# Vulnerabilities published in 2026


- [CVE-2026-69522](https://insights.sbomify.com/CVE-2026-69522/): .NET and Visual Studio Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69521](https://insights.sbomify.com/CVE-2026-69521/): Windows iSCSI Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-6952](https://insights.sbomify.com/CVE-2026-6952/): Command injection in AX7501-B1 firmware (high 7.2)
- [CVE-2026-69519](https://insights.sbomify.com/CVE-2026-69519/): Azure Stack HCI Information Disclosure Vulnerability (high 8.6)
- [CVE-2026-69518](https://insights.sbomify.com/CVE-2026-69518/): Windows Remote Desktop Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69517](https://insights.sbomify.com/CVE-2026-69517/): Windows Wireless Networking Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69516](https://insights.sbomify.com/CVE-2026-69516/): Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69514](https://insights.sbomify.com/CVE-2026-69514/): Remote Desktop Services Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-69513](https://insights.sbomify.com/CVE-2026-69513/): Windows Error Reporting Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69512](https://insights.sbomify.com/CVE-2026-69512/): Windows Spaceport.sys Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69511](https://insights.sbomify.com/CVE-2026-69511/): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69510](https://insights.sbomify.com/CVE-2026-69510/): Windows DHCP Server Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-6951](https://insights.sbomify.com/CVE-2026-6951/): simple-git is vulnerable to Remote Code Execution (critical 9.2)
- [CVE-2026-69509](https://insights.sbomify.com/CVE-2026-69509/): Role: Windows Fax Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69508](https://insights.sbomify.com/CVE-2026-69508/): Windows MIDI Service Module Elevation of Privileges Vulnerability (high 7.8)
- [CVE-2026-69507](https://insights.sbomify.com/CVE-2026-69507/): Microsoft Windows Search Component Information Disclosure Vulnerability (medium 5.7)
- [CVE-2026-69506](https://insights.sbomify.com/CVE-2026-69506/): Windows Key Storage Provider Information Disclosure Vulnerability (medium 4.7)
- [CVE-2026-69505](https://insights.sbomify.com/CVE-2026-69505/): Windows NTFS Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69504](https://insights.sbomify.com/CVE-2026-69504/): Windows NTFS Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69503](https://insights.sbomify.com/CVE-2026-69503/): Windows USB Driver Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69502](https://insights.sbomify.com/CVE-2026-69502/): Azure SQL Database Elevation of Privilege Vulnerability (critical 10.0)
- [CVE-2026-69501](https://insights.sbomify.com/CVE-2026-69501/): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69500](https://insights.sbomify.com/CVE-2026-69500/): Windows Image Acquisition Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69499](https://insights.sbomify.com/CVE-2026-69499/): Windows Imaging Component Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69498](https://insights.sbomify.com/CVE-2026-69498/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69497](https://insights.sbomify.com/CVE-2026-69497/): Windows DHCP Server Denial of Service Vulnerability (medium 6.5)
- [CVE-2026-69496](https://insights.sbomify.com/CVE-2026-69496/): Windows Compressed Folder Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69495](https://insights.sbomify.com/CVE-2026-69495/): Windows Event Logging Service Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69494](https://insights.sbomify.com/CVE-2026-69494/): Windows Event Logging Service Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69493](https://insights.sbomify.com/CVE-2026-69493/): Windows Event Logging Service Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69492](https://insights.sbomify.com/CVE-2026-69492/): Windows Partition Management Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69491](https://insights.sbomify.com/CVE-2026-69491/): Microsoft DirectMusic Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69490](https://insights.sbomify.com/CVE-2026-69490/): Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability (medium 6.8)
- [CVE-2026-69489](https://insights.sbomify.com/CVE-2026-69489/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69488](https://insights.sbomify.com/CVE-2026-69488/): Windows Device Association Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69486](https://insights.sbomify.com/CVE-2026-69486/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69485](https://insights.sbomify.com/CVE-2026-69485/): Remote Desktop Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69483](https://insights.sbomify.com/CVE-2026-69483/): Windows Image Acquisition Information Disclosure Vulnerability (medium 4.7)
- [CVE-2026-69482](https://insights.sbomify.com/CVE-2026-69482/): Windows Error Reporting Tampering Vulnerability (high 7.1)
- [CVE-2026-69481](https://insights.sbomify.com/CVE-2026-69481/): Windows Enterprise App Management Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69480](https://insights.sbomify.com/CVE-2026-69480/): Windows Partition Management Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-6948](https://insights.sbomify.com/CVE-2026-6948/): Unbounded Memory Allocation in VQLResponse Result-Set Writer (medium 4.9)
- [CVE-2026-69479](https://insights.sbomify.com/CVE-2026-69479/): Windows NTFS Remote Code Execution Vulnerability (high 8.4)
- [CVE-2026-69478](https://insights.sbomify.com/CVE-2026-69478/): Windows Device Association Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69477](https://insights.sbomify.com/CVE-2026-69477/): Microsoft Office Access Remote Code Execution Vulnerability (high 7.3)
- [CVE-2026-69476](https://insights.sbomify.com/CVE-2026-69476/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69475](https://insights.sbomify.com/CVE-2026-69475/): Windows Remote Desktop Services Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69474](https://insights.sbomify.com/CVE-2026-69474/): Windows Overlay Filter Information Disclosure Vulnerability (medium 4.8)
- [CVE-2026-69473](https://insights.sbomify.com/CVE-2026-69473/): Windows Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69472](https://insights.sbomify.com/CVE-2026-69472/): Windows Devices Human Interface Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69471](https://insights.sbomify.com/CVE-2026-69471/): Windows Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69470](https://insights.sbomify.com/CVE-2026-69470/): Connected User Experiences and Telemetry Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-6947](https://insights.sbomify.com/CVE-2026-6947/): D-Link｜DWM-222W USB Wi-Fi Adapter - Brute-Force Protection Bypass (high 8.7)
- [CVE-2026-69469](https://insights.sbomify.com/CVE-2026-69469/): Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability (medium 6.6)
- [CVE-2026-69468](https://insights.sbomify.com/CVE-2026-69468/): Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69467](https://insights.sbomify.com/CVE-2026-69467/): Microsoft Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69466](https://insights.sbomify.com/CVE-2026-69466/): Windows Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69465](https://insights.sbomify.com/CVE-2026-69465/): Microsoft Office SharePoint Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69464](https://insights.sbomify.com/CVE-2026-69464/): Microsoft Office SharePoint Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-69463](https://insights.sbomify.com/CVE-2026-69463/): Windows NTFS Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69462](https://insights.sbomify.com/CVE-2026-69462/): Windows Error Reporting Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69461](https://insights.sbomify.com/CVE-2026-69461/): Windows NTFS Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69460](https://insights.sbomify.com/CVE-2026-69460/): Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69459](https://insights.sbomify.com/CVE-2026-69459/): Windows Power Dependency Coordinator Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69458](https://insights.sbomify.com/CVE-2026-69458/): Windows BitLocker Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69457](https://insights.sbomify.com/CVE-2026-69457/): Windows USB Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69456](https://insights.sbomify.com/CVE-2026-69456/): Microsoft Windows Speech Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69455](https://insights.sbomify.com/CVE-2026-69455/): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69454](https://insights.sbomify.com/CVE-2026-69454/): Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability (high 7.5)
- [CVE-2026-69453](https://insights.sbomify.com/CVE-2026-69453/): Microsoft Windows Search Component Tampering Vulnerability (medium 5.5)
- [CVE-2026-69452](https://insights.sbomify.com/CVE-2026-69452/): Windows Enterprise App Management Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69451](https://insights.sbomify.com/CVE-2026-69451/): Windows Management Instrumentation Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69450](https://insights.sbomify.com/CVE-2026-69450/): Windows Error Reporting Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69449](https://insights.sbomify.com/CVE-2026-69449/): Windows BitLocker Remote Code Execution Vulnerability (medium 6.7)
- [CVE-2026-69448](https://insights.sbomify.com/CVE-2026-69448/): Windows Bluetooth Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69447](https://insights.sbomify.com/CVE-2026-69447/): Windows Audio Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69445](https://insights.sbomify.com/CVE-2026-69445/): Windows Compressed Folder Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69444](https://insights.sbomify.com/CVE-2026-69444/): Microsoft Windows Speech Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69443](https://insights.sbomify.com/CVE-2026-69443/): Windows Device Health Attestation (DHA) Information Disclosure Vulnerability (high 7.5)
- [CVE-2026-69442](https://insights.sbomify.com/CVE-2026-69442/): Microsoft Office Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69441](https://insights.sbomify.com/CVE-2026-69441/): Windows Installer Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69440](https://insights.sbomify.com/CVE-2026-69440/): Windows MIDI Service Module Elevation of Privileges Vulnerability (high 7.0)
- [CVE-2026-69439](https://insights.sbomify.com/CVE-2026-69439/): .NET and Visual Studio Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-69438](https://insights.sbomify.com/CVE-2026-69438/): Microsoft JScript Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-69436](https://insights.sbomify.com/CVE-2026-69436/): Windows State Repository Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69435](https://insights.sbomify.com/CVE-2026-69435/): Azure SRE Agent Elevation of Privilege Vulnerability (critical 9.6)
- [CVE-2026-69434](https://insights.sbomify.com/CVE-2026-69434/): Windows URL Moniker Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69433](https://insights.sbomify.com/CVE-2026-69433/): Windows Error Reporting Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69432](https://insights.sbomify.com/CVE-2026-69432/): Volume Manager Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69431](https://insights.sbomify.com/CVE-2026-69431/): Telnet Client Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69430](https://insights.sbomify.com/CVE-2026-69430/): Windows Embedded Mode Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69429](https://insights.sbomify.com/CVE-2026-69429/): Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-69428](https://insights.sbomify.com/CVE-2026-69428/): Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability (high 7.5)
- [CVE-2026-69427](https://insights.sbomify.com/CVE-2026-69427/): Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69426](https://insights.sbomify.com/CVE-2026-69426/): Windows VOLSNAP.SYS Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-69425](https://insights.sbomify.com/CVE-2026-69425/): Windows NTFS Tampering Vulnerability (medium 4.7)
- [CVE-2026-69424](https://insights.sbomify.com/CVE-2026-69424/): Windows Distributed File System (DFS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69423](https://insights.sbomify.com/CVE-2026-69423/): Windows USB Video Driver Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69422](https://insights.sbomify.com/CVE-2026-69422/): Windows USB Video Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69421](https://insights.sbomify.com/CVE-2026-69421/): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/436/
