Windows — security advisories

vendor: Microsoft100 advisories20 exploited5 sourceslatest 2026-08-25⚡ RSS feed

Every advisory CSIRTS.com has correlated to Windows, newest first — across national CERTs, vendor PSIRTs and vulnerability databases.

⚡ Watch Windows

Get an email when a new Windows advisory drops — max one per day, one-click unsubscribe.

[UPDATE] [high] Microsoft Windows: Multiple vulnerabilities

highCVE-2026-47291 CVE-2025-10263 CVE-2026-33828 CVE-2026-34335cert-bund2026-08-25

Multiple vulnerabilities in Microsoft Windows (20 August 2026)

unknownCVE-2026-62727 CVE-2026-69550cert-fr-avis2026-08-20

[NEW] [critical] Microsoft Windows products: Multiple vulnerabilities

criticalCVE-2026-50347 CVE-2026-50312 CVE-2026-50321 CVE-2026-50370cert-bund2026-08-18

[UPDATE] [critical] Microsoft Windows: Multiple Vulnerabilities

criticalexploitedCVE-2026-32202 CVE-2026-27912 CVE-2023-20585 CVE-2025-6965cert-bund2026-08-13

Multiple vulnerabilities in Microsoft Windows (August 12, 2026)

unknownexploitedCVE-2026-68820cert-fr-avis2026-08-12

NCSC-2026-0284 [1.00] [M/H] Vulnerabilities patched in Microsoft Windows

unknownexploitedCVE-2026-59124 CVE-2026-62815 CVE-2026-62878 CVE-2026-62893ncsc-nl2026-08-11

CVE-2026-50472: Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-50472msrc2026-08-11

CVE-2026-6726: MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse

highCVSS 7.9CVE-2026-6726msrc2026-08-11

[NEW] [medium] Microsoft Windows: Multiple Vulnerabilities

mediumCVE-2026-58598 CVE-2026-56171cert-bund2026-07-20

Multiple vulnerabilities in Microsoft Windows (July 17, 2026)

unknownCVE-2026-58643 CVE-2026-58598 CVE-2026-56171 CVE-2026-59117cert-fr-avis2026-07-17

Multiple vulnerabilities in Microsoft Windows (July 15, 2026)

unknownexploitedCVE-2026-56155cert-fr-avis2026-07-15

NCSC-2026-0231 [1.00] [M/H] Vulnerabilities fixed in Microsoft Windows

unknownexploitedCVE-2026-49172 CVE-2026-56190 CVE-2026-54990 CVE-2026-49798ncsc-nl2026-07-14

CVE-2026-50312: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

mediumCVSS 4.7CVE-2026-50312msrc2026-07-14

CVE-2026-50687: Windows Win32k Elevation of Privilege Vulnerability

highCVSS 8.8CVE-2026-50687msrc2026-07-14

CVE-2026-54986: Windows Win32k Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-54986msrc2026-07-14

CVE-2026-49177: Windows TCP/IP Information Disclosure Vulnerability

mediumCVSS 5.5CVE-2026-49177msrc2026-07-14

CVE-2026-49174: DNS Client Tampering Vulnerability

mediumCVSS 6.1CVE-2026-49174msrc2026-07-14

CVE-2026-49162: Microsoft Brokering File System Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-49162msrc2026-07-14

CVE-2026-48571: Windows App Package Installer Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-48571msrc2026-07-14

CVE-2026-50500: Windows Netlogon Elevation of Privilege Vulnerability

highCVSS 7.5CVE-2026-50500msrc2026-07-14

CVE-2026-50480: Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-50480msrc2026-07-14

CVE-2026-50484: Windows Kernel Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-50484msrc2026-07-14

CVE-2026-56186: Windows Secure Channel Information Disclosure Vulnerability

highCVSS 8.1CVE-2026-56186msrc2026-07-14

CVE-2026-56187: Windows MIDI Service Module Elevation of Privileges Vulnerability

highCVSS 7CVE-2026-56187msrc2026-07-14

CVE-2026-50478: Windows Kernel Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-50478msrc2026-07-14

CVE-2026-50502: Windows Event Logging Service Remote Code Execution Vulnerability

highCVSS 8CVE-2026-50502msrc2026-07-14

CVE-2026-57083: Windows Media Photo Codec Information Disclosure Vulnerability

mediumCVSS 5.5CVE-2026-57083msrc2026-07-14

CVE-2026-57095: Win32k Elevation of Privilege Vulnerability

mediumCVSS 6.2CVE-2026-57095msrc2026-07-14

CVE-2026-57089: Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability

highCVSS 7.5CVE-2026-57089msrc2026-07-14

CVE-2026-50688: Windows Win32k Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-50688msrc2026-07-14

CVE-2026-50387: Windows GDI Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-50387msrc2026-07-14

CVE-2026-50376: Windows Remote Desktop Client Information Disclosure Vulnerability

mediumCVSS 6.5CVE-2026-50376msrc2026-07-14

CVE-2026-50423: Windows Kernel Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-50423msrc2026-07-14

CVE-2026-50418: Windows System Secure Feature Bypass Vulnerability

mediumCVSS 5.1CVE-2026-50418msrc2026-07-14

CVE-2026-50403: Windows Runtime Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-50403msrc2026-07-14

CVE-2026-58632: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-58632msrc2026-07-14

CVE-2026-50410: Windows Runtime Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-50410msrc2026-07-14

CVE-2026-50388: Windows NTFS Remote Code Execution Vulnerability

highCVSS 7.8CVE-2026-50388msrc2026-07-14

CVE-2026-50428: Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability

highCVSS 7.1CVE-2026-50428msrc2026-07-14

CVE-2026-50479: Windows USB Hub Driver Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-50479msrc2026-07-14

CVE-2026-58637: Windows Client-Side Caching Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-58637msrc2026-07-14

CVE-2026-58638: Windows Boot Loader Security Feature Bypass Vulnerability

mediumCVSS 6CVE-2026-58638msrc2026-07-14

CVE-2026-50686: Windows OLE Remote Code Execution Vulnerability

highCVSS 8.1CVE-2026-50686msrc2026-07-14

CVE-2026-50371: Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-50371msrc2026-07-14

CVE-2026-58602: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-58602msrc2026-07-14

CVE-2026-50476: Windows Network Connections Service Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-50476msrc2026-07-14

CVE-2026-50396: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-50396msrc2026-07-14

CVE-2026-57092: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

criticalCVSS 9.9CVE-2026-57092msrc2026-07-14

CVE-2026-50452: Windows Runtime Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-50452msrc2026-07-14

CVE-2026-50383: Windows Print Spooler Information Disclosure Vulnerability

mediumCVSS 6.1CVE-2026-50383msrc2026-07-14

CVE-2026-50374: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

mediumCVSS 6.3CVE-2026-50374msrc2026-07-14

CVE-2026-50421: Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-50421msrc2026-07-14

CVE-2026-50369: Windows Remote Desktop Services Elevation of Privilege Vulnerability

highCVSS 8.8CVE-2026-50369msrc2026-07-14

CVE-2026-50471: Windows NTFS Remote Code Execution Vulnerability

highCVSS 7.8CVE-2026-50471msrc2026-07-14

CVE-2026-50436: Windows Kernel Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-50436msrc2026-07-14

CVE-2026-50352: Windows Cryptographic Services Information Disclosure Vulnerability

mediumCVSS 5.5CVE-2026-50352msrc2026-07-14

CVE-2026-50294: Windows Kernel Information Disclosure Vulnerability

mediumCVSS 6.2CVE-2026-50294msrc2026-07-14

CVE-2026-49799: Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

mediumCVSS 6.5CVE-2026-49799msrc2026-07-14

CVE-2026-50351: Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-50351msrc2026-07-14

CVE-2026-50323: Windows Runtime Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-50323msrc2026-07-14

CVE-2026-49803: Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-49803msrc2026-07-14

CVE-2026-49805: Win32k Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-49805msrc2026-07-14

CVE-2026-49804: Windows USB Video Driver Elevation of Privilege Vulnerability

mediumCVSS 6.6CVE-2026-49804msrc2026-07-14

CVE-2026-49802: Windows USB Print Driver Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-49802msrc2026-07-14

CVE-2026-34348: Windows Event Logging Service Information Disclosure Vulnerability

mediumCVSS 6.5CVE-2026-34348msrc2026-07-14

CVE-2026-50298: Windows Spaceport.sys Elevation of Privilege Vulnerability

mediumCVSS 6.8CVE-2026-50298msrc2026-07-14

CVE-2026-50354: Windows Kernel Elevation of Privilege Vulnerability

highCVSS 7.1CVE-2026-50354msrc2026-07-14

CVE-2026-50333: Windows Spaceport.sys Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-50333msrc2026-07-14

[UPDATE] [critical] Microsoft Windows products: Multiple vulnerabilities

criticalCVE-2026-42897 CVE-2025-54518 CVE-2026-21530 CVE-2026-32161cert-bund2026-07-09

CVE-2026-48575: Secure Boot Security Feature Bypass Vulnerability

highCVSS 7.9CVE-2026-48575msrc2026-06-09

CVE-2026-50508: Windows NTLM Spoofing Vulnerability

mediumCVSS 6.5CVE-2026-50508msrc2026-06-09

CVE-2026-42829: Windows Administrator Protection Secure Feature Bypass Vulnerability

highCVSS 7.8CVE-2026-42829msrc2026-06-09

CVE-2026-42828: Windows Projected File System Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-42828msrc2026-06-09

CVE-2026-45595: Windows Mark of the Web Security Feature Bypass Vulnerability

mediumCVSS 5.4CVE-2026-45595msrc2026-06-09

CVE-2026-45596: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-45596msrc2026-06-09

CVE-2026-45601: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-45601msrc2026-06-09

CVE-2026-48573: Secure Boot Security Feature Bypass Vulnerability

highCVSS 7.9CVE-2026-48573msrc2026-06-09

CVE-2026-48578: Secure Boot Security Feature Bypass Vulnerability

highCVSS 7.9CVE-2026-48578msrc2026-06-09

CVE-2026-45603: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-45603msrc2026-06-09

CVE-2026-47648: Windows Storage Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-47648msrc2026-06-09

CVE-2026-41108: Windows DNS Client Elevation of Privilege Vulnerability

highCVSS 7CVE-2026-41108msrc2026-06-09

CVE-2026-45654: Secure Boot Security Feature Bypass Vulnerability

highCVSS 7.9CVE-2026-45654msrc2026-06-09

CVE-2026-45604: Windows Managed Installer Information Disclosure Vulnerability

mediumCVSS 5.5CVE-2026-45604msrc2026-06-09

CVE-2026-44802: Windows DWM Core Library Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-44802msrc2026-06-09

CVE-2026-48568: Secure Boot Security Feature Bypass Vulnerability

highCVSS 7.9CVE-2026-48568msrc2026-06-09

CVE-2008-4250: Microsoft Windows Buffer Overflow Vulnerability

criticalexploitedCVE-2008-4250cisa-kev2026-05-20

CVE-2023-36424: Microsoft Windows Out-of-Bounds Read Vulnerability

criticalexploitedCVE-2023-36424cisa-kev2026-04-13

CVE-2025-60710: Microsoft Windows Link Following Vulnerability

criticalexploitedCVE-2025-60710cisa-kev2026-04-13

CVE-2008-0015: Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

criticalexploitedCVE-2008-0015cisa-kev2026-02-17

CVE-2026-21533: Microsoft Windows Improper Privilege Management Vulnerability

criticalexploitedCVE-2026-21533cisa-kev2026-02-10

CVE-2026-21519: Microsoft Windows Type Confusion Vulnerability

criticalexploitedCVE-2026-21519cisa-kev2026-02-10

CVE-2026-21525: Microsoft Windows NULL Pointer Dereference Vulnerability

criticalexploitedCVE-2026-21525cisa-kev2026-02-10

CVE-2026-20805: Microsoft Windows Information Disclosure Vulnerability

criticalexploitedCVE-2026-20805cisa-kev2026-01-13

CVE-2025-62221: Microsoft Windows Use After Free Vulnerability

criticalexploitedCVE-2025-62221cisa-kev2025-12-09

CVE-2025-62215: Microsoft Windows Race Condition Vulnerability

criticalexploitedCVE-2025-62215cisa-kev2025-11-12

CVE-2025-59230: Microsoft Windows Improper Access Control Vulnerability

criticalexploitedCVE-2025-59230cisa-kev2025-10-14

CVE-2025-24990: Microsoft Windows Untrusted Pointer Dereference Vulnerability

criticalexploitedCVE-2025-24990cisa-kev2025-10-14

CVE-2011-3402: Microsoft Windows Remote Code Execution Vulnerability

criticalexploitedCVE-2011-3402cisa-kev2025-10-06

CVE-2013-3918: Microsoft Windows Out-of-Bounds Write Vulnerability

criticalexploitedCVE-2013-3918cisa-kev2025-10-06

CVE-2021-43226: Microsoft Windows Privilege Escalation Vulnerability

criticalexploitedCVE-2021-43226cisa-kev2025-10-06