{ "generated_at": "2026-11-03T12:30:29.797234Z", "months_covered": [ "2026-Nov", "2026-Oct", "2026-Sep" ], "total_cves": 100, "exploited_in_wild": 2, "likely_exploited": 55, "cisa_kev_count": 2, "epss_annotated": 100, "primitive_breakdown": { "privilege-escalation": 45, "rce-remote": 24, "kernel-exploit": 15, "auth-bypass": 2, "other": 14 }, "cves": [ { "id": "CVE-2026-81963", "month": "2026-Sep", "title": "Windows Update Stack Elevation of Privilege Vulnerability", "description": "", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected", "exploited_in_wild": true, "likely_exploited": false, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.67, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963", "poc_url": null, "epss_score": 0.0039, "epss_percentile": 0.3353, "cisa_kev": true, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). CISA KEV: the US government has confirmed active exploitation in real attacks." }, { "id": "CVE-2026-85880", "month": "2026-Sep", "title": "Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability", "description": "", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected", "exploited_in_wild": true, "likely_exploited": false, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880", "poc_url": null, "epss_score": 0.0039, "epss_percentile": 0.3282, "cisa_kev": true, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). CISA KEV: the US government has confirmed active exploitation in real attacks." }, { "id": "CVE-2026-96940", "month": "2026-Oct", "title": "Microsoft Exchange Server Elevation of Privilege Vulnerability", "description": "", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96940", "poc_url": null, "epss_score": 0.0275, "epss_percentile": 0.8621, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69525", "month": "2026-Sep", "title": "Remote Desktop Services Remote Code Execution Vulnerability", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69525", "poc_url": null, "epss_score": 0.0097, "epss_percentile": 0.6208, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69730", "month": "2026-Sep", "title": "Windows DNS Server Remote Code Execution Vulnerability", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69730", "poc_url": null, "epss_score": 0.0097, "epss_percentile": 0.6208, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69723", "month": "2026-Sep", "title": "Windows Kernel Information Disclosure Vulnerability", "description": "", "cvss": 5.7, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Information Disclosure", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "kernel-exploit", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69723", "poc_url": null, "epss_score": 0.0089, "epss_percentile": 0.5948, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can compromise the Windows kernel (Ring 0) — full OS control, above all EDR and AV after the victim opens a file or clicks a link (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-72940", "month": "2026-Sep", "title": "Windows Schannel Remote Code Execution Vulnerability", "description": "", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72940", "poc_url": null, "epss_score": 0.0082, "epss_percentile": 0.5723, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target after the victim opens a file or clicks a link (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69676", "month": "2026-Sep", "title": "Windows Kerberos Remote Code Execution Vulnerability", "description": "", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "auth-bypass", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69676", "poc_url": null, "epss_score": 0.0078, "epss_percentile": 0.5587, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can skip authentication entirely and access protected resources without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-68876", "month": "2026-Sep", "title": "Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability", "description": "", "cvss": 8.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68876", "poc_url": null, "epss_score": 0.0077, "epss_percentile": 0.5556, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can escalate from a standard user to SYSTEM/Administrator after the victim opens a file or clicks a link (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-68880", "month": "2026-Sep", "title": "Windows Win32k Elevation of Privilege Vulnerability", "description": "", "cvss": 8.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "kernel-exploit", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68880", "poc_url": null, "epss_score": 0.0077, "epss_percentile": 0.5556, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can compromise the Windows kernel (Ring 0) — full OS control, above all EDR and AV after the victim opens a file or clicks a link (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69301", "month": "2026-Sep", "title": "Windows Win32k Elevation of Privilege Vulnerability", "description": "", "cvss": 8.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "kernel-exploit", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69301", "poc_url": null, "epss_score": 0.0077, "epss_percentile": 0.5557, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can compromise the Windows kernel (Ring 0) — full OS control, above all EDR and AV after the victim opens a file or clicks a link (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69623", "month": "2026-Sep", "title": "Windows HTTP Print Provider Remote Code Execution Vulnerability", "description": "", "cvss": 8.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69623", "poc_url": null, "epss_score": 0.0077, "epss_percentile": 0.5557, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can execute arbitrary code on the target after the victim opens a file or clicks a link (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69714", "month": "2026-Sep", "title": "Windows Device Association Service Elevation of Privilege Vulnerability", "description": "", "cvss": 8.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69714", "poc_url": null, "epss_score": 0.0077, "epss_percentile": 0.5557, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can escalate from a standard user to SYSTEM/Administrator after the victim opens a file or clicks a link (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-70342", "month": "2026-Sep", "title": "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability", "description": "", "cvss": 8.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70342", "poc_url": null, "epss_score": 0.0071, "epss_percentile": 0.5344, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can escalate from a standard user to SYSTEM/Administrator without any user action (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-72936", "month": "2026-Sep", "title": "Windows SMB Client Remote Code Execution Vulnerability", "description": "", "cvss": 8.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72936", "poc_url": null, "epss_score": 0.0071, "epss_percentile": 0.5345, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69854", "month": "2026-Sep", "title": "Spring Cloud Azure Elevation of Privilege Vulnerability", "description": "", "cvss": 9.0, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69854", "poc_url": null, "epss_score": 0.0069, "epss_percentile": 0.5264, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can escalate from a standard user to SYSTEM/Administrator without any user action (exploitation is complex — not always reliable). Successful exploitation can affect other components beyond the vulnerable one. Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69852", "month": "2026-Sep", "title": "Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability", "description": "", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69852", "poc_url": null, "epss_score": 0.0066, "epss_percentile": 0.5171, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can execute arbitrary code on the target without any user action (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69777", "month": "2026-Sep", "title": "Windows DHCP Client Elevation of Privilege Vulnerability", "description": "", "cvss": 8.0, "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69777", "poc_url": null, "epss_score": 0.0058, "epss_percentile": 0.4748, "cisa_kev": false, "layman_summary": "An attacker on the same local network with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-68846", "month": "2026-Sep", "title": "Windows Kernel Elevation of Privilege Vulnerability", "description": "", "cvss": 7.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "kernel-exploit", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68846", "poc_url": null, "epss_score": 0.0057, "epss_percentile": 0.4718, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can compromise the Windows kernel (Ring 0) — full OS control, above all EDR and AV after the victim opens a file or clicks a link (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69274", "month": "2026-Sep", "title": "Windows Win32k Elevation of Privilege Vulnerability", "description": "", "cvss": 7.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "kernel-exploit", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69274", "poc_url": null, "epss_score": 0.0057, "epss_percentile": 0.4718, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can compromise the Windows kernel (Ring 0) — full OS control, above all EDR and AV after the victim opens a file or clicks a link (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69305", "month": "2026-Sep", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "description": "", "cvss": 7.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.67, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69305", "poc_url": null, "epss_score": 0.0057, "epss_percentile": 0.4718, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can escalate from a standard user to SYSTEM/Administrator after the victim opens a file or clicks a link (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69337", "month": "2026-Sep", "title": "Windows Registry Elevation of Privilege Vulnerability", "description": "", "cvss": 7.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69337", "poc_url": null, "epss_score": 0.0057, "epss_percentile": 0.4718, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can escalate from a standard user to SYSTEM/Administrator after the victim opens a file or clicks a link (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69366", "month": "2026-Sep", "title": "Windows Kernel Elevation of Privilege Vulnerability", "description": "", "cvss": 7.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "kernel-exploit", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69366", "poc_url": null, "epss_score": 0.0057, "epss_percentile": 0.4718, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can compromise the Windows kernel (Ring 0) — full OS control, above all EDR and AV after the victim opens a file or clicks a link (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69451", "month": "2026-Sep", "title": "Windows Management Instrumentation Elevation of Privilege Vulnerability", "description": "", "cvss": 7.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69451", "poc_url": null, "epss_score": 0.0057, "epss_percentile": 0.4718, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can escalate from a standard user to SYSTEM/Administrator after the victim opens a file or clicks a link (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69460", "month": "2026-Sep", "title": "Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability", "description": "", "cvss": 7.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69460", "poc_url": null, "epss_score": 0.0057, "epss_percentile": 0.4718, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can escalate from a standard user to SYSTEM/Administrator after the victim opens a file or clicks a link (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69757", "month": "2026-Sep", "title": "Windows TCP/IP Elevation of Privilege Vulnerability", "description": "", "cvss": 7.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69757", "poc_url": null, "epss_score": 0.0057, "epss_percentile": 0.4718, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can escalate from a standard user to SYSTEM/Administrator after the victim opens a file or clicks a link (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69406", "month": "2026-Sep", "title": "Windows Kernel Information Disclosure Vulnerability", "description": "", "cvss": 5.5, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Information Disclosure", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "kernel-exploit", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69406", "poc_url": null, "epss_score": 0.0048, "epss_percentile": 0.4132, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can compromise the Windows kernel (Ring 0) — full OS control, above all EDR and AV without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69364", "month": "2026-Sep", "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", "description": "", "cvss": 7.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.67, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69364", "poc_url": null, "epss_score": 0.0044, "epss_percentile": 0.38, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can escalate from a standard user to SYSTEM/Administrator after the victim opens a file or clicks a link (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69277", "month": "2026-Sep", "title": "Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability", "description": "", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69277", "poc_url": null, "epss_score": 0.0033, "epss_percentile": 0.2667, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69391", "month": "2026-Sep", "title": "Windows Broker Infrastructure Service Elevation of Privilege Vulnerability", "description": "", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69391", "poc_url": null, "epss_score": 0.0033, "epss_percentile": 0.266, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69436", "month": "2026-Sep", "title": "Windows State Repository Service Elevation of Privilege Vulnerability", "description": "", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69436", "poc_url": null, "epss_score": 0.0033, "epss_percentile": 0.2663, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69450", "month": "2026-Sep", "title": "Windows Error Reporting Elevation of Privilege Vulnerability", "description": "", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.67, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69450", "poc_url": null, "epss_score": 0.0033, "epss_percentile": 0.2667, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69459", "month": "2026-Sep", "title": "Windows Power Dependency Coordinator Elevation of Privilege Vulnerability", "description": "", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.67, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69459", "poc_url": null, "epss_score": 0.0033, "epss_percentile": 0.2663, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69467", "month": "2026-Sep", "title": "Microsoft Graphics Component Elevation of Privilege Vulnerability", "description": "", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69467", "poc_url": null, "epss_score": 0.0033, "epss_percentile": 0.2663, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69478", "month": "2026-Sep", "title": "Windows Device Association Service Elevation of Privilege Vulnerability", "description": "", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69478", "poc_url": null, "epss_score": 0.0033, "epss_percentile": 0.2663, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69541", "month": "2026-Sep", "title": "Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability", "description": "", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "kernel-exploit", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69541", "poc_url": null, "epss_score": 0.0033, "epss_percentile": 0.2664, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can compromise the Windows kernel (Ring 0) — full OS control, above all EDR and AV without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69585", "month": "2026-Sep", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "description": "", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.67, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69585", "poc_url": null, "epss_score": 0.0033, "epss_percentile": 0.2662, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69921", "month": "2026-Sep", "title": "Windows Print Spooler Components Elevation of Privilege Vulnerability", "description": "", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.67, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69921", "poc_url": null, "epss_score": 0.0033, "epss_percentile": 0.2659, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-70289", "month": "2026-Sep", "title": "Windows Win32k Elevation of Privilege Vulnerability", "description": "", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "kernel-exploit", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70289", "poc_url": null, "epss_score": 0.0033, "epss_percentile": 0.266, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can compromise the Windows kernel (Ring 0) — full OS control, above all EDR and AV without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-70583", "month": "2026-Sep", "title": "Windows Core Messaging Elevation of Privilege Vulnerability", "description": "", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70583", "poc_url": null, "epss_score": 0.0033, "epss_percentile": 0.2666, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-71343", "month": "2026-Sep", "title": "Windows Remote Access Connection Manager Remote Code Execution Vulnerability", "description": "", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71343", "poc_url": null, "epss_score": 0.0033, "epss_percentile": 0.2665, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can execute arbitrary code on the target without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-72957", "month": "2026-Sep", "title": "Windows Deployment Services Remote Code Execution Vulnerability", "description": "", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72957", "poc_url": null, "epss_score": 0.0033, "epss_percentile": 0.2667, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can execute arbitrary code on the target without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-77500", "month": "2026-Sep", "title": "Windows Device Association Service Elevation of Privilege Vulnerability", "description": "", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77500", "poc_url": null, "epss_score": 0.0033, "epss_percentile": 0.2662, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-80093", "month": "2026-Sep", "title": "Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability", "description": "", "cvss": 7.0, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "kernel-exploit", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80093", "poc_url": null, "epss_score": 0.0032, "epss_percentile": 0.2536, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can compromise the Windows kernel (Ring 0) — full OS control, above all EDR and AV without any user action (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-68884", "month": "2026-Sep", "title": "Windows Kernel Elevation of Privilege Vulnerability", "description": "", "cvss": 7.0, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "kernel-exploit", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68884", "poc_url": null, "epss_score": 0.0026, "epss_percentile": 0.1826, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can compromise the Windows kernel (Ring 0) — full OS control, above all EDR and AV without any user action (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69310", "month": "2026-Sep", "title": "Windows DNS Elevation of Privilege Vulnerability", "description": "", "cvss": 7.0, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69310", "poc_url": null, "epss_score": 0.0026, "epss_percentile": 0.1826, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69473", "month": "2026-Sep", "title": "Windows Kernel Elevation of Privilege Vulnerability", "description": "", "cvss": 7.0, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "kernel-exploit", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69473", "poc_url": null, "epss_score": 0.0026, "epss_percentile": 0.1827, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can compromise the Windows kernel (Ring 0) — full OS control, above all EDR and AV without any user action (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69498", "month": "2026-Sep", "title": "Windows Win32k Elevation of Privilege Vulnerability", "description": "", "cvss": 7.0, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "kernel-exploit", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69498", "poc_url": null, "epss_score": 0.0026, "epss_percentile": 0.1827, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can compromise the Windows kernel (Ring 0) — full OS control, above all EDR and AV without any user action (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69600", "month": "2026-Sep", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "description": "", "cvss": 7.0, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.67, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69600", "poc_url": null, "epss_score": 0.0026, "epss_percentile": 0.1827, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69605", "month": "2026-Sep", "title": "Microsoft Install Service Elevation of Privilege Vulnerability", "description": "", "cvss": 7.0, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69605", "poc_url": null, "epss_score": 0.0026, "epss_percentile": 0.1825, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69911", "month": "2026-Sep", "title": "Microsoft Windows Search Component Elevation of Privilege Vulnerability", "description": "", "cvss": 7.0, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.67, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69911", "poc_url": null, "epss_score": 0.0026, "epss_percentile": 0.1826, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-70562", "month": "2026-Sep", "title": "Windows Audio Service Elevation of Privilege Vulnerability", "description": "", "cvss": 7.0, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70562", "poc_url": null, "epss_score": 0.0026, "epss_percentile": 0.1827, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-70585", "month": "2026-Sep", "title": "Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability", "description": "", "cvss": 7.0, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70585", "poc_url": null, "epss_score": 0.0026, "epss_percentile": 0.1827, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can execute arbitrary code on the target without any user action (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-71340", "month": "2026-Sep", "title": "Windows File History Service Elevation of Privilege Vulnerability", "description": "", "cvss": 7.0, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-71340", "poc_url": null, "epss_score": 0.0026, "epss_percentile": 0.1826, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69385", "month": "2026-Sep", "title": "Windows TCP/IP Elevation of Privilege Vulnerability", "description": "", "cvss": 7.0, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69385", "poc_url": null, "epss_score": 0.002, "epss_percentile": 0.1018, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69466", "month": "2026-Sep", "title": "Windows Kernel Elevation of Privilege Vulnerability", "description": "", "cvss": 7.0, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "kernel-exploit", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69466", "poc_url": null, "epss_score": 0.002, "epss_percentile": 0.1018, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can compromise the Windows kernel (Ring 0) — full OS control, above all EDR and AV without any user action (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-69779", "month": "2026-Sep", "title": "Windows Win32k Elevation of Privilege Vulnerability", "description": "", "cvss": 7.0, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely", "exploited_in_wild": false, "likely_exploited": true, "attack_primitive": "kernel-exploit", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69779", "poc_url": null, "epss_score": 0.002, "epss_percentile": 0.1018, "cisa_kev": false, "layman_summary": "An attacker already on the machine with a low-privilege account can compromise the Windows kernel (Ring 0) — full OS control, above all EDR and AV without any user action (exploitation is complex — not always reliable). Microsoft rates exploitation as likely in the near term." }, { "id": "CVE-2026-68839", "month": "2026-Sep", "title": "Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68839", "poc_url": null, "epss_score": 0.0102, "epss_percentile": 0.6348, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (low complexity, reliable)." }, { "id": "CVE-2026-67631", "month": "2026-Sep", "title": "Microsoft SQL Server Remote Code Execution Vulnerability", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67631", "poc_url": null, "epss_score": 0.0097, "epss_percentile": 0.6207, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (low complexity, reliable)." }, { "id": "CVE-2026-67643", "month": "2026-Sep", "title": "Microsoft SQL Server Remote Code Execution Vulnerability", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-67643", "poc_url": null, "epss_score": 0.0097, "epss_percentile": 0.6207, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (low complexity, reliable)." }, { "id": "CVE-2026-69276", "month": "2026-Sep", "title": "Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69276", "poc_url": null, "epss_score": 0.0097, "epss_percentile": 0.6208, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (low complexity, reliable)." }, { "id": "CVE-2026-69408", "month": "2026-Sep", "title": "Microsoft Windows Media Foundation Remote Code Execution Vulnerability", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69408", "poc_url": null, "epss_score": 0.0097, "epss_percentile": 0.6207, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (low complexity, reliable)." }, { "id": "CVE-2026-69431", "month": "2026-Sep", "title": "Telnet Client Remote Code Execution Vulnerability", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69431", "poc_url": null, "epss_score": 0.0097, "epss_percentile": 0.6207, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (low complexity, reliable)." }, { "id": "CVE-2026-69463", "month": "2026-Sep", "title": "Windows NTFS Remote Code Execution Vulnerability", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69463", "poc_url": null, "epss_score": 0.0097, "epss_percentile": 0.6207, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (low complexity, reliable)." }, { "id": "CVE-2026-69491", "month": "2026-Sep", "title": "Microsoft DirectMusic Remote Code Execution Vulnerability", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69491", "poc_url": null, "epss_score": 0.0097, "epss_percentile": 0.6208, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (low complexity, reliable)." }, { "id": "CVE-2026-69493", "month": "2026-Sep", "title": "Windows Event Logging Service Remote Code Execution Vulnerability", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69493", "poc_url": null, "epss_score": 0.0097, "epss_percentile": 0.6208, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (low complexity, reliable)." }, { "id": "CVE-2026-69496", "month": "2026-Sep", "title": "Windows Compressed Folder Remote Code Execution Vulnerability", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69496", "poc_url": null, "epss_score": 0.0097, "epss_percentile": 0.6208, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (low complexity, reliable)." }, { "id": "CVE-2026-69579", "month": "2026-Sep", "title": "Windows Message Queuing Remote Code Execution Vulnerability", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69579", "poc_url": null, "epss_score": 0.0097, "epss_percentile": 0.6208, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (low complexity, reliable)." }, { "id": "CVE-2026-69586", "month": "2026-Sep", "title": "Microsoft Windows PDF Remote Code Execution Vulnerability", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69586", "poc_url": null, "epss_score": 0.0097, "epss_percentile": 0.6208, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (low complexity, reliable)." }, { "id": "CVE-2026-69590", "month": "2026-Sep", "title": "Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69590", "poc_url": null, "epss_score": 0.0097, "epss_percentile": 0.6207, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (low complexity, reliable)." }, { "id": "CVE-2026-69595", "month": "2026-Sep", "title": "Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69595", "poc_url": null, "epss_score": 0.0097, "epss_percentile": 0.6208, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (low complexity, reliable)." }, { "id": "CVE-2026-69715", "month": "2026-Sep", "title": "Windows Direct Show Remote Code Execution Vulnerability", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Important", "vuln_type": "Remote Code Execution", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "rce-remote", "primitive_confidence": 0.33, "lab_relevance": "medium", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69715", "poc_url": null, "epss_score": 0.0097, "epss_percentile": 0.6207, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can execute arbitrary code on the target without any user action (low complexity, reliable)." }, { "id": "CVE-2026-69843", "month": "2026-Sep", "title": "Microsoft Fabric Elevation of Privilege Vulnerability", "description": "", "cvss": 10.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69843", "poc_url": null, "epss_score": 0.009, "epss_percentile": 0.597, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Successful exploitation can affect other components beyond the vulnerable one." }, { "id": "CVE-2026-70352", "month": "2026-Sep", "title": "Azure AI Language Elevation of Privilege Vulnerability", "description": "", "cvss": 10.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70352", "poc_url": null, "epss_score": 0.009, "epss_percentile": 0.597, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Successful exploitation can affect other components beyond the vulnerable one." }, { "id": "CVE-2026-69865", "month": "2026-Sep", "title": "Microsoft Container Registry Elevation of Privilege Vulnerability", "description": "", "cvss": 10.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69865", "poc_url": null, "epss_score": 0.008, "epss_percentile": 0.5652, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Successful exploitation can affect other components beyond the vulnerable one." }, { "id": "CVE-2026-83711", "month": "2026-Sep", "title": "Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability", "description": "", "cvss": 10.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "auth-bypass", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83711", "poc_url": null, "epss_score": 0.008, "epss_percentile": 0.5652, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can skip authentication entirely and access protected resources without any user action (low complexity, reliable). Successful exploitation can affect other components beyond the vulnerable one." }, { "id": "CVE-2026-83941", "month": "2026-Sep", "title": "Entra ID Elevation of Privilege Vulnerability", "description": "", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83941", "poc_url": null, "epss_score": 0.0078, "epss_percentile": 0.5587, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Successful exploitation can affect other components beyond the vulnerable one." }, { "id": "CVE-2026-85878", "month": "2026-Sep", "title": "Azure Database for PostgreSQL Elevation of Privilege Vulnerability", "description": "", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85878", "poc_url": null, "epss_score": 0.0078, "epss_percentile": 0.5587, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Successful exploitation can affect other components beyond the vulnerable one." }, { "id": "CVE-2026-85885", "month": "2026-Sep", "title": "Microsoft 365 Copilot Elevation of Privilege Vulnerability", "description": "", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85885", "poc_url": null, "epss_score": 0.0072, "epss_percentile": 0.5392, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with a low-privilege account can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Successful exploitation can affect other components beyond the vulnerable one." }, { "id": "CVE-2026-90048", "month": "2026-Sep", "title": "fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U", "severity": "Critical", "vuln_type": "", "exploitation_status": "", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "other", "primitive_confidence": 0.0, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-90048", "poc_url": null, "epss_score": 0.0072, "epss_percentile": 0.5396, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials exploits this vulnerability (CVSS 9.8) without any user action (low complexity, reliable)." }, { "id": "CVE-2026-96207", "month": "2026-Oct", "title": "Microsoft Partner Center Elevation of Privilege Vulnerability", "description": "", "cvss": 10.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96207", "poc_url": null, "epss_score": 0.0067, "epss_percentile": 0.5204, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Successful exploitation can affect other components beyond the vulnerable one." }, { "id": "CVE-2026-85889", "month": "2026-Sep", "title": "Azure AI Foundry Elevation of Privilege Vulnerability", "description": "", "cvss": 10.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85889", "poc_url": null, "epss_score": 0.0067, "epss_percentile": 0.5201, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Successful exploitation can affect other components beyond the vulnerable one." }, { "id": "CVE-2026-89788", "month": "2026-Sep", "title": "ksmbd: fix tree connection use-after-free in smb2_tree_connect()", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U", "severity": "Critical", "vuln_type": "", "exploitation_status": "", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "other", "primitive_confidence": 0.0, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89788", "poc_url": null, "epss_score": 0.0065, "epss_percentile": 0.5126, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials exploits this vulnerability (CVSS 9.8) without any user action (low complexity, reliable)." }, { "id": "CVE-2026-70200", "month": "2026-Sep", "title": "Azure Logic Apps Elevation of Privilege Vulnerability", "description": "", "cvss": 10.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70200", "poc_url": null, "epss_score": 0.006, "epss_percentile": 0.4874, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Successful exploitation can affect other components beyond the vulnerable one." }, { "id": "CVE-2026-69399", "month": "2026-Sep", "title": "Azure Arc Elevation of Privilege Vulnerability", "description": "", "cvss": 10.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69399", "poc_url": null, "epss_score": 0.0059, "epss_percentile": 0.4824, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Successful exploitation can affect other components beyond the vulnerable one." }, { "id": "CVE-2026-94510", "month": "2026-Oct", "title": "Microsoft Bookings Elevation of Privilege Vulnerability", "description": "", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94510", "poc_url": null, "epss_score": 0.0057, "epss_percentile": 0.4698, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Successful exploitation can affect other components beyond the vulnerable one." }, { "id": "CVE-2026-98171", "month": "2026-Oct", "title": "smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U", "severity": "Critical", "vuln_type": "", "exploitation_status": "", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "other", "primitive_confidence": 0.0, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98171", "poc_url": null, "epss_score": 0.0054, "epss_percentile": 0.4525, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials exploits this vulnerability (CVSS 9.8) without any user action (low complexity, reliable)." }, { "id": "CVE-2026-89551", "month": "2026-Sep", "title": "SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "Critical", "vuln_type": "", "exploitation_status": "", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "other", "primitive_confidence": 0.0, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89551", "poc_url": null, "epss_score": 0.0051, "epss_percentile": 0.4382, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials exploits this vulnerability (CVSS 9.8) without any user action (low complexity, reliable)." }, { "id": "CVE-2026-93207", "month": "2026-Sep", "title": "SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U", "severity": "Critical", "vuln_type": "", "exploitation_status": "", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "other", "primitive_confidence": 0.0, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93207", "poc_url": null, "epss_score": 0.0047, "epss_percentile": 0.4042, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials exploits this vulnerability (CVSS 9.8) without any user action (low complexity, reliable)." }, { "id": "CVE-2026-83944", "month": "2026-Sep", "title": "Azure Logic Apps Elevation of Privilege Vulnerability", "description": "", "cvss": 10.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83944", "poc_url": null, "epss_score": 0.0044, "epss_percentile": 0.3839, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Successful exploitation can affect other components beyond the vulnerable one." }, { "id": "CVE-2026-98174", "month": "2026-Oct", "title": "smb: client: fix rlist race and missing initialization", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U", "severity": "Critical", "vuln_type": "", "exploitation_status": "", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "other", "primitive_confidence": 0.0, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98174", "poc_url": null, "epss_score": 0.0033, "epss_percentile": 0.2618, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials exploits this vulnerability (CVSS 9.8) without any user action (low complexity, reliable)." }, { "id": "CVE-2026-62874", "month": "2026-Sep", "title": "Azure Billing Elevation of Privilege Vulnerability", "description": "", "cvss": 10.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L/E:U/RL:O/RC:C", "severity": "Critical", "vuln_type": "Elevation of Privilege", "exploitation_status": "Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "privilege-escalation", "primitive_confidence": 0.33, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62874", "poc_url": null, "epss_score": 0.0032, "epss_percentile": 0.2562, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials can escalate from a standard user to SYSTEM/Administrator without any user action (low complexity, reliable). Successful exploitation can affect other components beyond the vulnerable one." }, { "id": "CVE-2026-98167", "month": "2026-Oct", "title": "smb: client: fix server->total_read for compound encrypted PDUs", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U", "severity": "Critical", "vuln_type": "", "exploitation_status": "", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "other", "primitive_confidence": 0.0, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98167", "poc_url": null, "epss_score": 0.0022, "epss_percentile": 0.1279, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials exploits this vulnerability (CVSS 9.8) without any user action (low complexity, reliable)." }, { "id": "CVE-2026-98170", "month": "2026-Oct", "title": "smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U", "severity": "Critical", "vuln_type": "", "exploitation_status": "", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "other", "primitive_confidence": 0.0, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98170", "poc_url": null, "epss_score": 0.0022, "epss_percentile": 0.1209, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials exploits this vulnerability (CVSS 9.8) without any user action (low complexity, reliable)." }, { "id": "CVE-2026-98168", "month": "2026-Oct", "title": "smb: client: fix reparse buffer bounds in cifs_query_reparse_point()", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U", "severity": "Critical", "vuln_type": "", "exploitation_status": "", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "other", "primitive_confidence": 0.0, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98168", "poc_url": null, "epss_score": 0.0021, "epss_percentile": 0.1056, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials exploits this vulnerability (CVSS 9.8) without any user action (low complexity, reliable)." }, { "id": "CVE-2026-98172", "month": "2026-Oct", "title": "smb: client: fix smbd_connection leak on cifs_get_tcp_session() error", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U", "severity": "Critical", "vuln_type": "", "exploitation_status": "", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "other", "primitive_confidence": 0.0, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98172", "poc_url": null, "epss_score": 0.0018, "epss_percentile": 0.0721, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials exploits this vulnerability (CVSS 9.8) without any user action (low complexity, reliable)." }, { "id": "CVE-2026-98308", "month": "2026-Oct", "title": "ALSA: hda: trace PCM open only after assigning a stream", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U", "severity": "Critical", "vuln_type": "", "exploitation_status": "", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "other", "primitive_confidence": 0.0, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98308", "poc_url": null, "epss_score": 0.0018, "epss_percentile": 0.0719, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials exploits this vulnerability (CVSS 9.8) without any user action (low complexity, reliable)." }, { "id": "CVE-2026-98316", "month": "2026-Oct", "title": "ALSA: bcd2000: Fix race between rawmidi and disconnect", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U", "severity": "Critical", "vuln_type": "", "exploitation_status": "", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "other", "primitive_confidence": 0.0, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98316", "poc_url": null, "epss_score": 0.0017, "epss_percentile": 0.0666, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials exploits this vulnerability (CVSS 9.8) without any user action (low complexity, reliable)." }, { "id": "CVE-2026-98282", "month": "2026-Oct", "title": "powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U", "severity": "Critical", "vuln_type": "", "exploitation_status": "", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "other", "primitive_confidence": 0.0, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98282", "poc_url": null, "epss_score": 0.0013, "epss_percentile": 0.0253, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials exploits this vulnerability (CVSS 9.8) without any user action (low complexity, reliable)." }, { "id": "CVE-2026-98330", "month": "2026-Oct", "title": "wifi: cfg80211: get the wiphy out of a dying network namespace", "description": "", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U", "severity": "Critical", "vuln_type": "", "exploitation_status": "", "exploited_in_wild": false, "likely_exploited": false, "attack_primitive": "other", "primitive_confidence": 0.0, "lab_relevance": "high", "msrc_url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98330", "poc_url": null, "epss_score": 0.0012, "epss_percentile": 0.0179, "cisa_kev": false, "layman_summary": "A remote attacker (no existing access required) with no credentials exploits this vulnerability (CVSS 9.8) without any user action (low complexity, reliable)." } ] }