the Web Security Feature Bypass Vulnerability
Exploitation Less Likely
Windows Media Remote Code Execution Vulnerability
Exploitation Less Likely
Windows NTFS Remote Code Execution Vulnerability
Exploitation Less Likely
Windows NTLM Spoofing Vulnerability
Exploitation More Likely
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Projected File System Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Projected File System Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Push Notification Information Disclosure Vulnerability
Exploitation Unlikely
Windows Push Notification Information Disclosure Vulnerability
Exploitation Less Likely
Windows Push Notification Information Disclosure Vulnerability
Exploitation Less Likely
Windows Push Notification Information Disclosure Vulnerability
Exploitation Less Likely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Exploitation Less Likely
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Exploitation Less Likely
Windows SDK Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Shell Information Disclosure Vulnerability
Exploitation Less Likely
Windows Shell Information Disclosure Vulnerability
Exploitation Less Likely
Windows Storage Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows TCP/IP Denial of Service Vulnerability
Exploitation Less Likely
Windows TCP/IP Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Telephony Server Information Disclosure Vulnerability
Exploitation Less Likely
Windows Telephony Service Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows UPnP Device Host Remote Code Execution Vulnerability
Exploitation Less Likely
Windows UPnP Device Host Remote Code Execution Vulnerability
Exploitation Less Likely
Winlogon Elevation of Privilege Vulnerability
Exploitation More Likely
LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body
Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft Excel Information Disclosure Vulnerability
Exploitation Unlikely
Microsoft Excel Information Disclosure Vulnerability
Exploitation Less Likely
Microsoft Excel Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Excel Remote Code Execution Vulnerability
Exploitation Unlikely
Microsoft Excel Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Excel Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Excel Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Excel Security Feature Bypass Vulnerability
Exploitation Less Likely
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft Office Information Disclosure Vulnerability
Exploitation Less Likely
Microsoft Office Information Disclosure Vulnerability
Exploitation Less Likely
Microsoft Office Information Disclosure Vulnerability
Exploitation Unlikely
Microsoft Office Project Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft Office Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Office Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Office Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Office Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Office Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Office Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Office Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Office Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Outlook and Word Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Outlook and Word Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Outlook and Word Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft SharePoint Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft SharePoint Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Unlikely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation More Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Unlikely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation More Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft SharePoint Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft Teams for Android Information Disclosure Vulnerability
Exploitation Less Likely
Microsoft Word Information Disclosure Vulnerability
Exploitation Unlikely
Microsoft Word Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Word Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Word Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Word Remote Code Execution Vulnerability
Exploitation Less Likely
Office for Android Spoofing Vulnerability
Exploitation Unlikely
Windows Graphics Component Remote Code Execution Vulnerability
Exploitation More Likely
Windows Graphics Component Remote Code Execution Vulnerability
Exploitation More Likely
USCiLab Cereal Shared Pointer type confusion
Apache HTTP Server: mod_http2 denial of service
Rejected reason: This CVE ID was assigned as a duplicate of CVE-2026-50292
LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body
DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels
Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()
Microsoft Azure Network Adapter Elevation of Privilege Vulnerability
Exploitation Less Likely
Nuance PowerScribe Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Exchange Server Elevation of Privilege Vulnerability
Exploitation Unlikely
Microsoft Exchange Server Information Disclosure Vulnerability
Exploitation Unlikely
Microsoft Exchange Server Information Disclosure Vulnerability
Exploitation Unlikely
Microsoft Exchange Server Remote Code Execution Vulnerability
Exploitation Less Likely
Microsoft Exchange Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft Exchange Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft Exchange Server Spoofing Vulnerability
Exploitation Less Likely
Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
Exploitation Less Likely
ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]
Exploitation Less Likely
DHCP Client Service Remote Code Execution Vulnerability
Exploitation Less Likely
HTTP.sys Denial of Service Vulnerability
Exploitation More Likely
HTTP.sys Remote Code Execution Vulnerability
Exploitation More Likely
Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability
Exploitation Less Likely
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft Graphics Component Elevation of Privilege Vulnerability
Exploitation More Likely
Microsoft Kinect Elevation of Privilege Vulnerability
Exploitation Less Likely
Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability
Exploitation Less Likely
NT OS Kernel Elevation of Privilege Vulnerability
Exploitation More Likely
NT OS Kernel Elevation of Privilege Vulnerability
Exploitation Less Likely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Less Likely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Unlikely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Unlikely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Less Likely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Unlikely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Unlikely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Less Likely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Less Likely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Less Likely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation More Likely
Remote Desktop Client Remote Code Execution Vulnerability
Exploitation Less Likely
Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
UEFI Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
UEFI Secure Boot Security Feature Bypass Vulnerability
Exploitation Less Likely
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Exploitation Unlikely
Windows Administrator Protection Secure Feature Bypass Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Application Identity (AppID) Information Disclosure Vulnerability
Exploitation Less Likely
Windows BitLocker Security Feature Bypass Vulnerability
Exploitation Less Likely
Windows BitLocker Security Feature Bypass Vulnerability
Exploitation More Likely
Windows BitLocker Security Feature Bypass Vulnerability
Exploitation More Likely
Windows Bluetooth Port Driver Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Bluetooth Service Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Boot Manager Security Feature Bypass Vulnerability
Exploitation Less Likely
Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability
Exploitation More Likely
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Deployment Services (WDS) Remote Code Execution
Exploitation Less Likely
Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows DHCP Client Information Disclosure Vulnerability
Exploitation Unlikely
Windows DHCP Client Information Disclosure Vulnerability
Exploitation Unlikely
Windows DNS Client Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows DWM Core Library Elevation of Privilege Vulnerability
Exploitation More Likely
Windows DWM Core Library Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows DWM Core Library Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows DWM Core Library Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows DWM Core Library Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows DWM Core Library Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows DWM Core Library Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows DWM Core Library Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows DWM Core Library Information Disclosure Vulnerability
Exploitation Less Likely
Windows DWM Core Library Information Disclosure Vulnerability
Exploitation Less Likely
Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability
Exploitation Less Likely
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Graphics Component Remote Code Execution Vulnerability
Exploitation More Likely
Windows Graphics Component Remote Code Execution Vulnerability
Exploitation More Likely
Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Hyper-V Information Disclosure Vulnerability
Exploitation Less Likely
Windows Hyper-V Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Hyper-V Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Hyper-V Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Internet (wininet.dll) Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Kerberos Denial of Service Vulnerability
Exploitation Unlikely
Windows Kerberos Denial of Service Vulnerability
Exploitation Less Likely
Windows Kerberos Key Distribution Center (KDC) Remote Code Execution
Exploitation Unlikely
Windows Kernel Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Kernel Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Kernel Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Kernel Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Managed Installer Information Disclosure Vulnerability
Exploitation Less Likely
Windows Mark of the Web Security Feature Bypass Vulnerability
Exploitation Less Likely
Windows Media Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Narrator Braille Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Network Controller (NC) Host Agent Denial of Service Vulnerability
Exploitation Unlikely
Windows NTFS Remote Code Execution Vulnerability
Exploitation Less Likely
Windows NTLM Spoofing Vulnerability
Exploitation More Likely
Windows Performance Monitor Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Performance Monitor Remote Code Execution Vulnerability
Exploitation Less Likely
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Projected File System Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Projected File System Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Push Notification Information Disclosure Vulnerability
Exploitation Unlikely
Windows Push Notification Information Disclosure Vulnerability
Exploitation Less Likely
Windows Push Notification Information Disclosure Vulnerability
Exploitation Less Likely
Windows Push Notification Information Disclosure Vulnerability
Exploitation Less Likely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Push Notifications Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Exploitation Less Likely
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Exploitation Less Likely
Windows SDK Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Shell Information Disclosure Vulnerability
Exploitation Less Likely
Windows Shell Information Disclosure Vulnerability
Exploitation Less Likely
Windows Storage Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows TCP/IP Denial of Service Vulnerability
Exploitation Less Likely
Windows TCP/IP Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Telephony Server Information Disclosure Vulnerability
Exploitation Less Likely
Windows Telephony Service Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Exploitation Less Likely
Windows UPnP Device Host Remote Code Execution Vulnerability
Exploitation Less Likely
Windows UPnP Device Host Remote Code Execution Vulnerability
Exploitation Less Likely
Winlogon Elevation of Privilege Vulnerability
Exploitation More Likely
HTTP.sys Denial of Service Vulnerability
Exploitation More Likely
Windows BitLocker Security Feature Bypass Vulnerability
Exploitation More Likely
Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability
Exploitation More Likely
ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]
Exploitation Less Likely
Azure Stack Edge Remote Code Execution Vulnerability
Exploitation Unlikely
DHCP Client Service Remote Code Execution Vulnerability
Exploitation Less Likely
HTTP.sys Remote Code Execution Vulnerability
Exploitation More Likely
Nuance PowerScribe Remote Code Execution Vulnerability
Exploitation Less Likely
Visual Studio Code Elevation of Privilege Vulnerability
Exploitation Unlikely
Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability
Exploitation Less Likely
Windows Kernel Remote Code Execution Vulnerability
Exploitation Less Likely
Windows TCP/IP Elevation of Privilege Vulnerability
Exploitation Unlikely
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
