{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Microsoft vulnerabilities","home_page_url":"https://patchfirst.co/vendor/microsoft/","feed_url":"https://patchfirst.co/feed/vendor/microsoft.json","description":"New and newly exploited Microsoft CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-110063","url":"https://patchfirst.co/cve/CVE-2026-110063/","title":"CVE-2026-110063: Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an…","content_text":"Microsoft · VM Inspector for Azure Virtual Machines. Not in CISA KEV. EPSS 0.9% (higher than 59.3% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 25.6 of 100.","summary":"Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-27T04:17:42.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":25.6,"kev":null,"epss":{"score":0.00888,"percentile":0.59279},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"VM Inspector for Azure Virtual Machines","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-83938","url":"https://patchfirst.co/cve/CVE-2026-83938/","title":"CVE-2026-83938: Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker…","content_text":"Microsoft · Azure Kubernetes Configuration Service. Not in CISA KEV. EPSS 0.7% (higher than 53.4% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 24.6 of 100.","summary":"Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T11:16:38.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":24.6,"kev":null,"epss":{"score":0.00707,"percentile":0.53378},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Azure Kubernetes Configuration Service","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-97785","url":"https://patchfirst.co/cve/CVE-2026-97785/","title":"CVE-2026-97785: Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network","content_text":"Microsoft · Microsoft Entra application proxy. Not in CISA KEV. EPSS 0.6% (higher than 50.9% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 24.1 of 100.","summary":"Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-26T11:16:39.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":24.1,"kev":null,"epss":{"score":0.00646,"percentile":0.50918},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Microsoft Entra application proxy","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-105014","url":"https://patchfirst.co/cve/CVE-2026-105014/","title":"CVE-2026-105014: Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an…","content_text":"Microsoft · Azure Pipelines. Not in CISA KEV. EPSS 0.7% (higher than 51.9% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. Priority 23.5 of 100.","summary":"Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an…","date_published":"2026-10-22T00:00:00.000Z","date_modified":"2026-10-24T04:18:16.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":23.5,"kev":null,"epss":{"score":0.00667,"percentile":0.51857},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Azure Pipelines","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-96951#kev","url":"https://patchfirst.co/cve/CVE-2026-96951/","title":"[KEV] CVE-2026-96951: Microsoft Windows Command Injection Vulnerability","content_text":"Microsoft · Windows. In CISA KEV since 2026-10-13. ENISA EUVD lists it as exploited. EPSS 9.8% (higher than 95.5% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 73.3 of 100.","summary":"Microsoft Windows Command Injection Vulnerability","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-29T16:20:22.000Z","tags":["kev","T1204.001","T1059"],"_patchfirst":{"reason":"kev","priority":73.3,"kev":{"dateAdded":"2026-10-13","ransomware":false},"epss":{"score":0.09813,"percentile":0.95543},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Microsoft","product":"Windows","techniqueIds":["T1204.001","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2026-105016","url":"https://patchfirst.co/cve/CVE-2026-105016/","title":"CVE-2026-105016: Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · .NET 10.0 runtime. Not in CISA KEV. EPSS 1.7% (higher than 76.6% of CVEs). CVSS 9.8 CRITICAL. Priority 24.3 of 100.","summary":"Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-22T22:17:52.000Z","tags":[],"_patchfirst":{"reason":"published","priority":24.3,"kev":null,"epss":{"score":0.01658,"percentile":0.76601},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":".NET 10.0 runtime","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-70242","url":"https://patchfirst.co/cve/CVE-2026-70242/","title":"CVE-2026-70242: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Microsoft 365 Apps for Enterprise. Not in CISA KEV. EPSS 1.6% (higher than 75.3% of CVEs). CVSS 9.8 CRITICAL. Priority 24.1 of 100.","summary":"Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-15T16:19:49.000Z","tags":[],"_patchfirst":{"reason":"published","priority":24.1,"kev":null,"epss":{"score":0.01569,"percentile":0.75319},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-70291","url":"https://patchfirst.co/cve/CVE-2026-70291/","title":"CVE-2026-70291: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Microsoft 365 Apps for Enterprise. Not in CISA KEV. EPSS 1.3% (higher than 71% of CVEs). CVSS 9.8 CRITICAL. Priority 23.2 of 100.","summary":"Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-15T21:17:46.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23.2,"kev":null,"epss":{"score":0.01329,"percentile":0.71002},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-105723","url":"https://patchfirst.co/cve/CVE-2026-105723/","title":"CVE-2026-105723: Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate…","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.3% (higher than 70.8% of CVEs). CVSS 9.8 CRITICAL. Priority 23.2 of 100.","summary":"Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate…","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-26T17:22:37.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23.2,"kev":null,"epss":{"score":0.01321,"percentile":0.70849},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-70279","url":"https://patchfirst.co/cve/CVE-2026-70279/","title":"CVE-2026-70279: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server…","content_text":"Microsoft · Microsoft Exchange Server 2016 Cumulative Update 23. Not in CISA KEV. EPSS 1.3% (higher than 70.1% of CVEs). CVSS 9.3 CRITICAL. Priority 22.7 of 100.","summary":"Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server…","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-13T23:18:06.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.7,"kev":null,"epss":{"score":0.01286,"percentile":0.70119},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Microsoft Exchange Server 2016 Cumulative Update 23","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-97749","url":"https://patchfirst.co/cve/CVE-2026-97749/","title":"CVE-2026-97749: Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Microsoft 365 Apps for Enterprise. Not in CISA KEV. EPSS 1.2% (higher than 68.1% of CVEs). CVSS 9.8 CRITICAL. Priority 22.6 of 100.","summary":"Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-15T16:15:12.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.6,"kev":null,"epss":{"score":0.01196,"percentile":0.6806},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-97016","url":"https://patchfirst.co/cve/CVE-2026-97016/","title":"CVE-2026-97016: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Microsoft 365 Apps for Enterprise. Not in CISA KEV. EPSS 1.2% (higher than 67.4% of CVEs). CVSS 9.8 CRITICAL. Priority 22.5 of 100.","summary":"Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-15T16:15:40.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.5,"kev":null,"epss":{"score":0.01172,"percentile":0.67419},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-88156","url":"https://patchfirst.co/cve/CVE-2026-88156/","title":"CVE-2026-88156: Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Microsoft 365 Apps for Enterprise. Not in CISA KEV. EPSS 1.2% (higher than 67.4% of CVEs). CVSS 9.8 CRITICAL. Priority 22.5 of 100.","summary":"Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-15T21:19:05.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.5,"kev":null,"epss":{"score":0.01172,"percentile":0.67419},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-83770","url":"https://patchfirst.co/cve/CVE-2026-83770/","title":"CVE-2026-83770: Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 66.3% of CVEs). CVSS 9.8 CRITICAL. Priority 22.3 of 100.","summary":"Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-16T16:21:29.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.3,"kev":null,"epss":{"score":0.01127,"percentile":0.6631},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-70300","url":"https://patchfirst.co/cve/CVE-2026-70300/","title":"CVE-2026-70300: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Microsoft 365 Apps for Enterprise. Not in CISA KEV. EPSS 1.1% (higher than 66.3% of CVEs). CVSS 9.8 CRITICAL. Priority 22.3 of 100.","summary":"Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-14T20:14:43.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.3,"kev":null,"epss":{"score":0.01128,"percentile":0.66332},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-83693","url":"https://patchfirst.co/cve/CVE-2026-83693/","title":"CVE-2026-83693: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 65.7% of CVEs). CVSS 9.8 CRITICAL. Priority 22.2 of 100.","summary":"Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-29T20:49:34.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.2,"kev":null,"epss":{"score":0.01103,"percentile":0.65708},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-100219","url":"https://patchfirst.co/cve/CVE-2026-100219/","title":"CVE-2026-100219: Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 11 version 23H2. Not in CISA KEV. EPSS 1.1% (higher than 65.8% of CVEs). CVSS 9.8 CRITICAL. Priority 22.2 of 100.","summary":"Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-20T15:59:30.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.2,"kev":null,"epss":{"score":0.01105,"percentile":0.65761},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 11 version 23H2","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-100202","url":"https://patchfirst.co/cve/CVE-2026-100202/","title":"CVE-2026-100202: Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 65.8% of CVEs). CVSS 9.8 CRITICAL. Priority 22.2 of 100.","summary":"Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-20T16:10:33.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.2,"kev":null,"epss":{"score":0.01105,"percentile":0.6576},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-97814","url":"https://patchfirst.co/cve/CVE-2026-97814/","title":"CVE-2026-97814: Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 65.4% of CVEs). CVSS 9.8 CRITICAL. Priority 22.1 of 100.","summary":"Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-16T17:18:05.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.1,"kev":null,"epss":{"score":0.01093,"percentile":0.65401},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-83780","url":"https://patchfirst.co/cve/CVE-2026-83780/","title":"CVE-2026-83780: Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 65.2% of CVEs). CVSS 9.8 CRITICAL. Priority 22.1 of 100.","summary":"Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-13T21:18:49.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.1,"kev":null,"epss":{"score":0.01084,"percentile":0.65204},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-70096","url":"https://patchfirst.co/cve/CVE-2026-70096/","title":"CVE-2026-70096: Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a…","content_text":"Microsoft · Microsoft 365 Apps for Enterprise. Not in CISA KEV. EPSS 1.1% (higher than 65.2% of CVEs). CVSS 9.8 CRITICAL. Priority 22.1 of 100.","summary":"Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a…","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-16T16:20:31.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.1,"kev":null,"epss":{"score":0.01086,"percentile":0.65232},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-70153","url":"https://patchfirst.co/cve/CVE-2026-70153/","title":"CVE-2026-70153: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over…","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.8% of CVEs). CVSS 9.8 CRITICAL. Priority 22.0 of 100.","summary":"Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over…","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-28T17:28:21.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22,"kev":null,"epss":{"score":0.0107,"percentile":0.64827},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-70147","url":"https://patchfirst.co/cve/CVE-2026-70147/","title":"CVE-2026-70147: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over…","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.8% of CVEs). CVSS 9.8 CRITICAL. Priority 22.0 of 100.","summary":"Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over…","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-28T17:27:55.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22,"kev":null,"epss":{"score":0.0107,"percentile":0.64827},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-97805","url":"https://patchfirst.co/cve/CVE-2026-97805/","title":"CVE-2026-97805: Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.9 of 100.","summary":"Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-16T17:18:04.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.9,"kev":null,"epss":{"score":0.01059,"percentile":0.64502},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-96320","url":"https://patchfirst.co/cve/CVE-2026-96320/","title":"CVE-2026-96320: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.2% of CVEs). CVSS 9.8 CRITICAL. Priority 21.9 of 100.","summary":"Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-16T15:41:08.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.9,"kev":null,"epss":{"score":0.0105,"percentile":0.64237},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-83910","url":"https://patchfirst.co/cve/CVE-2026-83910/","title":"CVE-2026-83910: Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.9 of 100.","summary":"Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-29T18:18:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.9,"kev":null,"epss":{"score":0.01061,"percentile":0.6455},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-83578","url":"https://patchfirst.co/cve/CVE-2026-83578/","title":"CVE-2026-83578: Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a…","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.6% of CVEs). CVSS 9.8 CRITICAL. Priority 21.9 of 100.","summary":"Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a…","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-29T19:59:34.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.9,"kev":null,"epss":{"score":0.01062,"percentile":0.6458},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-83519","url":"https://patchfirst.co/cve/CVE-2026-83519/","title":"CVE-2026-83519: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.9 of 100.","summary":"Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-29T20:00:14.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.9,"kev":null,"epss":{"score":0.01061,"percentile":0.6455},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-83517","url":"https://patchfirst.co/cve/CVE-2026-83517/","title":"CVE-2026-83517: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over…","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.9 of 100.","summary":"Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over…","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-29T20:00:29.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.9,"kev":null,"epss":{"score":0.01061,"percentile":0.6455},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-70157","url":"https://patchfirst.co/cve/CVE-2026-70157/","title":"CVE-2026-70157: Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over…","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.6% of CVEs). CVSS 9.8 CRITICAL. Priority 21.9 of 100.","summary":"Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over…","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-28T17:08:47.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.9,"kev":null,"epss":{"score":0.01061,"percentile":0.64551},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-100222","url":"https://patchfirst.co/cve/CVE-2026-100222/","title":"CVE-2026-100222: Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.9 of 100.","summary":"Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-20T15:55:49.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.9,"kev":null,"epss":{"score":0.01061,"percentile":0.64549},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-83782","url":"https://patchfirst.co/cve/CVE-2026-83782/","title":"CVE-2026-83782: Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.0% (higher than 63.1% of CVEs). CVSS 9.8 CRITICAL. Priority 21.7 of 100.","summary":"Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-16T16:21:31.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.7,"kev":null,"epss":{"score":0.01011,"percentile":0.63126},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-97816","url":"https://patchfirst.co/cve/CVE-2026-97816/","title":"CVE-2026-97816: Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1809. Not in CISA KEV. EPSS 1.0% (higher than 63.1% of CVEs). CVSS 9.8 CRITICAL. Priority 21.6 of 100.","summary":"Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-16T17:18:06.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.6,"kev":null,"epss":{"score":0.0101,"percentile":0.63082},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1809","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-96924","url":"https://patchfirst.co/cve/CVE-2026-96924/","title":"CVE-2026-96924: Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.0% (higher than 63.1% of CVEs). CVSS 9.8 CRITICAL. Priority 21.6 of 100.","summary":"Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-16T19:37:15.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.6,"kev":null,"epss":{"score":0.0101,"percentile":0.63081},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-96909","url":"https://patchfirst.co/cve/CVE-2026-96909/","title":"CVE-2026-96909: Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 11 version 23H2. Not in CISA KEV. EPSS 1.0% (higher than 62.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.5 of 100.","summary":"Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-16T15:02:07.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.5,"kev":null,"epss":{"score":0.00989,"percentile":0.62473},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 11 version 23H2","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-105010","url":"https://patchfirst.co/cve/CVE-2026-105010/","title":"CVE-2026-105010: Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a…","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.0% (higher than 62.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.5 of 100.","summary":"Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a…","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-26T15:30:09.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.5,"kev":null,"epss":{"score":0.00989,"percentile":0.62473},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-102210","url":"https://patchfirst.co/cve/CVE-2026-102210/","title":"CVE-2026-102210: Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1809. Not in CISA KEV. EPSS 1.0% (higher than 62.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.5 of 100.","summary":"Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-20T18:18:23.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.5,"kev":null,"epss":{"score":0.00989,"percentile":0.62473},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1809","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-88178","url":"https://patchfirst.co/cve/CVE-2026-88178/","title":"CVE-2026-88178: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Microsoft 365 Apps for Enterprise. Not in CISA KEV. EPSS 1.0% (higher than 61.9% of CVEs). CVSS 9.8 CRITICAL. Priority 21.4 of 100.","summary":"Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-15T21:19:07.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.4,"kev":null,"epss":{"score":0.00972,"percentile":0.61936},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Microsoft 365 Apps for Enterprise","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-83888","url":"https://patchfirst.co/cve/CVE-2026-83888/","title":"CVE-2026-83888: Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.0% (higher than 62.1% of CVEs). CVSS 9.8 CRITICAL. Priority 21.4 of 100.","summary":"Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-21T13:13:47.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.4,"kev":null,"epss":{"score":0.00977,"percentile":0.6211},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-69705","url":"https://patchfirst.co/cve/CVE-2026-69705/","title":"CVE-2026-69705: Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.0% (higher than 61.9% of CVEs). CVSS 9.8 CRITICAL. Priority 21.4 of 100.","summary":"Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-16T16:20:04.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.4,"kev":null,"epss":{"score":0.0097,"percentile":0.6186},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-70024","url":"https://patchfirst.co/cve/CVE-2026-70024/","title":"CVE-2026-70024: Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code…","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.0% (higher than 61.4% of CVEs). CVSS 9.8 CRITICAL. Priority 21.3 of 100.","summary":"Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code…","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-16T19:11:29.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.3,"kev":null,"epss":{"score":0.00958,"percentile":0.61449},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-69886","url":"https://patchfirst.co/cve/CVE-2026-69886/","title":"CVE-2026-69886: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 0.9% (higher than 61.2% of CVEs). CVSS 9.8 CRITICAL. Priority 21.3 of 100.","summary":"Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-16T17:55:18.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.3,"kev":null,"epss":{"score":0.00949,"percentile":0.61197},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-69883","url":"https://patchfirst.co/cve/CVE-2026-69883/","title":"CVE-2026-69883: Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 0.9% (higher than 61.2% of CVEs). CVSS 9.8 CRITICAL. Priority 21.3 of 100.","summary":"Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-19T13:18:35.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.3,"kev":null,"epss":{"score":0.00949,"percentile":0.61197},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-69639","url":"https://patchfirst.co/cve/CVE-2026-69639/","title":"CVE-2026-69639: Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1809. Not in CISA KEV. EPSS 0.9% (higher than 61.2% of CVEs). CVSS 9.8 CRITICAL. Priority 21.3 of 100.","summary":"Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-26T16:33:30.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.3,"kev":null,"epss":{"score":0.00949,"percentile":0.61197},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1809","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-69634","url":"https://patchfirst.co/cve/CVE-2026-69634/","title":"CVE-2026-69634: Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 0.9% (higher than 61.2% of CVEs). CVSS 9.8 CRITICAL. Priority 21.3 of 100.","summary":"Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-26T16:34:14.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.3,"kev":null,"epss":{"score":0.00949,"percentile":0.61197},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-96934","url":"https://patchfirst.co/cve/CVE-2026-96934/","title":"CVE-2026-96934: Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 0.9% (higher than 60.9% of CVEs). CVSS 9.8 CRITICAL. Priority 21.2 of 100.","summary":"Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-16T10:39:38.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.2,"kev":null,"epss":{"score":0.00939,"percentile":0.60881},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-85814","url":"https://patchfirst.co/cve/CVE-2026-85814/","title":"CVE-2026-85814: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over…","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 0.9% (higher than 60.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.1 of 100.","summary":"Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over…","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-16T19:34:38.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.1,"kev":null,"epss":{"score":0.00927,"percentile":0.60471},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-85809","url":"https://patchfirst.co/cve/CVE-2026-85809/","title":"CVE-2026-85809: Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized…","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 0.9% (higher than 60.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.1 of 100.","summary":"Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized…","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-16T19:38:42.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.1,"kev":null,"epss":{"score":0.00927,"percentile":0.60471},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-83523","url":"https://patchfirst.co/cve/CVE-2026-83523/","title":"CVE-2026-83523: Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 11 Version 24H2. Not in CISA KEV. EPSS 0.9% (higher than 60.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.1 of 100.","summary":"Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-29T18:24:23.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.1,"kev":null,"epss":{"score":0.00928,"percentile":0.60486},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 11 Version 24H2","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-70275","url":"https://patchfirst.co/cve/CVE-2026-70275/","title":"CVE-2026-70275: Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network","content_text":"Microsoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 0.9% (higher than 60.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.1 of 100.","summary":"Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-28T17:18:09.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.1,"kev":null,"epss":{"score":0.00928,"percentile":0.60486},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Microsoft","product":"Windows 10 Version 1607","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}