# Vulnerabilities published in 2026


- [CVE-2026-85925](https://insights.sbomify.com/CVE-2026-85925/): Azure Key Vault Client SDK Elevation of Privilege Vulnerability (high 8.2)
- [CVE-2026-85922](https://insights.sbomify.com/CVE-2026-85922/): Azure Key Vault Security Feature Bypass Vulnerability (high 7.4)
- [CVE-2026-85921](https://insights.sbomify.com/CVE-2026-85921/): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (high 8.2)
- [CVE-2026-85920](https://insights.sbomify.com/CVE-2026-85920/): Windows BitLocker Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-8592](https://insights.sbomify.com/CVE-2026-8592/): OS Command Injection in Rapid7 InsightConnect AWK Plugin (high 7.7)
- [CVE-2026-85919](https://insights.sbomify.com/CVE-2026-85919/): Microsoft SQL Server Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85918](https://insights.sbomify.com/CVE-2026-85918/): Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85917](https://insights.sbomify.com/CVE-2026-85917/): Azure AI Foundry Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2026-85916](https://insights.sbomify.com/CVE-2026-85916/): Azure Active Directory Information Disclosure Vulnerability (medium 6.2)
- [CVE-2026-85915](https://insights.sbomify.com/CVE-2026-85915/): Windows PCI Bus Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85914](https://insights.sbomify.com/CVE-2026-85914/): Windows Embedded Mode Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85912](https://insights.sbomify.com/CVE-2026-85912/): Clipboard User Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85911](https://insights.sbomify.com/CVE-2026-85911/): Windows StateRepository API Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85910](https://insights.sbomify.com/CVE-2026-85910/): Windows StateRepository API Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-85909](https://insights.sbomify.com/CVE-2026-85909/): Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-85908](https://insights.sbomify.com/CVE-2026-85908/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85906](https://insights.sbomify.com/CVE-2026-85906/): Windows Direct Composition Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85905](https://insights.sbomify.com/CVE-2026-85905/): Windows UI Immersive Server API Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-85904](https://insights.sbomify.com/CVE-2026-85904/): Windows Device Association Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85903](https://insights.sbomify.com/CVE-2026-85903/): Windows Domain Name Service Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-85902](https://insights.sbomify.com/CVE-2026-85902/): Windows Direct Composition Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85901](https://insights.sbomify.com/CVE-2026-85901/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85900](https://insights.sbomify.com/CVE-2026-85900/): Microsoft Office SharePoint Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-8590](https://insights.sbomify.com/CVE-2026-8590/): Spotfire OAuth2 PKCE Bypass for public clients (high 8.7)
- [CVE-2026-85899](https://insights.sbomify.com/CVE-2026-85899/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.1)
- [CVE-2026-85898](https://insights.sbomify.com/CVE-2026-85898/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-85897](https://insights.sbomify.com/CVE-2026-85897/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-85893](https://insights.sbomify.com/CVE-2026-85893/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-85892](https://insights.sbomify.com/CVE-2026-85892/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85891](https://insights.sbomify.com/CVE-2026-85891/): Azure HDInsight Information Disclosure Vulnerability (high 7.5)
- [CVE-2026-85890](https://insights.sbomify.com/CVE-2026-85890/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-8589](https://insights.sbomify.com/CVE-2026-8589/): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (high 7.3)
- [CVE-2026-85889](https://insights.sbomify.com/CVE-2026-85889/): Azure AI Foundry Elevation of Privilege Vulnerability (critical 10.0)
- [CVE-2026-85888](https://insights.sbomify.com/CVE-2026-85888/): Microsoft SQL Server Information Disclosure Vulnerability (high 7.7)
- [CVE-2026-85887](https://insights.sbomify.com/CVE-2026-85887/): M365 Copilot Information Disclosure Vulnerability (high 7.7)
- [CVE-2026-85886](https://insights.sbomify.com/CVE-2026-85886/): Microsoft SQL Server Remote Code Execution Vulnerability (high 8.5)
- [CVE-2026-85885](https://insights.sbomify.com/CVE-2026-85885/): Microsoft 365 Copilot Elevation of Privilege Vulnerability (critical 9.9)
- [CVE-2026-85884](https://insights.sbomify.com/CVE-2026-85884/): Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85881](https://insights.sbomify.com/CVE-2026-85881/): Microsoft Office Graphics Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-85880](https://insights.sbomify.com/CVE-2026-85880/): Microsoft Windows Heap-Based Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2026-85879](https://insights.sbomify.com/CVE-2026-85879/): Windows Subsystem for Linux Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85878](https://insights.sbomify.com/CVE-2026-85878/): Azure Database for PostgreSQL Elevation of Privilege Vulnerability (critical 9.9)
- [CVE-2026-85877](https://insights.sbomify.com/CVE-2026-85877/): Windows Print Spooler Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-85876](https://insights.sbomify.com/CVE-2026-85876/): Microsoft SQL Server Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85875](https://insights.sbomify.com/CVE-2026-85875/): Microsoft Office Excel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-85874](https://insights.sbomify.com/CVE-2026-85874/): Windows Message Queuing Queue Manager Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-85873](https://insights.sbomify.com/CVE-2026-85873/): Skype for Business Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2026-85872](https://insights.sbomify.com/CVE-2026-85872/): Windows Storage VSP Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85871](https://insights.sbomify.com/CVE-2026-85871/): Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85870](https://insights.sbomify.com/CVE-2026-85870/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-8587](https://insights.sbomify.com/CVE-2026-8587/): Use after free in Chrome (high 8.8)
- [CVE-2026-85869](https://insights.sbomify.com/CVE-2026-85869/): Microsoft Windows Search Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85868](https://insights.sbomify.com/CVE-2026-85868/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85867](https://insights.sbomify.com/CVE-2026-85867/): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85866](https://insights.sbomify.com/CVE-2026-85866/): Windows ALPC Information Disclosure Vulnerability (medium 4.7)
- [CVE-2026-85865](https://insights.sbomify.com/CVE-2026-85865/): Windows DHCP Server Security Feature Bypass Vulnerability (medium 5.5)
- [CVE-2026-85864](https://insights.sbomify.com/CVE-2026-85864/): Python Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85863](https://insights.sbomify.com/CVE-2026-85863/): Clipboard User Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85861](https://insights.sbomify.com/CVE-2026-85861/): Clipboard User Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85860](https://insights.sbomify.com/CVE-2026-85860/): Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-8586](https://insights.sbomify.com/CVE-2026-8586/): Security feature bypass in Chrome (medium 5.5)
- [CVE-2026-85859](https://insights.sbomify.com/CVE-2026-85859/): Windows Message Queuing Queue Manager Denial of Service Vulnerability (medium 6.5)
- [CVE-2026-85858](https://insights.sbomify.com/CVE-2026-85858/): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85857](https://insights.sbomify.com/CVE-2026-85857/): Windows Kernel-Mode Drivers Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-85856](https://insights.sbomify.com/CVE-2026-85856/): Internet Connection Sharing (ICS) Remote Code Execution Vulnerability (high 7.1)
- [CVE-2026-85855](https://insights.sbomify.com/CVE-2026-85855/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85854](https://insights.sbomify.com/CVE-2026-85854/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85853](https://insights.sbomify.com/CVE-2026-85853/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85852](https://insights.sbomify.com/CVE-2026-85852/): Windows Management Instrumentation Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-85851](https://insights.sbomify.com/CVE-2026-85851/): Windows SmartScreen Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85850](https://insights.sbomify.com/CVE-2026-85850/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-8585](https://insights.sbomify.com/CVE-2026-8585/): Memory corruption in Chrome (high 7.5)
- [CVE-2026-85849](https://insights.sbomify.com/CVE-2026-85849/): Windows AppX Deployment Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85848](https://insights.sbomify.com/CVE-2026-85848/): Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85847](https://insights.sbomify.com/CVE-2026-85847/): Windows Print Spooler Components Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-85846](https://insights.sbomify.com/CVE-2026-85846/): Web Account Manager Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85843](https://insights.sbomify.com/CVE-2026-85843/): Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85842](https://insights.sbomify.com/CVE-2026-85842/): Windows Image Acquisition Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85841](https://insights.sbomify.com/CVE-2026-85841/): Windows DHCP Server Remote Code Execution Vulnerability (medium 6.6)
- [CVE-2026-85840](https://insights.sbomify.com/CVE-2026-85840/): Windows Event Viewer Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-8584](https://insights.sbomify.com/CVE-2026-8584/): Other in Chrome (medium 4.2)
- [CVE-2026-85837](https://insights.sbomify.com/CVE-2026-85837/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85836](https://insights.sbomify.com/CVE-2026-85836/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85835](https://insights.sbomify.com/CVE-2026-85835/): Servicing Stack Updates Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-85834](https://insights.sbomify.com/CVE-2026-85834/): Windows TCP/IP Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85833](https://insights.sbomify.com/CVE-2026-85833/): Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85832](https://insights.sbomify.com/CVE-2026-85832/): Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85831](https://insights.sbomify.com/CVE-2026-85831/): Windows Biometric Service Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-85830](https://insights.sbomify.com/CVE-2026-85830/): Windows Installer Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-8583](https://insights.sbomify.com/CVE-2026-8583/): Security feature bypass in Chrome (medium 5.3)
- [CVE-2026-85829](https://insights.sbomify.com/CVE-2026-85829/): Windows Wired AutoConfig Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85828](https://insights.sbomify.com/CVE-2026-85828/): WebDAV Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85827](https://insights.sbomify.com/CVE-2026-85827/): WebDAV Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85826](https://insights.sbomify.com/CVE-2026-85826/): Windows Fast FAT Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85825](https://insights.sbomify.com/CVE-2026-85825/): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85824](https://insights.sbomify.com/CVE-2026-85824/): Windows Composite Image File System Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85823](https://insights.sbomify.com/CVE-2026-85823/): Windows Composite Image File System Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-85822](https://insights.sbomify.com/CVE-2026-85822/): Windows exFAT File System Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-85821](https://insights.sbomify.com/CVE-2026-85821/): Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-85820](https://insights.sbomify.com/CVE-2026-85820/): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/303/