Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 17,776 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked about an hour ago Checked every 6 hours
All vendor sources Official source

17,776 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-45657
CriticalCVSS 9.8

Windows Kernel Remote Code Execution Vulnerability

Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems
Fixed versions10.0.20348.5256, 10.0.26100.32995, 10.0.26200.8655, 10.0.22631.7219
Vendor guidance

Install KB5094128. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051.

CVE-2026-45657
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-45648
CriticalCVSS 8.8

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows Server 2025
Fixed versions10.0.20348.5256, 10.0.26100.32995
Vendor guidance

Install KB5094128. Install KB5094125.

CVE-2026-45648
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-45641
CriticalCVSS 8.4

Windows Hyper-V Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Hyper-V allows an unauthorized attacker to execute code locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for x64-based Systems
Fixed versions10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417, 10.0.26100.32995
Vendor guidance

Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051.

CVE-2026-45641
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-45607
CriticalCVSS 8.4

Windows Hyper-V Remote Code Execution Vulnerability

Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.

Affected productsWindows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417
Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122.

CVE-2026-45607
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-44810
CriticalCVSS 8.4

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems
Fixed versions10.0.20348.5256, 10.0.26100.32995, 10.0.26200.8655, 10.0.22631.7219
Vendor guidance

Install KB5094128. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051.

CVE-2026-44810
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-44801
CriticalCVSS 7.5

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8880, 1.2.7214.0, 10.0.20348.5256, 10.0.19044.7417
Vendor guidance

Release Notes Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-44801
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-44799
CriticalCVSS 7.5

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8880, 1.2.7214.0, 10.0.20348.5256, 10.0.19044.7417
Vendor guidance

Release Notes Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-44799
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-42992
CriticalCVSS 7.5

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417
Vendor guidance

Release Notes Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122.

CVE-2026-42992
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-42987
CriticalCVSS 8.1

Windows Deployment Services (WDS) Remote Code Execution

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.26100.32995, 10.0.14393.9234
Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094125. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-42987
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-42985
CriticalCVSS 8.8

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Affected productsWindows App Client for Windows Desktop, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019
Fixed versions2.0.1193.0, 10.0.17763.8880, 1.2.7214.0, 10.0.20348.5256
Vendor guidance

Release Notes Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-42985
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-33828
CriticalCVSS 7.8

Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability

Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417
Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122.

CVE-2026-33828
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-26142
CriticalCVSS 9.8

Nuance PowerScribe Remote Code Execution Vulnerability

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

Affected productsNuance PowerScribe 360 version 4.0.5, Nuance PowerScribe 360 version 4.0.6, Nuance PowerScribe 360 version 4.0.7, Nuance PowerScribe 360 version 4.0.8
Fixed versions7.0.243.19, 7.0.277.28, 7.0.316.12, 7.0.427.15
Vendor guidance

Release Notes

CVE-2026-26142
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-10263
CriticalCVSS 9.3

ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]

No cwe for this issue in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems
Fixed versions10.0.28000.2269, 10.0.19044.7417, 10.0.19045.7417, 10.0.26200.8655
Vendor guidance

Install KB5095051. Install KB5094127. Install KB5094126. Install KB5093998.

CVE-2025-10263
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21330
HighCVSS 7.5

Windows Remote Desktop Services Denial of Service Vulnerability

According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of availability (A:H). What does that mean for this vulnerability? An attacker can send specially crafted packets which could affect availability of the service and result in ...

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.28000.2269, 10.0.17763.6775, 10.0.20348.3091, 10.0.19044.5371
Vendor guidance

Install KB5095051. Install KB5050008. Install KB5049983. Install KB5049981. Install KB5050021. Install KB5050009. Install KB5049984.

CVE-2025-21330
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49075
HighCVSS 7.5

Windows Remote Desktop Services Denial of Service Vulnerability

Windows Remote Desktop Services

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.6659, 10.0.20348.2966, 10.0.20348.2908, 10.0.19044.5247
Vendor guidance

Install KB5048661. Install KB5048654. Install KB5048800. Install KB5048652. Install KB5048685. Install KB5048667. Install KB5048794. Install KB5048653. Install KB5095051.

CVE-2024-49075
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-8863
HighCVSS 7.8

UEFI Secure Boot Security Feature Bypass Vulnerability

No cwe for this issue in Windows UEFI allows an authorized attacker to bypass a security feature locally.

Affected productsWindows Server 2019, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417
Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094126. Install KB5094125. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-8863
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-50508
HighCVSS 6.5

Windows NTLM Spoofing Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows Server, version 2004 (Server Core installation), Windows 11 Version 22H2 for ARM64-based Systems
Fixed versions10.0.20348.5256, 10.0.19045.7417, 10.0.22631.7219, 10.0.14393.9234
Vendor guidance

Install KB5094128. Install KB5094127. Install KB5093998. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-50508
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-49160
HighCVSS 7.5

HTTP.sys Denial of Service Vulnerability

Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network.

Affected productsWindows Server 2019 (Server Core installation), Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems
Fixed versions10.0.17763.8880, 10.0.19044.7417, 10.0.20348.5256, 10.0.19045.7417
Vendor guidance

Install KB5094123. Install KB5094127. Install KB5094128. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122.

CVE-2026-49160
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-48583
HighCVSS 7.8

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417
Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122.

CVE-2026-48583
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources