Patchfirst: Microsoft vulnerabilitieshttps://patchfirst.co/vendor/microsoft/New and newly exploited Microsoft CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMTCVE-2026-110063: Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an…https://patchfirst.co/cve/CVE-2026-110063/CVE-2026-110063Thu, 22 Oct 2026 00:00:00 GMTMicrosoft · VM Inspector for Azure Virtual Machines. Not in CISA KEV. EPSS 0.9% (higher than 59.3% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 25.6 of 100.public-exploitCVE-2026-83938: Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker…https://patchfirst.co/cve/CVE-2026-83938/CVE-2026-83938Thu, 22 Oct 2026 00:00:00 GMTMicrosoft · Azure Kubernetes Configuration Service. Not in CISA KEV. EPSS 0.7% (higher than 53.4% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 24.6 of 100.public-exploitCVE-2026-97785: Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a networkhttps://patchfirst.co/cve/CVE-2026-97785/CVE-2026-97785Thu, 22 Oct 2026 00:00:00 GMTMicrosoft · Microsoft Entra application proxy. Not in CISA KEV. EPSS 0.6% (higher than 50.9% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 24.1 of 100.public-exploitCVE-2026-105014: Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an…https://patchfirst.co/cve/CVE-2026-105014/CVE-2026-105014Thu, 22 Oct 2026 00:00:00 GMTMicrosoft · Azure Pipelines. Not in CISA KEV. EPSS 0.7% (higher than 51.9% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. Priority 23.5 of 100.public-exploit[KEV] CVE-2026-96951: Microsoft Windows Command Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-96951/CVE-2026-96951#kevTue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2026-10-13. ENISA EUVD lists it as exploited. EPSS 9.8% (higher than 95.5% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 73.3 of 100.kevT1204.001T1059CVE-2026-105016: Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-105016/CVE-2026-105016Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · .NET 10.0 runtime. Not in CISA KEV. EPSS 1.7% (higher than 76.6% of CVEs). CVSS 9.8 CRITICAL. Priority 24.3 of 100.CVE-2026-70242: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-70242/CVE-2026-70242Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Microsoft 365 Apps for Enterprise. Not in CISA KEV. EPSS 1.6% (higher than 75.3% of CVEs). CVSS 9.8 CRITICAL. Priority 24.1 of 100.CVE-2026-70291: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-70291/CVE-2026-70291Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Microsoft 365 Apps for Enterprise. Not in CISA KEV. EPSS 1.3% (higher than 71% of CVEs). CVSS 9.8 CRITICAL. Priority 23.2 of 100.CVE-2026-105723: Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate…https://patchfirst.co/cve/CVE-2026-105723/CVE-2026-105723Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.3% (higher than 70.8% of CVEs). CVSS 9.8 CRITICAL. Priority 23.2 of 100.CVE-2026-70279: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server…https://patchfirst.co/cve/CVE-2026-70279/CVE-2026-70279Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Microsoft Exchange Server 2016 Cumulative Update 23. Not in CISA KEV. EPSS 1.3% (higher than 70.1% of CVEs). CVSS 9.3 CRITICAL. Priority 22.7 of 100.CVE-2026-97749: Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-97749/CVE-2026-97749Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Microsoft 365 Apps for Enterprise. Not in CISA KEV. EPSS 1.2% (higher than 68.1% of CVEs). CVSS 9.8 CRITICAL. Priority 22.6 of 100.CVE-2026-97016: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-97016/CVE-2026-97016Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Microsoft 365 Apps for Enterprise. Not in CISA KEV. EPSS 1.2% (higher than 67.4% of CVEs). CVSS 9.8 CRITICAL. Priority 22.5 of 100.CVE-2026-88156: Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-88156/CVE-2026-88156Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Microsoft 365 Apps for Enterprise. Not in CISA KEV. EPSS 1.2% (higher than 67.4% of CVEs). CVSS 9.8 CRITICAL. Priority 22.5 of 100.CVE-2026-83770: Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-83770/CVE-2026-83770Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 66.3% of CVEs). CVSS 9.8 CRITICAL. Priority 22.3 of 100.CVE-2026-70300: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-70300/CVE-2026-70300Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Microsoft 365 Apps for Enterprise. Not in CISA KEV. EPSS 1.1% (higher than 66.3% of CVEs). CVSS 9.8 CRITICAL. Priority 22.3 of 100.CVE-2026-83693: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-83693/CVE-2026-83693Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 65.7% of CVEs). CVSS 9.8 CRITICAL. Priority 22.2 of 100.CVE-2026-100219: Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-100219/CVE-2026-100219Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 11 version 23H2. Not in CISA KEV. EPSS 1.1% (higher than 65.8% of CVEs). CVSS 9.8 CRITICAL. Priority 22.2 of 100.CVE-2026-100202: Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-100202/CVE-2026-100202Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 65.8% of CVEs). CVSS 9.8 CRITICAL. Priority 22.2 of 100.CVE-2026-97814: Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-97814/CVE-2026-97814Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 65.4% of CVEs). CVSS 9.8 CRITICAL. Priority 22.1 of 100.CVE-2026-83780: Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-83780/CVE-2026-83780Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 65.2% of CVEs). CVSS 9.8 CRITICAL. Priority 22.1 of 100.CVE-2026-70096: Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a…https://patchfirst.co/cve/CVE-2026-70096/CVE-2026-70096Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Microsoft 365 Apps for Enterprise. Not in CISA KEV. EPSS 1.1% (higher than 65.2% of CVEs). CVSS 9.8 CRITICAL. Priority 22.1 of 100.CVE-2026-70153: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over…https://patchfirst.co/cve/CVE-2026-70153/CVE-2026-70153Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.8% of CVEs). CVSS 9.8 CRITICAL. Priority 22.0 of 100.CVE-2026-70147: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over…https://patchfirst.co/cve/CVE-2026-70147/CVE-2026-70147Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.8% of CVEs). CVSS 9.8 CRITICAL. Priority 22.0 of 100.CVE-2026-97805: Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-97805/CVE-2026-97805Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.9 of 100.CVE-2026-96320: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-96320/CVE-2026-96320Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.2% of CVEs). CVSS 9.8 CRITICAL. Priority 21.9 of 100.CVE-2026-83910: Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-83910/CVE-2026-83910Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.9 of 100.CVE-2026-83578: Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a…https://patchfirst.co/cve/CVE-2026-83578/CVE-2026-83578Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.6% of CVEs). CVSS 9.8 CRITICAL. Priority 21.9 of 100.CVE-2026-83519: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-83519/CVE-2026-83519Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.9 of 100.CVE-2026-83517: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over…https://patchfirst.co/cve/CVE-2026-83517/CVE-2026-83517Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.9 of 100.CVE-2026-70157: Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over…https://patchfirst.co/cve/CVE-2026-70157/CVE-2026-70157Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.6% of CVEs). CVSS 9.8 CRITICAL. Priority 21.9 of 100.CVE-2026-100222: Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-100222/CVE-2026-100222Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.1% (higher than 64.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.9 of 100.CVE-2026-83782: Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-83782/CVE-2026-83782Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.0% (higher than 63.1% of CVEs). CVSS 9.8 CRITICAL. Priority 21.7 of 100.CVE-2026-97816: Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-97816/CVE-2026-97816Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1809. Not in CISA KEV. EPSS 1.0% (higher than 63.1% of CVEs). CVSS 9.8 CRITICAL. Priority 21.6 of 100.CVE-2026-96924: Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-96924/CVE-2026-96924Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.0% (higher than 63.1% of CVEs). CVSS 9.8 CRITICAL. Priority 21.6 of 100.CVE-2026-96909: Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-96909/CVE-2026-96909Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 11 version 23H2. Not in CISA KEV. EPSS 1.0% (higher than 62.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.5 of 100.CVE-2026-105010: Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a…https://patchfirst.co/cve/CVE-2026-105010/CVE-2026-105010Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.0% (higher than 62.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.5 of 100.CVE-2026-102210: Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-102210/CVE-2026-102210Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1809. Not in CISA KEV. EPSS 1.0% (higher than 62.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.5 of 100.CVE-2026-88178: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-88178/CVE-2026-88178Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Microsoft 365 Apps for Enterprise. Not in CISA KEV. EPSS 1.0% (higher than 61.9% of CVEs). CVSS 9.8 CRITICAL. Priority 21.4 of 100.CVE-2026-83888: Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a networkhttps://patchfirst.co/cve/CVE-2026-83888/CVE-2026-83888Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.0% (higher than 62.1% of CVEs). CVSS 9.8 CRITICAL. Priority 21.4 of 100.CVE-2026-69705: Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-69705/CVE-2026-69705Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.0% (higher than 61.9% of CVEs). CVSS 9.8 CRITICAL. Priority 21.4 of 100.CVE-2026-70024: Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code…https://patchfirst.co/cve/CVE-2026-70024/CVE-2026-70024Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 1.0% (higher than 61.4% of CVEs). CVSS 9.8 CRITICAL. Priority 21.3 of 100.CVE-2026-69886: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-69886/CVE-2026-69886Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 0.9% (higher than 61.2% of CVEs). CVSS 9.8 CRITICAL. Priority 21.3 of 100.CVE-2026-69883: Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-69883/CVE-2026-69883Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 0.9% (higher than 61.2% of CVEs). CVSS 9.8 CRITICAL. Priority 21.3 of 100.CVE-2026-69639: Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-69639/CVE-2026-69639Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1809. Not in CISA KEV. EPSS 0.9% (higher than 61.2% of CVEs). CVSS 9.8 CRITICAL. Priority 21.3 of 100.CVE-2026-69634: Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-69634/CVE-2026-69634Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 0.9% (higher than 61.2% of CVEs). CVSS 9.8 CRITICAL. Priority 21.3 of 100.CVE-2026-96934: Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-96934/CVE-2026-96934Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 0.9% (higher than 60.9% of CVEs). CVSS 9.8 CRITICAL. Priority 21.2 of 100.CVE-2026-85814: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over…https://patchfirst.co/cve/CVE-2026-85814/CVE-2026-85814Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 0.9% (higher than 60.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.1 of 100.CVE-2026-85809: Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized…https://patchfirst.co/cve/CVE-2026-85809/CVE-2026-85809Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 0.9% (higher than 60.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.1 of 100.CVE-2026-83523: Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-83523/CVE-2026-83523Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 11 Version 24H2. Not in CISA KEV. EPSS 0.9% (higher than 60.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.1 of 100.CVE-2026-70275: Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a networkhttps://patchfirst.co/cve/CVE-2026-70275/CVE-2026-70275Tue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows 10 Version 1607. Not in CISA KEV. EPSS 0.9% (higher than 60.5% of CVEs). CVSS 9.8 CRITICAL. Priority 21.1 of 100.