Microsoft products and KB updates: vulnerabilities and fixes

Windows, Office, Exchange, SharePoint, Active Directory and the KB updates that fix them. 273 CVEs tracked.

Microsoft products and KB updates has 273 tracked vulnerabilities, 37 critical and 6 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 251. Most recent: 2026-10-23. Highest priority: CVE-2019-1068 (score 86/100).

• CVE-2019-1068 HIGH 8.8 EXPLOITED DOWNGRADE UPGRADE Microsoft SQL Server Remote Code Execution Vulnerability
• CVE-2026-8452 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
• CVE-2026-65660 HIGH 8.8 EXPLOITED UPGRADE Microsoft SharePoint Code Injection Vulnerability
• CVE-2026-85880 HIGH 7.8 EXPLOITED UPGRADE UPGRADE Microsoft Windows Heap-Based Buffer Overflow Vulnerability
• CVE-2026-96951 HIGH 8.8 EXPLOITED MITIGATE UPGRADE Microsoft Windows Command Injection Vulnerability
• CVE-2026-59124 CRITICAL 9.8 UPGRADE Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized at
• CVE-2026-81963 HIGH 7.8 EXPLOITED UPGRADE UPGRADE Microsoft Windows Link Following Vulnerability
• CVE-2026-110063 CRITICAL 10.0 Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allo
• CVE-2026-56162 CRITICAL 10.0 MITIGATE Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a net
• CVE-2026-56163 CRITICAL 10.0 MITIGATE Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized atta
• CVE-2026-56191 CRITICAL 10.0 MITIGATE Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over
• CVE-2026-58275 CRITICAL 10.0 MITIGATE Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network.
• CVE-2026-58630 CRITICAL 10.0 MITIGATE Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a netw
• CVE-2026-62825 CRITICAL 10.0 MITIGATE Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a networ
• CVE-2026-66803 CRITICAL 10.0 MITIGATE Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.
• CVE-2026-65667 CRITICAL 10.0 MITIGATE Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
• CVE-2019-15598 CRITICAL 9.8 UPGRADE A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able t
• CVE-2026-50516 CRITICAL 9.4 MITIGATE Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privile
• CVE-2026-59243 CRITICAL 9.8 UPGRADE The FAB auth manager's Azure AD OAuth login defaulted `verify_signature=False` when decoding the ID token, so
• CVE-2026-50515 CRITICAL 9.9 MITIGATE Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a ne
• CVE-2026-62873 CRITICAL 9.8 MITIGATE Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker
• CVE-2026-105014 CRITICAL 9.1 Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows
• CVE-2026-62835 CRITICAL 9.3 MITIGATE Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network.
• CVE-2026-83938 CRITICAL 10.0 Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized
• CVE-2023-29542 CRITICAL 9.8 UPGRADE UPGRADE A newline in a filename could have been used to bypass the file extension security mechanisms that replace mal
• CVE-2026-65590 CRITICAL 9.8 UPGRADE n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in
• CVE-2026-70321 HIGH 8.8 UPGRADE Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code
• CVE-2026-50481 CRITICAL 9.9 MITIGATE Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to eleva
• CVE-2026-62830 CRITICAL 9.9 MITIGATE Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
• CVE-2026-114119 CRITICAL 9.8 Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative pass
• CVE-2026-62836 HIGH 8.7 MITIGATE Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an un
• CVE-2026-70035 HIGH 8.8 Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a net
• CVE-2026-70332 CRITICAL 9.6 MITIGATE Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Share
• CVE-2026-49481 CRITICAL 9.6 UpSnap is a wake on lan web app
• CVE-2026-56161 CRITICAL 9.6 MITIGATE Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a netwo
• CVE-2026-62896 CRITICAL 9.6 MITIGATE Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
• CVE-2026-68823 CRITICAL 9.1 MITIGATE Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute cod
• CVE-2026-70159 HIGH 7.5 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny s
• CVE-2026-73414 CRITICAL 9.2 Shescape is a simple shell escape library for JavaScript
• CVE-2026-96958 HIGH 7.5 UPGRADE DOWNGRADE Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
• CVE-2026-96960 HIGH 7.5 UPGRADE DOWNGRADE Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a
• CVE-2026-56160 CRITICAL 9.1 MITIGATE Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges ov
• CVE-2026-59133 HIGH 8.8 UPGRADE Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized
• CVE-2026-65768 HIGH 8.8 UPGRADE Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android
• CVE-2026-73298 HIGH 8.7 The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-ag
• CVE-2026-102870 HIGH 8.8 Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to e
• CVE-2026-49179 HIGH 8.8 UPGRADE UPGRADE Improper neutralization of special elements used in a command ('command injection') in Windows Active Director
• CVE-2026-57104 HIGH 8.8 UPGRADE Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer
• CVE-2026-62785 HIGH 8.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized atta
• CVE-2026-62795 HIGH 8.8 UPGRADE UPGRADE Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to exec
• CVE-2026-69320 HIGH 8.8 UPGRADE Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Co
• CVE-2026-70326 HIGH 8.8 UPGRADE Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate pri
• CVE-2026-70336 HIGH 8.8 UPGRADE Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacke
• CVE-2026-96230 HIGH 8.8 Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an
• CVE-2026-96233 HIGH 7.5 Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
• CVE-2026-96959 HIGH 7.5 UPGRADE DOWNGRADE Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service o
• CVE-2026-109468 HIGH 7.5 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny s
• CVE-2026-59113 HIGH 8.8 UPGRADE Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
• CVE-2026-85363 HIGH 8.8 Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a
• CVE-2026-65767 HIGH 8.8 UPGRADE Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for An
• CVE-2026-69326 HIGH 8.8 UPGRADE UPGRADE Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
• CVE-2026-69521 HIGH 8.8 UPGRADE UPGRADE Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network
• CVE-2026-70007 HIGH 8.8 Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.
• CVE-2026-96222 HIGH 7.4 UPGRADE UPGRADE Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacke
• CVE-2023-25734 HIGH 8.1 UPGRADE UPGRADE After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a r
• CVE-2026-13181 HIGH 8.1 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeNa
• CVE-2026-13186 HIGH 8.1 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, a path traversal vulnerability in the file-based persi
• CVE-2026-62918 HIGH 7.5 MITIGATE Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform
• CVE-2026-66321 HIGH 7.4 UPGRADE Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an una
• CVE-2026-70340 HIGH 8.1 UPGRADE Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
• CVE-2026-96251 HIGH 8.8 UPGRADE Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to
• CVE-2022-24513 HIGH 7.8 UPGRADE UPGRADE Visual Studio Elevation of Privilege Vulnerability
• CVE-2023-32214 HIGH 7.5 UPGRADE UPGRADE Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note:
• CVE-2026-13185 HIGH 8.1 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersiste
• CVE-2026-35425 HIGH 8.0 MITIGATE Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a ne
• CVE-2026-47299 HIGH 7.2 UPGRADE Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent all
• CVE-2026-56167 HIGH 8.5 MITIGATE Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over
• CVE-2026-57990 HIGH 7.4 MITIGATE Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized
• CVE-2026-65802 HIGH 7.4 UPGRADE External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclos
• CVE-2026-108456 HIGH 7.7 Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges ove
• CVE-2026-57105 HIGH 8.0 UPGRADE Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Share
• CVE-2026-62869 HIGH 8.8 MITIGATE Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoo
• CVE-2026-69306 HIGH 8.2 UPGRADE Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a securi
• CVE-2026-69363 HIGH 8.0 UPGRADE UPGRADE Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over
• CVE-2026-83862 HIGH 8.8 UPGRADE UPGRADE Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjac
• CVE-2026-96957 HIGH 8.8 UPGRADE UPGRADE Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security
• CVE-2026-113252 CRITICAL 9.6 UPGRADE Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote atta
• CVE-2026-113283 CRITICAL 9.6 UPGRADE Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote
• CVE-2026-13190 HIGH 8.1 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence uti
• CVE-2026-17545 HIGH 7.5 UPGRADE On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, C
• CVE-2026-17691 CRITICAL 9.6 UPGRADE Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to p
• CVE-2026-66312 MEDIUM 6.5 UPGRADE Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a netwo
• CVE-2026-69733 HIGH 7.8 UPGRADE UPGRADE Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
• CVE-2026-85790 MEDIUM 5.9 UPGRADE UPGRADE Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
• CVE-2026-44189 HIGH 7.8 A flaw was found in the Visual Studio Code Ansible Lightspeed extension's AnsiblePlaybookRunProvider
• CVE-2026-47285 MEDIUM 6.5 UPGRADE Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allo
• CVE-2026-65769 MEDIUM 6.5 UPGRADE Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized at
• CVE-2026-66315 HIGH 7.5 UPGRADE Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a netwo
• CVE-2026-70179 HIGH 7.5 Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a n
• CVE-2026-13182 HIGH 7.5 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish
• CVE-2026-13183 HIGH 7.5 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload upload metadata processing may leak cry
• CVE-2026-16800 HIGH 8.8 UPGRADE Improper control of generation of code ('Code Injection') in the schedule feature in Devolutions PowerShell Un
• CVE-2026-16801 HIGH 8.8 UPGRADE Improper control of generation of code ('Code Injection') in the variables feature in Devolutions PowerShell U
• CVE-2026-54981 HIGH 7.8 MITIGATE Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an un
• CVE-2026-65675 HIGH 7.1 MITIGATE No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a
• CVE-2026-65806 MEDIUM 6.5 UPGRADE Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network
• CVE-2026-66326 MEDIUM 6.5 UPGRADE Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over
• CVE-2026-69452 HIGH 7.1 UPGRADE UPGRADE Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a
• CVE-2026-69673 HIGH 7.8 UPGRADE UPGRADE Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker
• CVE-2026-70194 MEDIUM 6.5 Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature
• CVE-2026-70335 HIGH 7.8 UPGRADE Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot a
• CVE-2026-96185 HIGH 7.5 Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a
• CVE-2026-96913 HIGH 8.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
• CVE-2018-25439 HIGH 7.5 MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /include/thumb.php that allows unaut
• CVE-2025-66769 HIGH 7.5 DOWNGRADE A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Servi
• CVE-2026-110838 HIGH 7.5 UPGRADE FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before au
• CVE-2026-21655 HIGH 8.7 Deserialization of untrusted data vulnerability in Johnson Control victor on Windows, Johnson Controls CCure 9
• CVE-2026-44190 HIGH 7.8 A flaw was found in the Ansible Lightspeed Visual Studio Code extension
• CVE-2026-44191 HIGH 7.8 A flaw was found in the Visual Studio Code Ansible Lightspeed extension
• CVE-2026-66318 HIGH 8.1 UPGRADE Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose informa
• CVE-2026-71130 HIGH 8.2 DOWNGRADE Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)
• CVE-2023-28163 MEDIUM 6.5 UPGRADE UPGRADE When downloading files through the Save As dialog on Windows with suggested filenames containing environment v
• CVE-2026-0298 HIGH 8.1 UPGRADE An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of
• CVE-2026-113210 HIGH 8.8 UPGRADE Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to exe
• CVE-2026-114063 HIGH 7.5 SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview
• CVE-2026-114123 HIGH 7.5 D365 F&O MCP Server is a Model Context Protocol server for querying Dynamics 365 Finance & Operations X++ code
• CVE-2026-13187 HIGH 8.1 UPGRADE In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler provider type input may be tampered with
• CVE-2026-17692 CRITICAL 9.6 UPGRADE Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker wh
• CVE-2026-19171 CRITICAL 9.6 UPGRADE Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to poten
• CVE-2026-57989 HIGH 7.4 UPGRADE Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose informa
• CVE-2026-63120 HIGH 8.4 pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores
• CVE-2026-64636 HIGH 7.7 An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated u
• CVE-2026-69718 HIGH 7.8 UPGRADE UPGRADE Improper neutralization of special elements used in a command ('command injection') in Windows Update allows a
• CVE-2026-71113 HIGH 7.5 DOWNGRADE Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)
• CVE-2026-96303 MEDIUM 6.5 UPGRADE Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to
• CVE-2026-96911 HIGH 7.8 UPGRADE UPGRADE Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an
• CVE-2026-96914 HIGH 8.8 UPGRADE UPGRADE Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized att
• CVE-2026-0297 HIGH 8.1 UPGRADE UPGRADE A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-
• CVE-2026-113119 HIGH 8.8 UPGRADE Use after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to e
• CVE-2026-113134 HIGH 8.8 UPGRADE Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to
• CVE-2026-54202 HIGH 8.5 Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability in the archive crea
• CVE-2026-62772 HIGH 7.8 UPGRADE Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized
• CVE-2026-62799 HIGH 7.8 UPGRADE Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
• CVE-2026-66310 HIGH 7.7 UPGRADE External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclos
• CVE-2026-66314 MEDIUM 6.5 UPGRADE Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized at
• CVE-2026-68836 HIGH 7.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally
• CVE-2026-69354 HIGH 7.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges loca
• CVE-2026-69471 HIGH 7.8 UPGRADE UPGRADE Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
• CVE-2023-22648 HIGH 8.0 UPGRADE A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be
• CVE-2023-25738 MEDIUM 6.5 UPGRADE UPGRADE Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could

FAQ

How do I fix Microsoft products and KB updates vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Microsoft products and KB updates being exploited right now?

Yes: 6 Microsoft products and KB updates CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which Microsoft products and KB updates CVE should I patch first?

CVE-2019-1068 currently ranks highest (86/100): Microsoft SQL Server Remote Code Execution Vulnerability.

Software in this group

People search for: kb, microsoft, patch tuesday, exchange, sharepoint, office.

← Back to latest CVEs