한 줄 요약
Microsoft가 2026년 9월 Patch Tuesday를 통해 역대 최다인 966건의 보안 취약점을 수정했습니다. 이 중 현재 실제 공격에 악용되고 있는 제로데이(공식 패치 없이 이미 공격에 쓰이는 취약점) 2건이 포함되어 있으며, 두 취약점 모두 공격자가 Windows 시스템에서 최고 권한(SYSTEM)을 획득할 수 있게 합니다. 첫 번째는 Windows Update Stack의 링크 추적 오류, 두 번째는 Windows ALPC(고급 로컬 프로시저 호출)의 힙 버퍼 오버플로우(메모리 경계를 넘어 데이터를 덮어쓰는 공격)입니다. 105건은 '위험(Critical)' 등급이며, 그 중 81건이 원격 코드 실행(RCE, 공격자가 인터넷을 통해 시스템을 마음대로 조작할 수 있는 공격)에 해당합니다. 기업 보안 담당자는 즉시 이번 업데이트를 적용해야 하며, 특히 제로데이 2건을 최우선으로 처리해야 합니다.
사건
Microsoft가 2026년 9월 Patch Tuesday를 통해 역대 최다 규모인 966건의 취약점을 패치했으며, 그 중 2건은 Windows에서 이미 실제 공격에 악용되고 있는 제로데이 권한 상승 취약점이다.
영향
두 제로데이 모두 로컬에서 SYSTEM 권한 탈취가 가능하며, 105건의 Critical 취약점(RCE 81건 포함) 외에도 Exchange Server, Office, SQL Server, DNS Server 등 기업 핵심 인프라 전반에 영향을 미친다.
원인
첫 번째 제로데이는 Windows Update Stack의 파일 접근 전 링크 해석 오류(link following), 두 번째는 Windows ALPC의 힙 기반 버퍼 오버플로우로 인해 발생한다.
대응
2026년 9월 Patch Tuesday 업데이트를 즉시 적용해야 하며, Windows Update Stack(EoP) 및 Windows ALPC(EoP) 제로데이 패치를 최우선으로 처리해야 한다. 두 취약점은 각각 Volexity·Proofpoint 연구진과 Romain Deperne·MSTIC이 발견했다.
실무 포인트
제로데이 2건 외에도 Exchange Server RCE, Office(Word·Excel·Outlook·PowerPoint) 다수 Critical RCE, DNS Server Critical RCE, Reliable Multicast Transport Driver Critical RCE 등 기업 환경에 직결되는 고위험 취약점이 대거 포함되어 있으므로 위험도 순으로 패치 우선순위를 수립해야 한다.
본문
오늘은 Microsoft의 2026년 9월 Patch Tuesday입니다. 역대 최다 규모인 966건의 취약점에 대한 보안 업데이트가 배포되었으며, 이 중 실제 공격에 악용되고 있는 제로데이 취약점 2건이 포함되어 있습니다.
이번 Patch Tuesday에서는 105건의 "Critical(위험)" 취약점이 수정되었으며, 그 중 81건은 원격 코드 실행(RCE), 20건은 권한 상승, 2건은 정보 유출, 1건은 보안 기능 우회입니다.
BleepingComputer는 Patch Tuesday 보안 업데이트를 보도할 때 해당 Patch Tuesday 당일 Microsoft가 공개한 취약점만 집계합니다.
따라서 오늘 집계에는 이번 달 초에 선행 수정된 204건의 취약점이 포함되지 않습니다. 해당 취약점은 Azure AI Language, Azure Cosmos DB, Copilot Studio, Entra ID, Mariner, Microsoft Azure Active Directory B2C, Microsoft Discovery Studio, Microsoft Edge(Chromium 기반), Microsoft Fabric, Power Automate 등에서 수정된 것들입니다.
이번 Patch Tuesday에서는 실제 악용이 확인된 제로데이 취약점 2건이 수정되었습니다.
Microsoft는 공식 수정 패치가 없는 상태에서 공개되었거나 실제 악용된 취약점을 제로데이로 분류합니다.
이번 2026년 9월 Patch Tuesday에서 수정된 실제 악용 제로데이 취약점은 다음과 같습니다.
Microsoft는 Windows Update Stack의 권한 상승 취약점을 패치했습니다. 이 취약점은 공격자가 SYSTEM 권한을 획득할 수 있게 하며, 실제 공격에 악용되고 있는 것이 확인되었습니다.
Microsoft는 "Windows Update Stack에서 파일 접근 전 링크 해석 오류('link following')로 인해 인가된 공격자가 로컬에서 권한을 상승시킬 수 있습니다"라고 경고합니다.
해당 취약점은 Romain Deperne과 Microsoft 위협 인텔리전스 센터(MSTIC)에 의해 발견되었습니다.
공격에서 해당 취약점이 어떻게 악용되었는지에 대한 세부 정보는 공개되지 않았습니다.
Microsoft는 Windows ALPC(고급 로컬 프로시저 호출)의 취약점도 수정했습니다. 이 취약점 역시 공격에 악용되어 SYSTEM 권한 탈취에 사용되었습니다.
"Windows ALPC의 힙 기반 버퍼 오버플로우로 인해 인가된 공격자가 로컬에서 권한을 상승시킬 수 있습니다"라고 Microsoft는 설명합니다.
Microsoft는 이 취약점이 공격에서 어떻게 악용되었는지에 대한 세부 정보를 공개하지 않았습니다.
해당 취약점은 Volexity와 Proofpoint 소속의 Mark Kelly, David Galazin, Jeremy Hedges에 의해 발견되었습니다.
아래는 2026년 9월 업데이트에서 수정된 전체 취약점 목록입니다. 이 보고서에는 이번 달 초에 수정된 취약점도 포함되어 있습니다.
| Tag | CVE ID | CVE Title | Severity |
|---|---|---|---|
| .NET | CVE-2026-69805 | .NET Elevation of Privilege Vulnerability | Important |
| .NET | CVE-2026-58649 | .NET Information Disclosure Vulnerability | Important |
| .NET | CVE-2026-69806 | .NET Elevation of Privilege Vulnerability | Important |
| .NET and Visual Studio | CVE-2026-69439 | .NET and Visual Studio Elevation of Privilege Vulnerability | Important |
| Active Directory Certificate Services (AD CS) | CVE-2026-69821 | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability | Important |
| Active Directory Certificate Services (AD CS) | CVE-2026-69624 | Active Directory Certificate Services (AD CS) Tampering Vulnerability | Important |
| Active Directory Certificate Services (AD CS) | CVE-2026-62810 | Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability | Important |
| Active Directory Certificate Services (AD CS) | CVE-2026-69395 | Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability | Important |
| Active Directory Domain Services | CVE-2026-62762 | Windows Active Directory Domain Services Denial of Service Vulnerability | Important |
| Active Directory Domain Services | CVE-2026-62813 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Important |
| Active Directory Domain Services | CVE-2026-69809 | Windows Active Directory Domain Services Denial of Service Vulnerability | Important |
| Active Directory Domain Services | CVE-2026-69359 | Active Directory Domain Services Elevation of Privilege Vulnerability | Important |
| Active Directory Domain Services | CVE-2026-69524 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Important |
| Active Directory Domain Services | CVE-2026-69546 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Important |
| Active Directory Federation Services (AD FS) | CVE-2026-72978 | Active Directory Federation Services (AD FS) Denial of Service Vulnerability | Important |
| ASP.NET Core | CVE-2026-57099 | ASP.NET Core Denial of Service Vulnerability | Important |
| ASP.NET Core | CVE-2026-69304 | ASP.NET Core Denial of Service Vulnerability | Important |
| Audio Video Control Transport Protocol | CVE-2026-69401 | Audio Video Control Transport Protocol Elevation of Privilege Vulnerability | Important |
| Azure AI Language | CVE-2026-70352 | Azure AI Language Elevation of Privilege Vulnerability | Critical |
| Azure Arc | CVE-2026-62895 | Azure Arc SQL Server Extension Elevation of Privilege Vulnerability | Important |
| Azure Cosmos DB | CVE-2026-69857 | Azure Cosmos DB Spoofing Vulnerability | Critical |
| Azure CycleCloud | CVE-2026-77909 | Azure CycleCloud Information Disclosure Vulnerability | Important |
| Azure HDInsights | CVE-2026-81349 | Azure HDInsight Ambari Elevation of Privilege Vulnerability | Important |
| BranchCache | CVE-2026-69329 | BranchCache Denial of Service Vulnerability | Important |
| Connected Devices Platform Service (Cdpsvc) | CVE-2026-69516 | Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability | Important |
| Copilot Studio | CVE-2026-80098 | Copilot Studio Elevation of Privilege Vulnerability | Critical |
| Data Sharing Service Client | CVE-2026-73014 | Data Sharing Service Client Elevation of Privilege Vulnerability | Important |
| Entra ID | CVE-2026-83941 | Entra ID Elevation of Privilege Vulnerability | Critical |
| GitHub Copilot and Visual Studio Code | CVE-2026-81381 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | Important |
| GitHub Copilot and Visual Studio Code | CVE-2026-81380 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | Important |
| Graphic Fonts | CVE-2026-69576 | Graphic Fonts Elevation of Privilege Vulnerability | Important |
| Graphic Fonts | CVE-2026-72986 | Graphic Fonts Remote Code Execution Vulnerability | Critical |
| Graphic Fonts | CVE-2026-73018 | Graphic Fonts Remote Code Execution Vulnerability | Critical |
| HID class driver | CVE-2026-69731 | HID Class Driver Elevation of Privilege Vulnerability | Important |
| Internet Storage Name Service | CVE-2026-68895 | Internet Storage Name Service Information Disclosure Vulnerability | Important |
| IP Helper | CVE-2026-72981 | IP Helper Remote Code Execution Vulnerability | Critical |
| Kernel Streaming WOW Thunk Service Driver | CVE-2026-69275 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | Important |
| Kernel Streaming WOW Thunk Service Driver | CVE-2026-69900 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | Important |
| Mariner | CVE-2026-80737 | serial: amba-pl011: synchronize DMA teardown | Moderate |
| Mariner | CVE-2026-80733 | net: remove WARN_ON_ONCE() from sk_mc_loop() | Moderate |
| Mariner | CVE-2026-80732 | ata: pata_sl82c105: fix bridge revision use-after-free | Moderate |
| Mariner | CVE-2026-80738 | bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie | Moderate |
| Mariner | CVE-2026-80743 | ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers | Moderate |
| Mariner | CVE-2026-80742 | af_packet: Don't send zero-byte data in tpacket_snd(). | Moderate |
| Mariner | CVE-2026-80744 | netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path | Low |
| Mariner | CVE-2026-80731 | net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header | Moderate |
| Mariner | CVE-2026-78607 | Missing Authorization in Elasticsearch Leading to Information Disclosure | Moderate |
| Mariner | CVE-2026-78662 | Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh | Moderate |
| Mariner | CVE-2026-80757 | selinux: reject a class permission count below its inherited common | Moderate |
| Mariner | CVE-2026-78410 | Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection | Important |
| Mariner | CVE-2026-80728 | Revert "drm/amdgpu: fix aperture mapping leak" | Moderate |
| Mariner | CVE-2026-80730 | ring-buffer: Fix crash passing ERR_PTR to kthread_stop() | Moderate |
| Mariner | CVE-2026-78689 | NGINX ngx_http_js_module vulnerablility | Important |
| Mariner | CVE-2026-80726 | KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page | Moderate |
| Mariner | CVE-2026-80747 | drm/amdkfd: Add bounds check for CRAT subtype length | Moderate |
| Mariner | CVE-2026-80767 | HID: sensor: custom: Fix use-after-free in enable_sensor | Moderate |
| Mariner | CVE-2026-80768 | HID: ft260: fix stack-use-after-return write in I2C read race | Moderate |
| Mariner | CVE-2026-80783 | HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event() | Moderate |
| Mariner | CVE-2026-80766 | HID: uclogic: fix use-after-free of inrange_timer on remove | Moderate |
| Mariner | CVE-2026-80772 | HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler() | Moderate |
| Mariner | CVE-2026-80780 | HID: pidff: fix OOB write when hid->inputs is empty | Moderate |
| Mariner | CVE-2026-80770 | HID: nintendo: stop device IO before hid_hw_stop on probe failure | Moderate |
| Mariner | CVE-2026-80771 | HID: nintendo: register input device after capabilities are set | Moderate |
| Mariner | CVE-2026-80765 | HID: hyperv: validate initial device info bounds | Moderate |
| Mariner | CVE-2026-80756 | selinux: do not cancel a policy conversion that never started | Moderate |
| Mariner | CVE-2026-80782 | HID: magicmouse: do not keep a stale msc->input if no input is claimed | Moderate |
| Mariner | CVE-2026-80752 | Input: psxpad-spi - set driver data before use | Moderate |
| Mariner | CVE-2026-80755 | selinux: reject a permission value exceeding the class permission count | Moderate |
| Mariner | CVE-2026-80763 | Bluetooth: hci_event: validate LE Set CIG Parameters response | Moderate |
| Mariner | CVE-2026-80764 | Bluetooth: hci_event: fix LE list UAF on reset | Moderate |
| Mariner | CVE-2026-80761 | Bluetooth: ISO: zero the sockaddr before returning it in getname | Low |
| Mariner | CVE-2026-80762 | Bluetooth: hci_sync: Fix accept list UAF during suspend | Moderate |
| Mariner | CVE-2026-78408 | Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority | Important |
| Mariner | CVE-2026-31911 | abort() in libpcap before 1.10.7 on an invalid BPF opcode | Moderate |
| Mariner | CVE-2026-31912 | OOBR in libpcap before 1.10.7 | Moderate |
| Mariner | CVE-2026-18924 | HTTP/2 server push UAF | Moderate |
| Mariner | CVE-2026-19931 | Negotiate ambient user conn reuse | Moderate |
| Mariner | CVE-2026-56143 | Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service | Moderate |
| Mariner | CVE-2026-56855 | Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh | Moderate |
| Mariner | CVE-2026-33630 | c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP | Important |
| Mariner | CVE-2026-55951 | httpc memory exhaustion via unbounded response header accumulation | Important |
| Mariner | CVE-2026-18743 | Popt-devel: popt-static: short realloc in poptconfigfiletostring | Low |
| Mariner | CVE-2026-0799 | OOBR and OOBW in libpcap before 1.10.7 | Important |
| Mariner | CVE-2026-13608 | OpenLDAP SASL authentication bypass | Low |
| Mariner | CVE-2026-86144 | In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for example, the XML_PARSE_NONET flag, if (without it) a custom resource loader accesses the internet and triggers XML external entity injection, SSRF, or a denial of service (e.g., for an attacker-controlled internet resource that is intentionally slow). | Moderate |
| Mariner | CVE-2026-86145 | PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API). | Important |
| Mariner | CVE-2026-18313 | rpcapd memory leak in libpcap before 1.10.7 | Moderate |
| Mariner | CVE-2026-18329 | NGINX ngx_http_js_module vulnerability | Moderate |
| Mariner | CVE-2026-14957 | FIPS mode assertion failure via malicious CERT payload | Important |
| Mariner | CVE-2026-18238 | OOBR in rpcap client in libpcap before 1.10.7 | Moderate |
| Mariner | CVE-2026-59696 | uri_string does not bound the port component of a URI before integer conversion | Moderate |
| Mariner | CVE-2026-73812 | inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length | Important |
| Mariner | CVE-2026-74835 | inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception | Important |
| Mariner | CVE-2026-73270 | httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems | Important |
| Mariner | CVE-2026-73276 | inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping | Important |
| Mariner | CVE-2026-76642 | util-linux libmount Privilege Escalation via Failed Mount Helper | Moderate |
| Mariner | CVE-2026-78222 | NGINX ngx_http_js_module vulnerability | Moderate |
| Mariner | CVE-2026-74994 | inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth | Moderate |
| Mariner | CVE-2026-75538 | A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer | Important |
| Mariner | CVE-2026-72649 | Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution | Important |
| Mariner | CVE-2026-66357 | inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation | Important |
| Mariner | CVE-2026-66835 | httpd mod_auth directory protection bypassed by a doubled slash in the request path | Important |
| Mariner | CVE-2026-6244 | division by zero in libpcap before 1.10.7 | Moderate |
| Mariner | CVE-2026-6554 | infinte loop in libpcap before 1.10.7 | Moderate |
| Mariner | CVE-2026-71380 | httpd applies no timeout while receiving a request body, parking a worker on a stalled client | Important |
| Mariner | CVE-2026-71562 | httpc does not bound server-supplied numeric header values before integer conversion | Moderate |
| Mariner | CVE-2026-69664 | httpd parks a request worker indefinitely on a malformed chunk size sent after the headers | Important |
| Mariner | CVE-2026-70409 | eldap does not bound the port component of a referral URL before integer conversion | Moderate |
| Mariner | CVE-2026-80784 | mptcp: pm: fix memory leak from alloc-during-teardown race | Low |
| Mariner | CVE-2026-82208 | wolfSSL CA-cache hit overrides callback | Important |
| Mariner | CVE-2026-83605 | xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed | Important |
| Mariner | CVE-2026-83607 | xmldom: Element name injection via createElement() bypasses requireWellFormed | Important |
| Mariner | CVE-2026-80910 | ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses | Low |
| Mariner | CVE-2026-80912 | selinux: reject an unclaimed class value in security_get_classes() | Moderate |
| Mariner | CVE-2026-80913 | selinux: require every boolean value to be defined | Moderate |
| Mariner | CVE-2026-83613 | xmldom: Quadratic-time attribute deduplication | Important |
| Mariner | CVE-2026-83614 | xmldom: Quadratic-time parsing via the malformed-input recovery path — parseElementStartPart re-scan and normalize() adjacent-text merge | Important |
| Mariner | CVE-2026-83615 | xmldom: Quadratic-memory consumption | Important |
| Mariner | CVE-2026-83608 | xmldom: DocType name Injection Bypasses requireWellFormed | Important |
| Mariner | CVE-2026-83610 | xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization | Moderate |
| Mariner | CVE-2026-83611 | xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content | Moderate |
| Mariner | CVE-2026-80909 | drm/amdgpu: Reject UVD message with invalid number of h265 refs | Important |
| Mariner | CVE-2026-80888 | drm/vmwgfx: drop dma_buf reference on foreign-fd prime import | Moderate |
| Mariner | CVE-2026-80889 | can: isotp: fix timer drain order, wakeup handling and tx_gen ordering | Low |
| Mariner | CVE-2026-80890 | sctp: reject stale cookies with mismatched verification tags | Moderate |
| Mariner | CVE-2026-80864 | RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp | Moderate |
| Mariner | CVE-2026-80866 | tipc: avoid busy looping in tipc_exit_net() | Moderate |
| Mariner | CVE-2026-80872 | ALSA: hda/tas2781: Cancel async firmware request at unbind | Moderate |
| Mariner | CVE-2026-80902 | dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA | Moderate |
| Mariner | CVE-2026-80904 | net/tls: Fail tls_sw_splice_read() after a failed async decrypt | Moderate |
| Mariner | CVE-2026-80905 | net: tap: fix wrong transport_header when sending VLAN-tagged frame | Moderate |
| Mariner | CVE-2026-80891 | KVM: s390: pci: Validate AIBV and AISB before pinning guest pages | Moderate |
| Mariner | CVE-2026-80892 | erofs: cap LZMA stream pool size | Low |
| Mariner | CVE-2026-80893 | mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() | Low |
| Mariner | CVE-2026-86090 | ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers | Important |
| Mariner | CVE-2026-86091 | ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler | Important |
| Mariner | CVE-2026-86137 | In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp. | Low |
| Mariner | CVE-2026-85507 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info). | Critical |
| Mariner | CVE-2026-85508 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info). | Critical |
| Mariner | CVE-2026-85509 | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested. | Critical |
| Mariner | CVE-2026-86141 | xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking. | Low |
| Mariner | CVE-2026-86142 | In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation. | Moderate |
| Mariner | CVE-2026-86143 | In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback. | Moderate |
| Mariner | CVE-2026-86138 | In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow. | Moderate |
| Mariner | CVE-2026-86139 | In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow. | Moderate |
| Mariner | CVE-2026-86140 | In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow. | Important |
| Mariner | CVE-2026-85506 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info). | Critical |
| Mariner | CVE-2026-84303 | gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion | Moderate |
| Mariner | CVE-2026-84304 | gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation | Important |
| Mariner | CVE-2026-84838 | Rpm: command injection in rpmuncompress via unescaped filenames passed to popen() | Important |
| Mariner | CVE-2026-83616 | xmldom: Processing Instruction Target Injection Bypasses requireWellFormed | Important |
| Mariner | CVE-2026-83619 | xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser | Important |
| Mariner | CVE-2026-84233 | Rpm: command execution via macro expansion in rpmuncompress -x for crafted .gem filenames | Moderate |
| Mariner | CVE-2026-85396 | rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix | Important |
| Mariner | CVE-2026-85504 | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses. | Critical |
| Mariner | CVE-2026-85505 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 (which has different affected versions). | Moderate |
| Mariner | CVE-2026-85062 | Colord: Slow rejection of oversized malformed color strings | Moderate |
| Mariner | CVE-2026-85091 | zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate | Important |
| Mariner | CVE-2026-85393 | node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding | Important |
| Mariner | CVE-2026-80863 | RDMA/rxe: Fix OOB in free_rd_atomic_resources() | Moderate |
| Mariner | CVE-2026-80805 | xfs: validate attr entry pointer before field access | Moderate |
| Mariner | CVE-2026-80806 | ext4: don't enable DAX on new encrypted files | Moderate |
| Mariner | CVE-2026-80807 | nilfs2: reject invalid block index in GC ioctl | Moderate |
| Mariner | CVE-2026-80801 | nfc: microread: validate target discovery payload lengths | Moderate |
| Mariner | CVE-2026-80802 | nfc: fdp: bound the device-reported read length and fix an skb leak | Moderate |
| Mariner | CVE-2026-80803 | nfc: digital: clamp SENSF_RES length to the destination buffer | Important |
| Mariner | CVE-2026-80820 | xfs: don't livelock in scrub on a circular unlinked list | Moderate |
| Mariner | CVE-2026-80823 | nfc: st21nfca: validate ATR_REQ length against the received frame | Important |
| Mariner | CVE-2026-80824 | usb: usbfs: fix use-after-free of usb_device in usbdev_release() | Moderate |
| Mariner | CVE-2026-80808 | ext4: stop retrying saturated xattr cache entries | Moderate |
| Mariner | CVE-2026-80809 | ocfs2: fix missing metadata reservation for large xattrs | Moderate |
| Mariner | CVE-2026-80819 | Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept | Moderate |
| Mariner | CVE-2026-80800 | nfc: llcp: bound the connect_sn TLV walk to the skb | Important |
| Mariner | CVE-2026-80790 | nvmet-fc: fix invalid free in LS IOD error path | Moderate |
| Mariner | CVE-2026-80791 | nvmet-auth: zero the AUTH_RECEIVE response buffer | Important |
| Mariner | CVE-2026-80792 | ipv6: fix use-after-free in ip6_finish_output2() | Important |
| Mariner | CVE-2026-80785 | fbdev: serialize mode sysfs access with lock_fb_info() | Moderate |
| Mariner | CVE-2026-80788 | nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations | Important |
| Mariner | CVE-2026-80789 | nvmet-tcp: bound SGL data length before allocating command buffers | Important |
| Mariner | CVE-2026-80797 | nfc: pn533: purge fragmented skbs during cleanup | Low |
| Mariner | CVE-2026-80798 | nfc: llcp: reject PDUs shorter than the LLCP header | Important |
| Mariner | CVE-2026-80799 | nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers | Important |
| Mariner | CVE-2026-80793 | ipv4: reject undersized MTUs in ip_do_fragment() | Moderate |
| Mariner | CVE-2026-80794 | nfc: nci: fix uninit-value in the RF discover/activated NTF handlers | Moderate |
| Mariner | CVE-2026-80796 | nfc: nci: add data_len bound checks to activation parameter extractors | Moderate |
| Mariner | CVE-2026-80846 | xfrm: drop ESP-in-TCP packets with no ingress device | Moderate |
| Mariner | CVE-2026-80847 | tcp: clamp route advmss to TCP_MIN_MSS | Moderate |
| Mariner | CVE-2026-80848 | xfrm: espintcp: fix UAF during close | Moderate |
| Mariner | CVE-2026-80842 | net: bridge: mcast: fix use-after-free of a master VLAN's multicast context | Moderate |
| Mariner | CVE-2026-80843 | xfrm: fix xfrm_state_construct() auth-trunc leak | Low |
| Mariner | CVE-2026-80844 | xfrm: ah6: validate routing header segments_left | Moderate |
| Mariner | CVE-2026-80855 | fuse: fix invalidate lock leak on open O_TRUNC DAX failure | Moderate |
| Mariner | CVE-2026-80856 | fuse: fix invalidate lock leak on setattr writeback failure | Moderate |
| Mariner | CVE-2026-80861 | usb: xhci: bail out of setup if the controller is inaccessible | Moderate |
| Mariner | CVE-2026-80851 | gtp: serialize PDP context updates | Moderate |
| Mariner | CVE-2026-80852 | tls: device: fix out-of-bounds write in tls_append_frag() | Moderate |
| Mariner | CVE-2026-80854 | usb: gadget: f_tcm: keep port count until LUN teardown completes | Moderate |
| Mariner | CVE-2026-80841 | net/packet: defer vmalloc TX_RING free until skbs finish | Moderate |
| Mariner | CVE-2026-80829 | ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() | Moderate |
| Mariner | CVE-2026-80830 | usb: core: Add lock to usb_wakeup_notification() | Moderate |
| Mariner | CVE-2026-80831 | crypto: mxs-dcp - fix source scatterlist length access | Moderate |
| Mariner | CVE-2026-80826 | USB: c67x00: fix use-after-free in c67x00_add_iso_urb() | Moderate |
| Mariner | CVE-2026-80827 | USB: serial: option: fix slab OOB read in interrupt URB callback | Low |
| Mariner | CVE-2026-80828 | ALSA: usb-audio: Complete cleanup after system-resume errors | Moderate |
| Mariner | CVE-2026-80836 | crypto: virtio - bound the akcipher result length | Moderate |
| Mariner | CVE-2026-80837 | netfilter: nf_tables: don't queue packet path object notifications | Important |
| Mariner | CVE-2026-80840 | ipv6: seg6: clear IPv4 control block on IPIP decapsulation | Important |
| Mariner | CVE-2026-80832 | crypto: qce - fix CCM AAD buffer underallocation | Moderate |
| Mariner | CVE-2026-80833 | crypto: sun8i-ss - Remove crypto_rng interface | Moderate |
| Mariner | CVE-2026-80834 | crypto: sun8i-ce - Remove crypto_rng interface | Moderate |
| Mariner | CVE-2025-70873 | An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file. | Important |
| Mariner | CVE-2026-34182 | CMS AuthEnvelopedData Processing May Accept Forged Messages | Critical |
| Microsoft Account | CVE-2026-68850 | Microsoft Account Elevation of Privilege Vulnerability | Important |
| Microsoft Account | CVE-2026-68852 | Microsoft Account Information Disclosure Vulnerability | Important |
| Microsoft Authentication Library (MSAL) for Node.js | CVE-2026-84003 | Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability | Important |
| Microsoft Authenticator | CVE-2026-80097 | Microsoft Authenticator Elevation of Privilege Vulnerability | Important |
| Microsoft Azure Active Directory B2C | CVE-2026-83711 | Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability | Critical |
| Microsoft Azure CLI | CVE-2026-83948 | Microsoft Azure CLI Remote Code Execution Vulnerability | Important |
| Microsoft COM for Windows | CVE-2026-69294 | Microsoft COM for Windows Information Disclosure Vulnerability | Important |
| Microsoft COM for Windows | CVE-2026-69299 | Microsoft COM for Windows Elevation of Privilege Vulnerability | Important |
| Microsoft Discovery Studio | CVE-2026-62906 | Microsoft Discovery Studio Information Disclosure Vulnerability | Critical |
| Microsoft Dynamics 365 | CVE-2026-77908 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | Important |
| Microsoft Dynamics 365 | CVE-2026-65772 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | Critical |
| Microsoft Edge (Chromium-based) | CVE-2026-84335 | Chromium: CVE-2026-84335 Incorrect authorization in TabStrip | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84351 | Chromium: CVE-2026-84351 Buffer overflow in GPU | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84348 | Chromium: CVE-2026-84348 Information leak in MediaCapture | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84347 | Chromium: CVE-2026-84347 Use after free in WebRTC | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84350 | Chromium: CVE-2026-84350 Use after free in TabStrip | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84349 | Chromium: CVE-2026-84349 Use after free in Browser | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84353 | Chromium: CVE-2026-84353 Use after free in Shared Tab Groups | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84357 | Chromium: CVE-2026-84357 Improper input validation in Omnibox | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84358 | Chromium: CVE-2026-84358 Improper privilege management in Downloads | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84359 | Chromium: CVE-2026-84359 Information leak in Skia | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84354 | Chromium: CVE-2026-84354 Incorrect authorization in FileSystem | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84355 | Chromium: CVE-2026-84355 Incorrect authorization in Navigation | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84356 | Chromium: CVE-2026-84356 UI misrepresentation in FullScreen | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84327 | Chromium: CVE-2026-84327 Incorrect authorization in Autofill | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84326 | Chromium: CVE-2026-84326 Uninitialized resource in V8 | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84332 | Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84331 | Chromium: CVE-2026-84331 Incorrect authorization in Actor | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84329 | Chromium: CVE-2026-84329 Confused deputy in CredentialProvider | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84328 | Chromium: CVE-2026-84328 Missing authorization in FileSystem | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84323 | Chromium: CVE-2026-84323 Missing authorization in FileSystem | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84334 | Chromium: CVE-2026-84334 Incorrect authorization in Chromoting | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84325 | Chromium: CVE-2026-84325 Improper input validation in DataTransfer | Unknown |
| Microsoft Edge (Chromium-based) | CVE-2026-84324 | Chromium: CVE-2026-84324 Use after free in Proxy | Unknown |
| Microsoft Entra ID | CVE-2026-62916 | Microsoft Entra ID Elevation of Privilege Vulnerability | Critical |
| Microsoft Exchange Server | CVE-2026-69355 | Microsoft Exchange Server Remote Code Execution Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-69641 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-55007 | Microsoft Exchange Server Remote Code Execution Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-69356 | Microsoft Exchange Server Spoofing Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-69375 | Microsoft Exchange Server Tampering Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-69361 | Microsoft Exchange Server Spoofing Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-69380 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-69382 | Microsoft Exchange Server Information Disclosure Vulnerability | Important |
| Microsoft Exchange Server | CVE-2026-69378 | Microsoft Exchange Server Denial of Service Vulnerability | Important |
| Microsoft Fabric | CVE-2026-70178 | Microsoft Fabric Elevation of Privilege Vulnerability | Critical |
| Microsoft Graphics Component | CVE-2026-73016 | DirectWrite Remote Code Execution Vulnerability | Important |
| Microsoft Graphics Component | CVE-2026-84000 | Microsoft Graphics Component Remote Code Execution Vulnerability | Important |
| Microsoft Graphics Component | CVE-2026-78439 | Microsoft Office Graphics Component Remote Code Execution Vulnerability | Critical |
| Microsoft Graphics Component | CVE-2026-81955 | Windows Graphics Component Remote Code Execution Vulnerability | Critical |
| Microsoft Graphics Component | CVE-2026-69467 | Microsoft Graphics Component Elevation of Privilege Vulnerability | Important |
| Microsoft Graphics Component | CVE-2026-83990 | Microsoft Graphics Component Elevation of Privilege Vulnerability | Important |
| Microsoft Graphics Component | CVE-2026-73006 | DirectWrite Remote Code Execution Vulnerability | Critical |
| Microsoft Graphics Component | CVE-2026-77493 | Windows Graphics Component Remote Code Execution Vulnerability | Critical |
| Microsoft Install Service | CVE-2026-69605 | Microsoft Install Service Elevation of Privilege Vulnerability | Important |
| Microsoft JScript | CVE-2026-69438 | Microsoft JScript Remote Code Execution Vulnerability | Important |
| Microsoft JScript | CVE-2026-69325 | Microsoft JScript Remote Code Execution Vulnerability | Important |
| Microsoft Local Security Authority Server (lsasrv) | CVE-2026-69594 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | Important |
| Microsoft Local Security Authority Server (lsasrv) | CVE-2026-69365 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | Important |
| Microsoft Local Security Authority Server (lsasrv) | CVE-2026-69277 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability | Important |
| Microsoft Office | CVE-2026-80091 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-80087 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-80089 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-69442 | Microsoft Office Remote Code Execution Vulnerability | Important |
| Microsoft Office | CVE-2026-69285 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-69739 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-78505 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-80082 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-64918 | Microsoft Office Spoofing Vulnerability | Important |
| Microsoft Office | CVE-2026-77898 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-69632 | Microsoft Office Remote Code Execution Vulnerability | Critical |
| Microsoft Office | CVE-2026-78524 | Microsoft Office Remote Code Execution Vulnerability | Important |
| Microsoft Office | CVE-2026-69626 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-80076 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office | CVE-2026-80078 | Microsoft Office Information Disclosure Vulnerability | Important |
| Microsoft Office Access | CVE-2026-69778 | Microsoft Office Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-69477 | Microsoft Office Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-69529 | Microsoft Office Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Access | CVE-2026-69614 | Microsoft Office Access Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81949 | Microsoft Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-81401 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81948 | Microsoft Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-81950 | Microsoft Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-81947 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81959 | Microsoft Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-81958 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-85875 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81960 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81957 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81953 | Microsoft Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-81951 | Microsoft Excel Remote Code Execution Vulnerability | Critical |
| Microsoft Office Excel | CVE-2026-81956 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81954 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81390 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81394 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81391 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81396 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81395 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81392 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-72974 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81388 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81393 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81386 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81389 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81397 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81400 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81398 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81399 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-78518 | Microsoft Office Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-81387 | Microsoft Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Excel | CVE-2026-78515 | Microsoft Office Excel Information Disclosure Vulnerability | Important |
| Microsoft Office Outlook | CVE-2026-78509 | Microsoft Office Outlook Remote Code Execution Vulnerability | Critical |
| Microsoft Office Outlook | CVE-2026-78520 | Microsoft Office Outlook Information Disclosure Vulnerability | Critical |
| Microsoft Office Outlook | CVE-2026-78525 | Microsoft Office Outlook Remote Code Execution Vulnerability | Critical |
| Microsoft Office Outlook | CVE-2026-78519 | Microsoft Office Outlook Remote Code Execution Vulnerability | Critical |
| Microsoft Office Outlook | CVE-2026-80073 | Microsoft Office Outlook Information Disclosure Vulnerability | Important |
| Microsoft Office Outlook | CVE-2026-69629 | Microsoft Office Outlook Remote Code Execution Vulnerability | Important |
| Microsoft Office Outlook | CVE-2026-80084 | Microsoft Office Outlook Information Disclosure Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-69678 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Critical |
| Microsoft Office PowerPoint | CVE-2026-80081 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-78513 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-80086 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-72938 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-72956 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-69797 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Critical |
| Microsoft Office PowerPoint | CVE-2026-69767 | Microsoft Office PowerPoint Remote Code Execution Vulnerability | Critical |
| Microsoft Office PowerPoint | CVE-2026-72977 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important |
| Microsoft Office PowerPoint | CVE-2026-72975 | Microsoft Office PowerPoint Information Disclosure Vulnerability | Important |
| Microsoft Office Publisher | CVE-2026-69742 | Microsoft Office Publisher Remote Code Execution Vulnerability | Important |
| Microsoft Office Publisher | CVE-2026-81385 | Microsoft Office Publisher Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-69636 | Microsoft Office SharePoint Information Disclosure Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-69683 | Microsoft Office SharePoint Information Disclosure Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-69409 | Microsoft Office SharePoint Information Disclosure Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-69402 | Microsoft Office SharePoint Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-69465 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-69724 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-69464 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-69268 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-69615 | Microsoft Office SharePoint Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-69273 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-69716 | Microsoft Office SharePoint Elevation of Privilege Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-69690 | Microsoft Office SharePoint Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-69282 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-69417 | Microsoft Office SharePoint Spoofing Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-69804 | Microsoft Office SharePoint Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2026-69904 | Microsoft Office SharePoint Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-78526 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-78521 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-69764 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-78522 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-69759 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-78510 | Microsoft Word Remote Code Execution Vulnerability | Critical |
| Microsoft Office Word | CVE-2026-78512 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-78506 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-78514 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-78511 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-69734 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-78517 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-72976 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-72972 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-72973 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-69722 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-78502 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-69671 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-69686 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-83951 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-83949 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-78503 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-81952 | Microsoft Word Remote Code Execution Vulnerability | Critical |
| Microsoft Office Word | CVE-2026-80085 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-80079 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-80080 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-78504 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-78507 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-80088 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-80090 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-69556 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-69360 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-77901 | Microsoft Office Word Remote Code Execution Vulnerability | Important |
| Microsoft Office Word | CVE-2026-77504 | Microsoft Office Word Remote Code Execution Vulnerability | Critical |
| Microsoft Office Word | CVE-2026-77911 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-69719 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-68843 | Microsoft Office Word Information Disclosure Vulnerability | Important |
| Microsoft Office Word | CVE-2026-62804 | Microsoft Word Remote Code Execution Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-68889 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-69271 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-69376 | Microsoft Standard XPS Information Disclosure Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-68890 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-69269 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-68897 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-68892 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-68891 | Microsoft Standard XPS Information Disclosure Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-69345 | Microsoft Standard XPS Information Disclosure Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-68888 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-69336 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-69367 | Microsoft Standard XPS Information Disclosure Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-69313 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-69308 | Microsoft Standard XPS Information Disclosure Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-69824 | Microsoft Standard XPS Remote Code Execution Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-68881 | Microsoft Standard XPS Information Disclosure Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-68885 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important |
| Microsoft Standard XPS | CVE-2026-69272 | Microsoft Standard XPS Elevation of Privilege Vulnerability | Important |
| Microsoft Teams for Android | CVE-2026-69559 | Microsoft Teams for Android Information Disclosure Vulnerability | Important |
| Microsoft Teams for Android | CVE-2026-65812 | Microsoft Teams for Android Information Disclosure Vulnerability | Important |
| Microsoft Trace Data Helper | CVE-2026-56198 | Microsoft Trace Data Helper Elevation of Privilege Vulnerability | Important |
| Microsoft UxTheme Library (uxtheme.dll) | CVE-2026-69276 | Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability | Important |
| Microsoft WDAC OLE DB provider for SQL | CVE-2026-72933 | Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability | Important |
| Microsoft WebP Image Extension | CVE-2026-70351 | Microsoft WebP Image Extension Remote Code Execution Vulnerability | Critical |
| Microsoft Windows Codecs Library | CVE-2026-58600 | HEVC Video Extensions Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Codecs Library | CVE-2026-81353 | HEIF Image Extensions Remote Code Execution Vulnerability | Important |
| Microsoft Windows Codecs Library | CVE-2026-81352 | Web Media Extensions Remote Code Execution Vulnerability | Critical |
| Microsoft Windows Codecs Library | CVE-2026-58599 | HEVC Video Extensions Remote Code Execution Vulnerability | Critical |
| Microsoft Windows Media Foundation | CVE-2026-69408 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important |
| Microsoft Windows Media Foundation | CVE-2026-62706 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important |
| Microsoft Windows Media Foundation | CVE-2026-69386 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important |
| Microsoft Windows Media Foundation | CVE-2026-62744 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important |
| Microsoft Windows Media Foundation | CVE-2026-69601 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Critical |
| Microsoft Windows Media Foundation | CVE-2026-69511 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important |
| Microsoft Windows PDF | CVE-2026-69586 | Microsoft Windows PDF Remote Code Execution Vulnerability | Important |
| Microsoft Windows SCSI Class System File | CVE-2026-78452 | Microsoft Windows SCSI Class System File Information Disclosure Vulnerability | Important |
| Microsoft Windows SCSI Class System File | CVE-2026-78451 | Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability | Important |
| Microsoft Windows SCSI Class System File | CVE-2026-78453 | Microsoft Windows SCSI Class System File Information Disclosure Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-69453 | Microsoft Windows Search Component Tampering Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-69554 | Microsoft Windows Search Component Tampering Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-69305 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-69507 | Microsoft Windows Search Component Information Disclosure Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-70145 | Microsoft Windows Search Component Information Disclosure Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-69322 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-69585 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-68896 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-69608 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-69911 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Search Component | CVE-2026-69600 | Microsoft Windows Search Component Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Speech | CVE-2026-69531 | Microsoft Windows Speech Tampering Vulnerability | Important |
| Microsoft Windows Speech | CVE-2026-69444 | Microsoft Windows Speech Elevation of Privilege Vulnerability | Important |
| Microsoft Windows Speech | CVE-2026-69456 | Microsoft Windows Speech Elevation of Privilege Vulnerability | Important |
| OpenSSH for Windows | CVE-2026-69397 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | Important |
| Power Automate | CVE-2026-65818 | Power Automate Elevation of Privilege Vulnerability | Critical |
| Power Automate | CVE-2026-77897 | Microsoft Power Automate Desktop Elevation of Privilege Vulnerability | Important |
| Push Message Routing Service | CVE-2026-69303 | Push Message Routing Service Information Disclosure Vulnerability | Important |
| Reliable Multicast Transport Driver (RMCAST) | CVE-2026-78449 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Critical |
| Reliable Multicast Transport Driver (RMCAST) | CVE-2026-78450 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Critical |
| Reliable Multicast Transport Driver (RMCAST) | CVE-2026-69530 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Critical |
| Remote Desktop Client | CVE-2026-69485 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-69358 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-80074 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-68828 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-83998 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-78463 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-77896 | Windows Remote Desktop Client Denial of Service Vulnerability | Important |
| Remote Desktop Client | CVE-2026-80077 | Remote Desktop Client Remote Code Execution Vulnerability | Important |
| Remote Desktop Client | CVE-2026-69317 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important |
| Remote Desktop Gateway Service | CVE-2026-69292 | Remote Desktop Gateway Service Elevation of Privilege Vulnerability | Important |
| Remote Desktop Gateway Service | CVE-2026-69338 | Remote Desktop Gateway Service Elevation of Privilege Vulnerability | Important |
| Role: DNS Server | CVE-2026-69989 | Windows DNS Server Remote Code Execution Vulnerability | Important |
| Role: DNS Server | CVE-2026-69827 | Windows DNS Server Remote Code Execution Vulnerability | Critical |
| Role: DNS Server | CVE-2026-77505 | Windows DNS Server Remote Code Execution Vulnerability | Critical |
| Role: DNS Server | CVE-2026-69782 | Windows DNS Server Remote Code Execution Vulnerability | Important |
| Role: Windows Fax Service | CVE-2026-69621 | Role: Windows Fax Service Elevation of Privilege Vulnerability | Important |
| Role: Windows Fax Service | CVE-2026-72944 | Role: Windows Fax Service Elevation of Privilege Vulnerability | Important |
| Role: Windows Fax Service | CVE-2026-69509 | Role: Windows Fax Service Elevation of Privilege Vulnerability | Important |
| RPC Runtime | CVE-2026-69819 | RPC Runtime Library Remote Code Execution Vulnerability | Important |
| Skype for Business | CVE-2026-66308 | Skype for Business and Lync Denial of Service Vulnerability | Important |
| Skype for Business | CVE-2026-66302 | Skype for Business Remote Code Execution Vulnerability | Critical |
| Skype for Business | CVE-2026-63523 | Skype for Business Spoofing Vulnerability | Important |
| Skype for Business | CVE-2026-69646 | Skype for Business Spoofing Vulnerability | Important |
| Skype for Business | CVE-2026-66303 | Skype for Business and Lync Denial of Service Vulnerability | Important |
| Skype for Business | CVE-2026-69642 | Skype for Business Spoofing Vulnerability | Important |
| Skype for Business | CVE-2026-66307 | Skype for Business and Lync Denial of Service Vulnerability | Important |
| Skype for Business | CVE-2026-66304 | Skype for Business Information Disclosure Vulnerability | Important |
| Skype for Business | CVE-2026-66305 | Skype for Business Spoofing Vulnerability | Important |
| Skype for Business | CVE-2026-66306 | Skype for Business Information Disclosure Vulnerability | Important |
| Spring Cloud Azure | CVE-2026-69854 | Spring Cloud Azure Elevation of Privilege Vulnerability | Critical |
| SQL Server | CVE-2026-67624 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-77482 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-67629 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-67380 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-67638 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-67379 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-67378 | Microsoft SQL Server Remote Code Execution Vulnerability | Critical |
| SQL Server | CVE-2026-67630 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-67376 | Microsoft SQL Server Denial of Service Vulnerability | Important |
| SQL Server | CVE-2026-67369 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-67370 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-67383 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-67368 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-68787 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-77481 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-67373 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-67639 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-67388 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-67389 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-67386 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-77487 | SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-67393 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-67390 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-67631 | Microsoft SQL Server Remote Code Execution Vulnerability | Critical |
| SQL Server | CVE-2026-77488 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-67642 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-68777 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-77485 | SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-78456 | SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-77483 | SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-77484 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-67381 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-77486 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-67385 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-67641 | Microsoft SQL Server Denial of Service Vulnerability | Important |
| SQL Server | CVE-2026-67384 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-68778 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-65669 | Microsoft SQL Server Elevation of Privilege Vulnerability | Critical |
| SQL Server | CVE-2026-68785 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-67648 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-66820 | SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-67643 | Microsoft SQL Server Remote Code Execution Vulnerability | Critical |
| SQL Server | CVE-2026-66814 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important |
| SQL Server | CVE-2026-47297 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-68775 | Microsoft SQL Server Remote Code Execution Vulnerability | Important |
| SQL Server | CVE-2026-68780 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-69562 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-68776 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
| SQL Server | CVE-2026-68784 | Microsoft SQL Server Information Disclosure Vulnerability | Important |
출처
BleepingComputer · bleepingcomputer.com
관련 투런 솔루션
이 뉴스의 취약점·위협, 투런 솔루션으로 대응하세요.
