Merhaba
Yıllardır Patch Tuesday (Yama Salısı) yazıları takip ederim, ama Temmuz 2026 kayıtlara farklı bir şekilde geçecek. Zero Day Initiative’in (ZDI) bu ayki değerlendirmesi tek kelimeyle “rekor” diyor ve abartı değil. Microsoft bu ay tek seferde 621 CVE yayımladı. Rakamı doğru duydunuz. Son 20 yılın Microsoft sürümlerine bakıldığında, yıl başından bu yana biriken CVE sayısı diğer tüm yılların toplamını geçmiş durumda.
Bu yazıda hem Adobe hem Microsoft tarafını özetleyecek, ardından öncelik vermeniz gereken kritik açıklara odaklanacağım.
Adobe Tarafı: Artık İki Haftada Bir
Adobe bu ay itibarıyla bimonthly (iki haftada bir) yayın modeline geçti; yani yamalar ayın ikinci ve dördüncü Salı günlerinde çıkacak. Apple da benzer bir yaklaşımı benimseyeceğini açıkladı. Devasa sürümleri daha yönetilebilir parçalara bölmek açısından mantıklı bir hamle.
İlk sürümde Adobe 12 bülten ile 88 benzersiz CVE yayımladı. Etkilenen ürünler arasında ColdFusion, Commerce (Magento), After Effects, Animate, Audition, Bridge, Creative Cloud Desktop Application, Experience Manager, Illustrator, Media Encoder, Premiere Pro ve Content Credentials SDK var.
Ayın Genel Bakış Tablosu:
| Bülten ID | Ürün | CVE Sayısı | Önem Derecesi | En Yüksek CVSS | İstismar | Dağıtım Önceliği |
|---|---|---|---|---|---|---|
| APSB26-82 | Adobe ColdFusion | 13 | Critical | 9.9 | Hayır | 1 |
| APSB26-73 | Adobe Commerce | 13 | Critical | 9.6 | Hayır | 2 |
| APSB26-78 | Adobe After Effects | 3 | Critical | 7.8 | Hayır | 3 |
| APSB26-83 | Adobe Animate | 6 | Critical | 8.6 | Hayır | 3 |
| APSB26-71 | Adobe Audition | 6 | Critical | 7.8 | Hayır | 3 |
| APSB26-81 | Adobe Bridge | 6 | Critical | 7.8 | Hayır | 3 |
| APSB26-77 | Adobe Creative Cloud Desktop Application | 2 | Critical | 8.1 | Hayır | 3 |
| APSB26-74 | Adobe Experience Manager | 13 | Critical | 9.6 | Hayır | 3 |
| APSB26-79 | Adobe Illustrator | 5 | Critical | 9.3 | Hayır | 3 |
| APSB26-72 | Adobe Media Encoder | 5 | Critical | 7.8 | Hayır | 3 |
| APSB26-76 | Adobe Premiere Pro | 4 | Critical | 7.8 | Hayır | 3 |
| APSB26-80 | Content Credentials SDK | 12 | Critical | 8.2 | Hayır | 3 |
| TOPLAM | 12 bülten | 88 |
Burada dikkat çeken nokta şu: Aktif olarak sömürülen (exploited) bir açık yok; ancak önceliklendirmeniz gerekirse ColdFusion ve Commerce yamalarını en başa alın. Geri kalanı normal patch cadence (yama döngüsü) ile ilerletebilirsiniz. Bu ürünleri kullanıyorsanız, yamayın, gerisi düz.
Microsoft Tarafı: “The Mother of All Releases”
Şimdi asıl mesele. Bu ay Microsoft’un yayımladığı 621 CVE‘nin bir kısmı, kullanıcı müdahalesi gerektirmeyen online servislerde. Ayrıca Chromium ve Chromium tabanlı Microsoft Edge’de listelenen ~480 hata da var ki ZDI bunları ayrı tutuyor. ZDI, son 20 yılın Microsoft sürümlerine baktığında yıl başından bu yana biriken CVE sayısının diğer tüm yılların toplamını geçtiğini gösteriyor.
Kaynak: Zero Day Initiative.
Ürün yelpazesi de bir o kadar dikkat çekici: Windows ve Windows bileşenleri, Office ve Office bileşenleri, Azure, .NET ve Visual Studio, GitHub Copilot, Defender, Exchange Server, Hyper-V… hatta Age of Empires II ve Minecraft Server bile listede (gerçekten!).
Severity (önem derecesi) dağılımı: 63 Critical, 6 Moderate, 1 Low, geri kalanı Important. Bu açıklardan sekizi ZDI programı üzerinden bildirilmiş. İki CVE aktif olarak sömürülüyor, biri de publicly known (kamuya açık) durumda.
Bu fili nasıl yiyeceğiz? Tek lokmada değil elbette. En önemli açıklara tek tek bakalım.
Aktif Sömürülen Açıklar (En Acil Olanlar)
CVE-2026-56155 – Active Directory Federation Services (AD FS) Elevation of Privilege Bu ay yamalanan birkaç AD FS açığından biri, ama aktif sömürülen tek AD FS açığı. Yetersiz access-control (erişim denetimi) granülaritesinden kaynaklanıyor; başlamak için local access (yerel erişim) ve düşük ayrıcalık gerektiriyor. Ancak AD FS tam da saldırganların bir kez içeri girdikten sonra pivot yapmayı sevdiği kimlik altyapısıdır. Ransomware senaryolarında sıkça gördüğümüz gibi bir RCE ile eşleştirilebilir. Bu yamayı hızlıca test edip dağıtın.
CVE-2026-56164 – Microsoft SharePoint Server Elevation of Privilege Bu ay sömürülen ikinci açık. CVSS puanı mütevazı görünüyor (5.3), ama Moderate önem derecesindeki açıkların neden önemli olabileceğinin güzel bir örneği. Missing-authentication (kimlik doğrulama eksikliği) açığı; yani unauthenticated (kimliği doğrulanmamış) bir saldırgan, kullanıcı etkileşimi olmadan ağ üzerinden erişebiliyor. Bu kadar erişilebilir bir şey aktif olarak kötüye kullanılıyorsa, puana bakmadan hemen yamayın.
Aktif Sömürülmese de Kritik Olanlar
CVE-2026-57092 – Windows VMSwitch Elevation of Privilege Ayın en yüksek CVSS puanı burada: sağlam bir 9.9. Bir use-after-free açığı; düşük ayrıcalıklı bir saldırganın VM sınırını aşarak host’u tamamen ele geçirmesine olanak tanıyor. Pwn2Own Berlin’de ESXi üzerinde benzeri gösterilmişti, ama görünen o ki tek örnek değilmiş. Hyper-V ortamlarınızda VMSwitch kullanıyorsanız (ki büyük ihtimalle kullanıyorsunuz), hızlıca test edip dağıtın.
CVE-2026-50522 / CVE-2026-58644 – SharePoint Remote Code Execution Birbirinin eşi bu iki CVSS 9.8 açığı, deserialization-of-untrusted-data (güvenilmeyen verinin seri durumdan çıkarılması) kaynaklı ve kimlik doğrulama ya da kullanıcı etkileşimi olmadan erişilebilir. CVE-2026-50522, Pwn2Own Berlin’de gösterilmişti; dolayısıyla Microsoft’un bunu “Exploit Maturity Unknown” olarak listelemesi ilginç, çünkü çalışan exploit’i kendilerine biz teslim etmiştik. Kendi risk değerlendirmenizi yapın, %100 vendor’a güvenmeyin. İnternete açık SharePoint sunucularınız varsa bu yamayı hızlıca uygulayın.
CVE-2026-56190 – Remote Desktop Protocol (RDP) Remote Code Execution Unauthenticated, ağ üzerinden erişilebilir ve kullanıcı etkileşimi gerektirmeyen bir açık. Kök nedeni klasik: use of uninitialized resource (başlatılmamış kaynak kullanımı, CWE-908). Özel hazırlanmış RDP trafiği, hiç düzgün başlatılmamış belleğe dokunarak kod yürütmeyi yönlendirebilir. RDP sunucuları yaygın bir hedef; sistemlerinizi tarayıp hangilerinin internete açık olduğunu tespit ederek başlayın.
CVE-2026-55008 – Microsoft Exchange Server Spoofing Başlığa aldanmayın, bunu olduğu gibi bir XSS açığı gibi ele alın. CVSS 9.6 olarak listeleniyor çünkü Outlook Web Access (OWA) üzerinde stored cross-site scripting (depolanmış XSS) açığı ve scope-changed (kapsam değişikliği) etkisiyle web uygulaması bağlamının tamamen dışına çıkabiliyor. Saldırgan özel hazırlanmış bir e-posta gönderiyor; kurban bunu OWA’da açtığı anda tarayıcı oturumunda keyfi JavaScript çalışıyor. Ek yok, makro uyarısı yok, sadece mesajı görüntülemek yeterli. OWA kullanıyorsanız bunu hızlıca test edip dağıtın.
CVE-2026-50518 – Windows DHCP Server Remote Code Execution Bu sürümde birkaç DHCP RCE yaması var; diğerinde bazı koşullar (caveat) varken bunda yok. İkisi de CVSS 9.8 puanlı heap-based buffer overflow (yığın tabanlı arabellek taşması), ikisi de unauthenticated ve ağdan erişilebilir. DHCP Server rolünü internete komşu herhangi bir şeyde çalıştırıyorsanız (çalıştırmıyorsunuz, değil mi?), bunlar listenin en üstüne çıksın.
CVE-2026-56188 – Windows Server Network Driver Remote Code Execution Bir başka Critical açık, bu sefer bir race condition (yarış durumu) kaynaklı. Bir TOCTOU açığının bu kadar yüksek puanlanmasını görmek her zaman ilginçtir, çünkü race condition’ları güvenilir biçimde sömürmek meşhur derecede zordur. Sömürülmesi zor olabilir; ancak bu açık, kullanıcı etkileşimi olmadan ağ üzerinden ayrıcalıklı kod yürütmeye izin verebilir. “Race condition zor” diye rahatlayıp wormable (solucanlaşabilir) bir açığı gözden kaçırmayın.
CVE-2026-55010 – Minecraft Bedrock Dedicated Server Remote Code Execution Bunu “neden olmasın” kategorisine koyalım. Minecraft Bedrock Dedicated Server üzerinde bir heap-based buffer overflow; yine CVSS 9.8 ve yine unauthenticated RCE. Evet, çocuğunuzun Minecraft sunucusu (o sunucu çocuğunuzun, değil mi?), DHCP altyapınızla aynı sınıf açığa maruz. Yine de yamayın.
Temmuz 2026 Microsoft CVE Listesi (Tam)
Aşağıda Microsoft’un bu ay yayımladığı tüm CVE’ler yer alıyor (Chromium tabanlı Edge dahil). Public = kamuya açık biçimde bilinip bilinmediği, Sömürülüyor = aktif olarak istismar edilip edilmediği. Tür kısaltmaları: RCE (uzaktan kod yürütme), EoP (ayrıcalık yükseltme), Info (bilgi ifşası), DoS (hizmet reddi), SFB (güvenlik özelliği atlatma), Spoofing (kimlik sahteciliği), Tampering (kurcalama).
| CVE | Başlık | Severity | CVSS | Public | İstismar | Tür |
|---|---|---|---|---|---|---|
| CVE-2026-56155 | Active Directory Federation Services Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Evet | EoP |
| CVE-2026-56164 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Moderate | 5.3 | Hayır | Evet | EoP |
| CVE-2026-50661 | Windows BitLocker Security Feature Bypass Vulnerability | Important | 6.1 | Evet | Hayır | SFB |
| CVE-2026-54121 | Active Directory Certificate Services Elevation of Privilege Vulnerability | Critical | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-45499 ** | Azure OpenAI Elevation of Privilege Vulnerability | Critical | 9.9 | Hayır | Hayır | EoP |
| CVE-2026-48564 | DHCP Server Service Remote Code Execution Vulnerability | Critical | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-50370 | DHCP Server Service Remote Code Execution Vulnerability | Critical | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-56159 | DHCP Server Service Remote Code Execution Vulnerability | Critical | 9.8 | Hayır | Hayır | RCE |
| CVE-2026-50382 | DirectX Graphics Kernel Remote Code Execution Vulnerability | Critical | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-41106 ** | Microsoft 365 Copilot Elevation of Privilege Vulnerability | Critical | 9.3 | Hayır | Hayır | EoP |
| CVE-2026-26145 ** | Microsoft Azure Synapse Elevation of Privilege Vulnerability | Critical | 4.8 | Hayır | Hayır | EoP |
| CVE-2026-48561 | Microsoft Copilot Remote Code Execution Vulnerability | Critical | 9.6 | Hayır | Hayır | RCE |
| CVE-2026-55011 | Microsoft Defender Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55012 | Microsoft Defender Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55944 | Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability | Critical | 9.8 | Hayır | Hayır | RCE |
| CVE-2026-57100 ** | Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability | Critical | 9.9 | Hayır | Hayır | EoP |
| CVE-2026-55041 | Microsoft Excel Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-54998 ** | Microsoft Exchange Online Elevation of Privilege Vulnerability | Critical | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-55008 | Microsoft Exchange Server Spoofing Vulnerability | Critical | 9.6 | Hayır | Hayır | Spoofing |
| CVE-2026-54992 | Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability | Critical | 8.4 | Hayır | Hayır | RCE |
| CVE-2026-50314 | Microsoft Office Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50467 | Microsoft Office Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55018 | Microsoft Office Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55022 | Microsoft Office Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55045 | Microsoft Office Remote Code Execution Vulnerability | Critical | 8.4 | Hayır | Hayır | RCE |
| CVE-2026-55049 | Microsoft Office Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55129 | Microsoft Office Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55056 | Microsoft Office Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55140 | Microsoft Office Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55043 | Microsoft PowerPoint Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55123 | Microsoft PowerPoint Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55120 | Microsoft PowerPoint Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50522 | Microsoft SharePoint Remote Code Execution Vulnerability | Critical | 9.8 | Hayır | Hayır | RCE |
| CVE-2026-58644 | Microsoft SharePoint Remote Code Execution Vulnerability | Critical | 9.8 | Hayır | Hayır | RCE |
| CVE-2026-55040 | Microsoft SharePoint Server Security Feature Bypass Vulnerability | Critical | 9.1 | Hayır | Hayır | SFB |
| CVE-2026-54117 | Microsoft SQL Server Remote Code Execution Vulnerability | Critical | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-54118 | Microsoft SQL Server Remote Code Execution Vulnerability | Critical | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-50655 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-56189 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-57090 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Critical | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-57094 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Critical | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-57087 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Critical | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-57092 | Microsoft Windows VMSwitch Elevation of Privilege Vulnerability | Critical | 9.9 | Hayır | Hayır | EoP |
| CVE-2026-55033 | Microsoft Word Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55127 | Microsoft Word Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55132 | Microsoft Word Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55010 | Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability | Critical | 9.8 | Hayır | Hayır | RCE |
| CVE-2026-50474 | Remote Desktop Client Remote Code Execution Vulnerability | Critical | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-49164 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Critical | 8.1 | Hayır | Hayır | RCE |
| CVE-2026-54128 | Windows DHCP Client Remote Code Execution Vulnerability | Critical | 8.4 | Hayır | Hayır | RCE |
| CVE-2026-50518 | Windows DHCP Server Remote Code Execution Vulnerability | Critical | 9.8 | Hayır | Hayır | RCE |
| CVE-2026-49796 | Windows GDI+ Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50380 | Windows GDI+ Remote Code Execution Vulnerability | Critical | 9.6 | Hayır | Hayır | RCE |
| CVE-2026-54127 | Windows Hyper-V Elevation of Privilege Vulnerability | Critical | 7.4 | Hayır | Hayır | EoP |
| CVE-2026-50680 | Windows Hyper-V Elevation of Privilege Vulnerability | Critical | 8.2 | Hayır | Hayır | EoP |
| CVE-2026-50327 | Windows Media Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-58542 | Windows Media Remote Code Execution Vulnerability | Critical | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-58608 | Windows Print Spooler Remote Code Execution Vulnerability | Critical | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-54982 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Critical | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-54995 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Critical | 8.1 | Hayır | Hayır | RCE |
| CVE-2026-42982 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Critical | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50392 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Critical | 7 | Hayır | Hayır | EoP |
| CVE-2026-50694 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability | Critical | 8.1 | Hayır | Hayır | RCE |
| CVE-2026-56188 | Windows Server Network driver Remote Code Execution Vulnerability | Critical | 9.8 | Hayır | Hayır | RCE |
| CVE-2026-50444 | Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability | Critical | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-54999 | Windows TCP/IP Remote Code Execution Vulnerability | Critical | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-47302 | .NET Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-50525 | .NET Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-50651 | .NET Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-57108 | .NET Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-50524 | .NET Framework Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-50527 | .NET Framework Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-50648 | .NET Framework Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-50650 | .NET Framework Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50646 | .NET Framework Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50649 | .NET Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-47304 | .NET Security Feature Bypass Vulnerability | Important | 8.1 | Hayır | Hayır | SFB |
| CVE-2026-50528 | .NET Security Feature Bypass Vulnerability | Important | 8.2 | Hayır | Hayır | SFB |
| CVE-2026-50659 | .NET Spoofing Vulnerability | Important | 6.5 | Hayır | Hayır | Spoofing |
| CVE-2026-50526 | .NET Tampering Vulnerability | Important | 7 | Hayır | Hayır | Tampering |
| CVE-2026-50682 | Active Directory Denial of Service Vulnerability | Important | 7.1 | Hayır | Hayır | DoS |
| CVE-2026-55001 | Active Directory Domain Services Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50647 | Active Directory Federation Server Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-50684 | Active Directory Federation Server Spoofing Vulnerability | Important | 4.8 | Hayır | Hayır | Spoofing |
| CVE-2026-56170 | ASP.NET Core Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-47300 | ASP.NET Core Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-47303 | ASP.NET Core Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-50652 | Azure Active Directory Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-50653 | Azure Active Directory Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-57969 | Azure CycleCloud Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-58279 | Azure CycleCloud Elevation of Privilege Vulnerability | Important | 6.5 | Hayır | Hayır | EoP |
| CVE-2026-47632 | Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-50338 | Azure Spring Apps Elevation of Privilege Vulnerability | Important | 8.2 | Hayır | Hayır | EoP |
| CVE-2026-50488 | Clipboard User Service Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50491 | Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50381 | Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50427 | Content Delivery Manager Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50692 | Desktop Window Manager Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-58633 | Desktop Window Manager Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-58634 | Desktop Window Manager Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50296 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50375 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Important | 6.3 | Hayır | Hayır | EoP |
| CVE-2026-50353 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50493 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-56643 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-56644 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-58629 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-49174 | DNS Client Tampering Vulnerability | Important | 6.1 | Hayır | Hayır | Tampering |
| CVE-2026-50495 | DNS Client Tampering Vulnerability | Important | 6.1 | Hayır | Hayır | Tampering |
| CVE-2026-57088 | Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50663 | Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability | Important | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-47282 | GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-41109 | GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability | Important | 8.8 | Hayır | Hayır | SFB |
| CVE-2026-50510 | GitHub Copilot Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-49787 | HTTP.sys Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-50420 | HTTP.sys Information Disclosure Vulnerability | Important | 6.2 | Hayır | Hayır | Info |
| CVE-2026-49788 | HTTP/2 Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-50696 | Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-58617 | M365 Copilot for iOS Elevation of Privilege Vulnerability | Important | 8.1 | Hayır | Hayır | EoP |
| CVE-2026-58595 | Microsoft Bing App for IOS Spoofing Vulnerability | Important | 8.1 | Hayır | Hayır | Spoofing |
| CVE-2026-49162 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50305 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50361 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50466 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50458 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50658 | Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-56178 | Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability | Important | 5.5 | Hayır | Hayır | EoP |
| CVE-2026-50657 | Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability | Important | 4.7 | Hayır | Hayır | Info |
| CVE-2026-50329 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-58541 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-58596 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Important | 8.3 | Hayır | Hayır | EoP |
| CVE-2026-57991 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | Important | 7.4 | Hayır | Hayır | Info |
| CVE-2026-58291 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | Important | 6.1 | Hayır | Hayır | Info |
| CVE-2026-57981 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-57984 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 7.5 | Hayır | Hayır | RCE |
| CVE-2026-57985 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 7.6 | Hayır | Hayır | RCE |
| CVE-2026-57986 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 7.5 | Hayır | Hayır | RCE |
| CVE-2026-57988 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 7.1 | Hayır | Hayır | RCE |
| CVE-2026-57992 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 7.5 | Hayır | Hayır | RCE |
| CVE-2026-58276 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 7.5 | Hayır | Hayır | RCE |
| CVE-2026-56645 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-57974 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-57975 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 7.5 | Hayır | Hayır | RCE |
| CVE-2026-58281 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 8.3 | Hayır | Hayır | RCE |
| CVE-2026-58284 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 8.3 | Hayır | Hayır | RCE |
| CVE-2026-58285 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 8.3 | Hayır | Hayır | RCE |
| CVE-2026-58287 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 8.3 | Hayır | Hayır | RCE |
| CVE-2026-58288 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 8.3 | Hayır | Hayır | RCE |
| CVE-2026-58289 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 9 | Hayır | Hayır | RCE |
| CVE-2026-58290 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 7.5 | Hayır | Hayır | RCE |
| CVE-2026-58292 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 7.5 | Hayır | Hayır | RCE |
| CVE-2026-58293 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 8.1 | Hayır | Hayır | RCE |
| CVE-2026-58294 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Important | 7.5 | Hayır | Hayır | RCE |
| CVE-2026-57983 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | Important | 8.7 | Hayır | Hayır | SFB |
| CVE-2026-58295 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | Important | 8.3 | Hayır | Hayır | SFB |
| CVE-2026-58525 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | Important | 8.2 | Hayır | Hayır | SFB |
| CVE-2026-57987 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | Important | 6.5 | Hayır | Hayır | Spoofing |
| CVE-2026-58278 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | Important | 5.4 | Hayır | Hayır | Spoofing |
| CVE-2026-56646 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | Important | 6.5 | Hayır | Hayır | Spoofing |
| CVE-2026-57977 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | Important | 7.1 | Hayır | Hayır | Spoofing |
| CVE-2026-57993 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | Important | 7.4 | Hayır | Hayır | Spoofing |
| CVE-2026-58282 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | Important | 8.1 | Hayır | Hayır | Spoofing |
| CVE-2026-58283 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | Important | 8.1 | Hayır | Hayır | Spoofing |
| CVE-2026-58286 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | Important | 8.1 | Hayır | Hayır | Spoofing |
| CVE-2026-58298 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | Important | 7.2 | Hayır | Hayır | Spoofing |
| CVE-2026-58524 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | Important | 5.4 | Hayır | Hayır | Spoofing |
| CVE-2026-58296 | Microsoft Edge for Android Information Disclosure Vulnerability | Important | 7.1 | Hayır | Hayır | Info |
| CVE-2026-58297 | Microsoft Edge for Android Information Disclosure Vulnerability | Important | 7.1 | Hayır | Hayır | Info |
| CVE-2026-58300 | Microsoft Edge for Android Information Disclosure Vulnerability | Important | 6.2 | Hayır | Hayır | Info |
| CVE-2026-58522 | Microsoft Edge for Android Information Disclosure Vulnerability | Important | 6.8 | Hayır | Hayır | Info |
| CVE-2026-58299 | Microsoft Edge for Android Remote Code Execution Vulnerability | Important | 7.5 | Hayır | Hayır | RCE |
| CVE-2026-58523 | Microsoft Edge for Android Security Feature Bypass Vulnerability | Important | 6.5 | Hayır | Hayır | SFB |
| CVE-2026-50678 | Microsoft Excel Information Disclosure Vulnerability | Important | 6.6 | Hayır | Hayır | Info |
| CVE-2026-54988 | Microsoft Excel Information Disclosure Vulnerability | Important | 6.1 | Hayır | Hayır | Info |
| CVE-2026-48580 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50408 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-55046 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-55138 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-55054 | Microsoft Excel Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-55122 | Microsoft Excel Information Disclosure Vulnerability | Important | 7.1 | Hayır | Hayır | Info |
| CVE-2026-55898 | Microsoft Excel Information Disclosure Vulnerability | Important | 6.1 | Hayır | Hayır | Info |
| CVE-2026-50675 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55899 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55948 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-58618 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-47642 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55024 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55025 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55031 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55048 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55029 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55039 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55136 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55141 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55036 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55044 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55037 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55058 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55137 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55053 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55131 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-54131 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55947 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55949 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-56156 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55006 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-55009 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-55005 | Microsoft Exchange Server Remote Code Execution Vulnerability | Important | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-56642 | Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability | Important | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-50343 | Microsoft Install Service Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50439 | Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability | Important | 8.1 | Hayır | Hayır | RCE |
| CVE-2026-58537 | Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-56193 | Microsoft Office Information Disclosure Vulnerability | Important | 7.1 | Hayır | Hayır | Info |
| CVE-2026-55023 | Microsoft Office Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-55026 | Microsoft Office Information Disclosure Vulnerability | Important | 6.2 | Hayır | Hayır | Info |
| CVE-2026-55027 | Microsoft Office Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-55028 | Microsoft Office Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-55047 | Microsoft Office Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-55035 | Microsoft Office Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-55057 | Microsoft Office Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-55121 | Microsoft Office Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-55042 | Microsoft Office Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-55139 | Microsoft Office Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50665 | Microsoft Office Information Disclosure Vulnerability | Important | 7.8 | Hayır | Hayır | Info |
| CVE-2026-56192 | Microsoft Office Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-56195 | Microsoft Office Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-47290 | Microsoft Office Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50301 | Microsoft Office Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55017 | Microsoft Office Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55125 | Microsoft Office Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55133 | Microsoft OneNote Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-58636 | Microsoft PC Manager Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50438 | Microsoft PC Manager Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-58647 | Microsoft PowerBI Report Server Spoofing Vulnerability | Important | 8 | Hayır | Hayır | Spoofing |
| CVE-2026-55052 | Microsoft SharePoint Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-58277 | Microsoft SharePoint Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-55051 | Microsoft SharePoint Server Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-54108 | Microsoft SharePoint Server Spoofing Vulnerability | Important | 6.5 | Hayır | Hayır | Spoofing |
| CVE-2026-55016 | Microsoft SharePoint Server Spoofing Vulnerability | Important | 4.6 | Hayır | Hayır | Spoofing |
| CVE-2026-55019 | Microsoft SharePoint Server Spoofing Vulnerability | Important | 4.6 | Hayır | Hayır | Spoofing |
| CVE-2026-55020 | Microsoft SharePoint Server Spoofing Vulnerability | Important | 4.6 | Hayır | Hayır | Spoofing |
| CVE-2026-55021 | Microsoft SharePoint Server Spoofing Vulnerability | Important | 7.3 | Hayır | Hayır | Spoofing |
| CVE-2026-55030 | Microsoft SharePoint Server Spoofing Vulnerability | Important | 4.6 | Hayır | Hayır | Spoofing |
| CVE-2026-55034 | Microsoft SharePoint Server Spoofing Vulnerability | Important | 7.3 | Hayır | Hayır | Spoofing |
| CVE-2026-55126 | Microsoft SharePoint Server Spoofing Vulnerability | Important | 7.3 | Hayır | Hayır | Spoofing |
| CVE-2026-55135 | Microsoft SharePoint Server Spoofing Vulnerability | Important | 4.6 | Hayır | Hayır | Spoofing |
| CVE-2026-56157 | Microsoft SharePoint Server Spoofing Vulnerability | Important | 5.4 | Hayır | Hayır | Spoofing |
| CVE-2026-47296 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-55002 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-47295 | Microsoft SQL Server Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-50468 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-54116 | Microsoft SQL Server Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-42900 | Microsoft Windows App Store Elevation of Privilege Vulnerability | Important | 8.1 | Hayır | Hayır | EoP |
| CVE-2026-49784 | Microsoft Windows App Store Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50356 | Microsoft Windows App Store Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-49165 | Microsoft Windows App Store Information Disclosure Vulnerability | Important | 7.1 | Hayır | Hayır | Info |
| CVE-2026-54993 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-58610 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55050 | Microsoft Word Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-55124 | Microsoft Word Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-55142 | Microsoft Word Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-55032 | Microsoft Word Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55055 | Microsoft Word Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55038 | Microsoft Word Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55134 | Microsoft Word Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55128 | Microsoft Word Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-55130 | Microsoft Word Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50359 | Microsoft XML Core Services Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-57097 | Microsoft XML Security Feature Bypass Vulnerability | Important | 6.4 | Hayır | Hayır | SFB |
| CVE-2026-50346 | Netlogon RPC Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50402 | NTFS Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50506 | OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-45646 | OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-54989 | Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50365 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability | Important | 8 | Hayır | Hayır | EoP |
| CVE-2026-54990 | Remote Desktop Client Remote Code Execution Vulnerability | Important | 9.8 | Hayır | Hayır | RCE |
| CVE-2026-58594 | Remote Desktop Client Remote Code Execution Vulnerability | Important | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-56190 | Remote Desktop Protocol Remote Code Execution Vulnerability | Important | 9.8 | Hayır | Hayır | RCE |
| CVE-2026-49783 | Secure Boot Security Feature Bypass Vulnerability | Important | 7.8 | Hayır | Hayır | SFB |
| CVE-2026-42990 | SQL Server ODBC driver Elevation of Privilege Vulnerability | Important | 9.8 | Hayır | Hayır | EoP |
| CVE-2026-49168 | Storage Spaces Direct Elevation of Privilege Vulnerability | Important | 6.2 | Hayır | Hayır | EoP |
| CVE-2026-48581 | Surface Broker SDMA Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-49180 | Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50455 | Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-54111 | Universal Print Management Service Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-58543 | Universal Print Management Service Elevation of Privilege Vulnerability | Important | 6.3 | Hayır | Hayır | EoP |
| CVE-2026-58601 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50520 | Visual Studio Code Remote Code Execution Vulnerability | Important | 8.4 | Hayır | Hayır | RCE |
| CVE-2026-45496 | Visual Studio Code Security Feature Bypass Vulnerability | Important | 5.5 | Hayır | Hayır | SFB |
| CVE-2026-57101 | Visual Studio Code Security Feature Bypass Vulnerability | Important | 7.1 | Hayır | Hayır | SFB |
| CVE-2026-57102 | Visual Studio Code Security Feature Bypass Vulnerability | Important | 8.8 | Hayır | Hayır | SFB |
| CVE-2026-47305 | Visual Studio Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-49805 | Win32k Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50297 | Win32k Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50325 | Win32k Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50489 | Win32k Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-57095 | Win32k Elevation of Privilege Vulnerability | Important | 6.2 | Hayır | Hayır | EoP |
| CVE-2026-50416 | Win32k Information Disclosure Vulnerability | Important | 3.3 | Hayır | Hayır | Info |
| CVE-2026-56184 | Win32k Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50432 | Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability | Important | 5.3 | Hayır | Hayır | DoS |
| CVE-2026-54119 | Windows Active Directory Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-57976 | Windows Active Directory Domain Services Denial of Service Vulnerability | Important | 6.5 | Hayır | Hayır | DoS |
| CVE-2026-50366 | Windows Active Directory Domain Services Denial of Service Vulnerability | Important | 6.5 | Hayır | Hayır | DoS |
| CVE-2026-49178 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | Important | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-58529 | Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability | Important | 7.1 | Hayır | Hayır | Info |
| CVE-2026-54983 | Windows Active Directory Federation Services Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-50695 | Windows Active Directory Federation Services Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-50304 | Windows Active Directory Federation Services Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-50368 | Windows Active Directory Federation Services Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-50324 | Windows Active Directory Federation Services Denial of Service Vulnerability | Important | 5.9 | Hayır | Hayır | DoS |
| CVE-2026-50355 | Windows Active Directory Federation Services Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-50411 | Windows Active Directory Federation Services Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-58631 | Windows Admin Center (WAC) Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-56196 | Windows Admin Center (WAC) Remote Code Execution Vulnerability | Important | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-56197 | Windows Admin Center (WAC) Remote Code Execution Vulnerability | Important | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-56169 | Windows Admin Center Elevation of Privilege Vulnerability | Important | 8.1 | Hayır | Hayır | EoP |
| CVE-2026-57107 | Windows Admin Center Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-56185 | Windows Admin Center Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-50312 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important | 4.7 | Hayır | Hayır | EoP |
| CVE-2026-50462 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-57093 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-34346 | Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-48572 | Windows App Package Installer Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-48571 | Windows App Package Installer Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50400 | Windows App Package Installer Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50331 | Windows Application Model Core API Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-49803 | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50351 | Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50440 | Windows Audio Service Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-34328 | Windows Audio Service Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50406 | Windows Backup Engine Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50364 | Windows Backup Service Elevation of Privilege Vulnerability | Important | 7.3 | Hayır | Hayır | EoP |
| CVE-2026-42975 | Windows Bluetooth Port Driver Remote Code Execution | Important | 8 | Hayır | Hayır | RCE |
| CVE-2026-58538 | Windows Bluetooth Service Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-58638 | Windows Boot Loader Security Feature Bypass Vulnerability | Important | 6 | Hayır | Hayır | SFB |
| CVE-2026-58637 | Windows Client-Side Caching Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50384 | Windows Clip Service Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-49183 | Windows Clipboard Server Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50689 | Windows Clipboard Server Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50374 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important | 6.3 | Hayır | Hayır | EoP |
| CVE-2026-58536 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-58613 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50401 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50697 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50667 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50421 | Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50428 | Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability | Important | 7.1 | Hayır | Hayır | Info |
| CVE-2026-50352 | Windows Cryptographic Services Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50302 | Windows Cryptographic Services Security Feature Bypass Vulnerability | Important | 4.2 | Hayır | Hayır | SFB |
| CVE-2026-55144 | Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability | Important | 7.1 | Hayır | Hayır | Tampering |
| CVE-2026-50347 | Windows Data.dll Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-49181 | Windows DHCP Client Elevation of Privilege Vulnerability | Important | 7.5 | Hayır | Hayır | EoP |
| CVE-2026-50683 | Windows DHCP Client Elevation of Privilege Vulnerability | Important | 8 | Hayır | Hayır | EoP |
| CVE-2026-58627 | Windows DHCP Server Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-50685 | Windows DHCP Server Remote Code Execution Vulnerability | Important | 7.5 | Hayır | Hayır | RCE |
| CVE-2026-49807 | Windows DirectX Information Disclosure Vulnerability | Important | 6.2 | Hayır | Hayır | Info |
| CVE-2026-49175 | Windows DNS Client Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50487 | Windows DNS Client Elevation of Privilege Vulnerability | Important | 8.1 | Hayır | Hayır | EoP |
| CVE-2026-50465 | Windows DNS Client Tampering Vulnerability | Important | 7.1 | Hayır | Hayır | Tampering |
| CVE-2026-49169 | Windows DNS Server Remote Code Execution Vulnerability | Important | 8 | Hayır | Hayır | RCE |
| CVE-2026-50426 | Windows DNS Server Remote Code Execution Vulnerability | Important | 6.8 | Hayır | Hayır | RCE |
| CVE-2026-50424 | Windows Domain Controller Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-50300 | Windows DWM Core Library Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50437 | Windows DWM Core Library Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-34348 | Windows Event Logging Service Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-50502 | Windows Event Logging Service Remote Code Execution Vulnerability | Important | 8 | Hayır | Hayır | RCE |
| CVE-2026-33842 | Windows File Explorer Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-40422 | Windows File Explorer Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-41087 | Windows File Explorer Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50473 | Windows File Explorer Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50442 | Windows File Explorer Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50389 | Windows File Explorer Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50456 | Windows File Explorer Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-57084 | Windows File Explorer Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-57091 | Windows File History Service Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50405 | Windows Filtering Platform Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-49172 | Windows FTP Service Remote Code Execution Vulnerability | Important | 9.8 | Hayır | Hayır | RCE |
| CVE-2026-50387 | Windows GDI Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-54122 | Windows GDI+ Remote Code Execution Vulnerability | Important | 8.4 | Hayır | Hayır | RCE |
| CVE-2026-50483 | Windows Graphics Component Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-58609 | Windows Graphics Component Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50391 | Windows Group Policy Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50310 | Windows Human Interface Device Information Disclosure Vulnerability | Important | 4.7 | Hayır | Hayır | Info |
| CVE-2026-50485 | Windows Hyper-V Denial of Service Vulnerability | Important | 4.5 | Hayır | Hayır | DoS |
| CVE-2026-54129 | Windows Hyper-V Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50315 | Windows Image Acquisition Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-58534 | Windows Input Method Editor (IME) Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-50490 | Windows Installer Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-58540 | Windows Installer Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50425 | Windows Internal System User Profile Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50293 | Windows Internal Task Bar Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-49167 | Windows Kernel Elevation of Privilege Vulnerability | Important | 4.7 | Hayır | Hayır | EoP |
| CVE-2026-49173 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-54132 | Windows Kernel Elevation of Privilege Vulnerability | Important | 6.8 | Hayır | Hayır | EoP |
| CVE-2026-49795 | Windows Kernel Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-49798 | Windows Kernel Elevation of Privilege Vulnerability | Important | 9.3 | Hayır | Hayır | EoP |
| CVE-2026-49808 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50354 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.1 | Hayır | Hayır | EoP |
| CVE-2026-50332 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50377 | Windows Kernel Elevation of Privilege Vulnerability | Important | 5.5 | Hayır | Hayır | EoP |
| CVE-2026-50390 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50423 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50397 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50436 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50399 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50459 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50477 | Windows Kernel Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-50478 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50484 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50673 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-58532 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50294 | Windows Kernel Information Disclosure Vulnerability | Important | 6.2 | Hayır | Hayır | Info |
| CVE-2026-50316 | Windows Kernel Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50419 | Windows Kernel Information Disclosure Vulnerability | Important | 3.3 | Hayır | Hayır | Info |
| CVE-2026-50463 | Windows Kernel Information Disclosure Vulnerability | Important | 7.5 | Hayır | Hayır | Info |
| CVE-2026-50475 | Windows Kernel Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50429 | Windows Kernel Information Disclosure Vulnerability | Important | 8.2 | Hayır | Hayır | Info |
| CVE-2026-58614 | Windows Kernel Security Feature Bypass Vulnerability | Important | 5.5 | Hayır | Hayır | SFB |
| CVE-2026-58545 | Windows Kernel Security Feature Bypass Vulnerability | Important | 5.5 | Hayır | Hayır | SFB |
| CVE-2026-58602 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50393 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50396 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50378 | Windows Key Guard Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50303 | Windows Key Guard Security Feature Bypass Vulnerability | Important | 5.5 | Hayır | Hayır | SFB |
| CVE-2026-40378 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | Important | 7.5 | Hayır | Hayır | DoS |
| CVE-2026-49799 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability | Important | 6.5 | Hayır | Hayır | DoS |
| CVE-2026-50371 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-58544 | Windows Management Services Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50404 | Windows Media Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50358 | Windows Media Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50336 | Windows Media Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50398 | Windows Media Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-50414 | Windows Media Elevation of Privilege Vulnerability | Important | 7.5 | Hayır | Hayır | EoP |
| CVE-2026-50379 | Windows Media Elevation of Privilege Vulnerability | Important | 7.5 | Hayır | Hayır | EoP |
| CVE-2026-50433 | Windows Media Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50676 | Windows Media Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50677 | Windows Media Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-34349 | Windows Media Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50394 | Windows Media Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50415 | Windows Media Information Disclosure Vulnerability | Important | 5.3 | Hayır | Hayır | Info |
| CVE-2026-57083 | Windows Media Photo Codec Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-54115 | Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50447 | Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability | Important | 9.8 | Hayır | Hayır | RCE |
| CVE-2026-50505 | Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability | Important | 7.5 | Hayır | Hayır | RCE |
| CVE-2026-50342 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-56183 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-56187 | Windows MIDI Service Module Elevation of Privileges Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-58635 | Windows Narrator Braille Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50500 | Windows Netlogon Elevation of Privilege Vulnerability | Important | 7.5 | Hayır | Hayır | EoP |
| CVE-2026-50476 | Windows Network Connections Service Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50450 | Windows Network Connections Service Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-56650 | Windows Network File System Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-56649 | Windows Network File System Remote Code Execution Vulnerability | Important | 5.9 | Hayır | Hayır | RCE |
| CVE-2026-50470 | Windows Network Policy Server SNMP Information Disclosure Vulnerability | Important | 7.5 | Hayır | Hayır | Info |
| CVE-2026-50496 | Windows Network Policy Server SNMP Information Disclosure Vulnerability | Important | 7.5 | Hayır | Hayır | Info |
| CVE-2026-56194 | Windows NFS Server Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-56648 | Windows NFS Server Elevation of Privilege Vulnerability | Important | 7.5 | Hayır | Hayır | EoP |
| CVE-2026-50337 | Windows Notification Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-49789 | Windows NTFS Elevation of Privilege Vulnerability | Important | 7.3 | Hayır | Hayır | EoP |
| CVE-2026-50412 | Windows NTFS Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50422 | Windows NTFS Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50672 | Windows NTFS Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-56175 | Windows NTFS Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-56182 | Windows NTFS Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50341 | Windows NTFS Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-58640 | Windows NTFS Remote Code Execution Vulnerability | Important | 7.3 | Hayır | Hayır | RCE |
| CVE-2026-49184 | Windows NTFS Remote Code Execution Vulnerability | Important | 8.4 | Hayır | Hayır | RCE |
| CVE-2026-49797 | Windows NTFS Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50308 | Windows NTFS Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50386 | Windows NTFS Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50309 | Windows NTFS Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50313 | Windows NTFS Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50388 | Windows NTFS Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50448 | Windows NTFS Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50471 | Windows NTFS Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50461 | Windows NTFS Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50417 | Windows NTFS Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50482 | Windows NTFS Remote Code Execution Vulnerability | Important | 7.3 | Hayır | Hayır | RCE |
| CVE-2026-50494 | Windows NTFS Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50344 | Windows OLE Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50686 | Windows OLE Remote Code Execution Vulnerability | Important | 8.1 | Hayır | Hayır | RCE |
| CVE-2026-50335 | Windows Operating Systems Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50317 | Windows Operating Systems Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-54987 | Windows Overlay Filter Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50435 | Windows Overlay Filter Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50409 | Windows Overlay Filter Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-40400 | Windows PowerShell Remote Code Execution Vulnerability | Important | 8 | Hayır | Hayır | RCE |
| CVE-2026-49166 | Windows Print Configuration Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-55004 | Windows Print Configuration Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50499 | Windows Print Spooler Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50383 | Windows Print Spooler Information Disclosure Vulnerability | Important | 6.1 | Hayır | Hayır | Info |
| CVE-2026-57085 | Windows Print Spooler Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50469 | Windows Projected File System Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50434 | Windows Push Notification Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50339 | Windows Push Notification Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50430 | Windows Push Notification Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50334 | Windows Push Notification Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-44800 | Windows Push Notifications Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50363 | Windows Push Notifications Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50431 | Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50372 | Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50666 | Windows Remote Access Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-56647 | Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-50330 | Windows Remote Desktop Client Elevation of Privilege Vulnerability | Important | 7.5 | Hayır | Hayır | EoP |
| CVE-2026-50376 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-50504 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-58533 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-58535 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-58546 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-58539 | Windows Remote Desktop Client Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-55003 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-57979 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-50445 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-50497 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-54126 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-57982 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Important | 6.5 | Hayır | Hayır | Info |
| CVE-2026-50369 | Windows Remote Desktop Services Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-58626 | Windows Remote Desktop Services Remote Code Execution Vulnerability | Important | 8.8 | Hayır | Hayır | RCE |
| CVE-2026-55014 | Windows Remote Help Defense Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50318 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50407 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50357 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50441 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50668 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | Important | 6.8 | Hayır | Hayır | EoP |
| CVE-2026-54109 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-49792 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-49793 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50362 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50492 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Important | 6.8 | Hayır | Hayır | RCE |
| CVE-2026-50501 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-58530 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-49791 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Important | 7.1 | Hayır | Hayır | EoP |
| CVE-2026-50451 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Important | 7.1 | Hayır | Hayır | EoP |
| CVE-2026-57096 | Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50323 | Windows Runtime Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50452 | Windows Runtime Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50348 | Windows Runtime Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50345 | Windows Runtime Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50322 | Windows Runtime Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50340 | Windows Runtime Elevation of Privilege Vulnerability | Important | 8.5 | Hayır | Hayır | EoP |
| CVE-2026-50410 | Windows Runtime Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50449 | Windows Runtime Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50460 | Windows Runtime Elevation of Privilege Vulnerability | Important | 8.1 | Hayır | Hayır | EoP |
| CVE-2026-50403 | Windows Runtime Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50385 | Windows Runtime Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-50413 | Windows Runtime Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-50457 | Windows Runtime Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50486 | Windows Runtime Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50503 | Windows Runtime Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-54125 | Windows Runtime Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-58527 | Windows Runtime Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50373 | Windows Search Service Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50679 | Windows Search Service Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-44806 | Windows Secure Channel Denial of Service Vulnerability | Important | 5.3 | Hayır | Hayır | DoS |
| CVE-2026-50681 | Windows Secure Channel Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-56186 | Windows Secure Channel Information Disclosure Vulnerability | Important | 8.1 | Hayır | Hayır | Info |
| CVE-2026-50367 | Windows Sensor Data Service Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-58619 | Windows Sensor Data Service Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50311 | Windows Server Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50328 | Windows Server Update Service (WSUS) Tampering Vulnerability | Important | 7.5 | Hayır | Hayır | Tampering |
| CVE-2026-58531 | Windows SMB Elevation of Privilege Vulnerability | Important | 7.5 | Hayır | Hayır | EoP |
| CVE-2026-54997 | Windows SMB Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-49801 | Windows SMB Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50690 | Windows SMB Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-56168 | Windows SMB Server Denial of Service Vulnerability | Important | 6.5 | Hayır | Hayır | DoS |
| CVE-2026-50360 | Windows SMB Server Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-57089 | Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability | Important | 7.5 | Hayır | Hayır | RCE |
| CVE-2026-50333 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50298 | Windows Spaceport.sys Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-49171 | Windows Speech Runtime Elevation of Privilege Vulnerability | Important | 7.5 | Hayır | Hayır | EoP |
| CVE-2026-49170 | Windows StateRepository API Server file Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-58526 | Windows Storage Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50299 | Windows Storage Spaces Direct Remote Code Execution Vulnerability | Important | 6.8 | Hayır | Hayır | RCE |
| CVE-2026-57968 | Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-57973 | Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability | Important | 6.3 | Hayır | Hayır | Tampering |
| CVE-2026-50418 | Windows System Secure Feature Bypass Vulnerability | Important | 5.1 | Hayır | Hayır | SFB |
| CVE-2026-50306 | Windows TCP/IP Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50307 | Windows TCP/IP Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-49177 | Windows TCP/IP Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50669 | Windows Telephony Server Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-54124 | Windows Terminal Remote Code Execution Vulnerability | Important | 7.8 | Hayır | Hayır | RCE |
| CVE-2026-50350 | Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability | Important | 5.5 | Hayır | Hayır | Info |
| CVE-2026-50326 | Windows Unified Consent System Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-49790 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important | 7.3 | Hayır | Hayır | EoP |
| CVE-2026-50498 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-58547 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability | Important | 5.5 | Hayır | Hayır | EoP |
| CVE-2026-49794 | Windows USB Audio Class Driver Information Disclosure Vulnerability | Important | 4.6 | Hayır | Hayır | Info |
| CVE-2026-50453 | Windows USB Audio Class Driver Information Disclosure Vulnerability | Important | 6.1 | Hayır | Hayır | Info |
| CVE-2026-58528 | Windows USB Audio Class Driver Information Disclosure Vulnerability | Important | 6.8 | Hayır | Hayır | Info |
| CVE-2026-50321 | Windows USB Driver Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50479 | Windows USB Hub Driver Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-55000 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important | 6.4 | Hayır | Hayır | EoP |
| CVE-2026-54991 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-54996 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-49802 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-49806 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-50674 | Windows USB Print Driver Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-49804 | Windows USB Video Driver Elevation of Privilege Vulnerability | Important | 6.6 | Hayır | Hayır | EoP |
| CVE-2026-50454 | Windows User Interface Core Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-49176 | Windows WalletService Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-49800 | Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50480 | Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-56173 | Windows WebView Elevation of Privilege Vulnerability | Important | 7 | Hayır | Hayır | EoP |
| CVE-2026-58632 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-54107 | Windows Win32k Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-54986 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-54112 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-54114 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50670 | Windows Win32k Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-50688 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50687 | Windows Win32k Elevation of Privilege Vulnerability | Important | 8.8 | Hayır | Hayır | EoP |
| CVE-2026-56176 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-58628 | Windows Wireless Network Manager Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-50295 | Windows Zero Trust DNS Security Feature Bypass Vulnerability | Important | 5.5 | Hayır | Hayır | SFB |
| CVE-2026-50509 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability | Important | 7.8 | Hayır | Hayır | EoP |
| CVE-2026-55945 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | Moderate | 4.2 | Hayır | Hayır | Info |
| CVE-2026-45488 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | Moderate | 5.4 | Hayır | Hayır | Spoofing |
| CVE-2026-45489 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | Moderate | 6.5 | Hayır | Hayır | Spoofing |
| CVE-2026-55145 | Outlook Copilot Tampering Vulnerability | Moderate | 6.3 | Hayır | Hayır | Tampering |
| CVE-2026-56181 | Windows Network Address Translation (NAT) Spoofing Vulnerability | Moderate | 8.3 | Hayır | Hayır | Spoofing |
| CVE-2026-58597 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | Low | 4.3 | Hayır | Hayır | Spoofing |
Genel Görünüm
Bu ay birkaç önemli çıkarım var:
Kimlik altyapısı ateş hattında. AD FS, SharePoint ve Exchange’deki açıklar, saldırganların kurumsal ortamda pivot yapmak için sevdiği tam olarak bu servisleri hedefliyor. AD FS açığı zaten aktif sömürülüyor.
Düşük CVSS ≠ düşük risk. CVE-2026-56164 (CVSS 5.3) aktif sömürülürken, bu ayın CVSS 9.9’luk VMSwitch açığı henüz sömürülmüyor. Erişilebilirlik ve aktif sömürü durumu, çıplak puandan çok daha belirleyici.
Vendor’un exploit maturity değerlendirmesine körü körüne güvenmeyin. Pwn2Own’da çalışan exploit’i gösterilmiş bir açığın “Exploit Maturity Unknown” olarak işaretlenmesi, kendi risk değerlendirmenizi yapmanız gerektiğinin net bir hatırlatıcısı.
İnternete açık yüzeyle başlayın. RDP, DHCP Server, SharePoint, OWA… Önceliklendirmede ilk soru şu olmalı: bunlardan hangisi internete bakıyor?
Özetle: bu ay yamalanacak çok şey var. Kimlik servisleri, internete açık RCE’ler ve aktif sömürülen açıklarla başlayın; gerisini normal döngünüzle ilerletin.
Başka bir yazımızda görüşmek dileğiyle…
Kaynak: Zero Day Initiative – The July 2026 Security Update Review (Dustin Childs, 14 Temmuz 2026). Detaylı CVE listesi ve MSRC bağlantıları için ZDI blog yazısına başvurabilirsiniz.