Skip to contentMicrosoft Server vulnerabilities
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +10 more +12 moreWindows Shell Elevation of Privilege VulnerabilityCVE-2026-261657.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows OLE Elevation of Privilege VulnerabilityCVE-2026-261627.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Sensor Data Service Elevation of Privilege VulnerabilityCVE-2026-261617.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreRemote Desktop Licensing Service Elevation of Privilege VulnerabilityCVE-2026-261607.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreMicrosoft Local Security Authority Subsystem Service Information Disclosure VulnerabilityCVE-2026-261556.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows Server Update Service (WSUS) Tampering VulnerabilityCVE-2026-261547.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreRemote Desktop Spoofing VulnerabilityCVE-2026-261517.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Virtualization-Based Security (VBS) Security Feature Bypass VulnerabilityCVE-2026-236705.7 Medium
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Spoofing VulnerabilityCVE-2026-20945EPSS 19.8%4.6 Medium
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +9 more +11 moreApplocker Filter Driver (applockerfltr.sys) Elevation of Privilege VulnerabilityCVE-2026-251847.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Management Services Elevation of Privilege VulnerabilityCVE-2026-209307.8 High
- microsoft azure mcp server, azure mcp server tools 1.0.0 (npm), azure mcp server tools 1.0.0 (nuget) +3 more +5 moreAzure MCP Server Tools Elevation of Privilege VulnerabilityCVE-2026-26118Public exploitFix available8.8 High
- microsoft arc enabled servers - azure connected machine agent, arc enabled servers azure connected machine agent +1 moreArc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege VulnerabilityCVE-2026-261177.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution VulnerabilityCVE-2026-261098.4 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution VulnerabilityCVE-2026-261087.8 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution VulnerabilityCVE-2026-261077.8 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Remote Code Execution VulnerabilityCVE-2026-261068.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreMapUrlToZone Security Feature Bypass VulnerabilityCVE-2026-236747.5 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 22h3 +15 more +17 moreWindows Kernel Elevation of Privilege VulnerabilityCVE-2026-261327.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows SMB Server Elevation of Privilege VulnerabilityCVE-2026-26128Public exploit7.8 High
- microsoft sql server 2025 (cu 2), sql server 2025 for x64-based systems (gdr), sql server 2016 +4 more +6 moreSQL Server Elevation of Privilege VulnerabilityCVE-2026-261168.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +12 more +14 moreSQL Server Elevation of Privilege VulnerabilityCVE-2026-261158.8 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +2 moreMicrosoft SharePoint Server Remote Code Execution VulnerabilityCVE-2026-26114Public exploit8.8 High
- microsoft office, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Office Remote Code Execution VulnerabilityCVE-2026-261138.4 High
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution VulnerabilityCVE-2026-261127.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2026-261118.0 High
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Spoofing VulnerabilityCVE-2026-261058.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows GDI Remote Code Execution VulnerabilityCVE-2026-251907.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +6 more +8 moreWindows DWM Core Library Elevation of Privilege VulnerabilityCVE-2026-251897.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Telephony Service Elevation of Privilege VulnerabilityCVE-2026-251888.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWinlogon Elevation of Privilege VulnerabilityCVE-2026-251877.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Accessibility Infrastructure (ATBroker.exe) Information Disclosure VulnerabilityCVE-2026-251865.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Shell Link Processing Spoofing VulnerabilityCVE-2026-251855.3 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreGDI+ Information Disclosure VulnerabilityCVE-2026-251817.5 High
- microsoft 365 copilot, office for android, windows 10 version 1607 +29 more +31 moreWindows Graphics Component Information Disclosure VulnerabilityCVE-2026-251805.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVE-2026-251797.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVE-2026-251787.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreActive Directory Domain Services Elevation of Privilege VulnerabilityCVE-2026-25177Public exploit8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVE-2026-251767.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +19 more +21 moreWindows NTFS Elevation of Privilege VulnerabilityCVE-2026-251757.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Extensible File Allocation Table Elevation of Privilege VulnerabilityCVE-2026-251747.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2026-251738.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +19 more +21 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2026-25172Public exploit8.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Authentication Elevation of Privilege VulnerabilityCVE-2026-251717.0 High
- microsoft windows 11 version 22h3, windows 11 version 23h2, windows 11 version 24h2 +11 more +13 moreWindows Hyper-V Elevation of Privilege VulnerabilityCVE-2026-251707.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Graphics Component Denial of Service VulnerabilityCVE-2026-251696.2 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWindows Graphics Component Denial of Service VulnerabilityCVE-2026-251686.2 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreMicrosoft Brokering File System Elevation of Privilege VulnerabilityCVE-2026-251677.4 High
- microsoft windows adk for windows 10, version 2004, windows adk for windows 11, version 22h2, windows adk for windows 11, version 23h2 +14 more +16 moreWindows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution VulnerabilityCVE-2026-251667.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 morePerformance Counters for Windows Elevation of Privilege VulnerabilityCVE-2026-251657.8 High
- Show moreLoading…