1094 vulnerabilities patched by Microsoft in the November 2026 Patch Tuesday release.
Severity Breakdown
- Critical: 64
- Important: 1029
- Moderate: 1
Actively Exploited (1)
CVE-2026-124194 — Microsoft Outlook Spoofing Vulnerability
CVSS 6.5 | Microsoft Office Outlook | Actively Exploited
Exploitation More Likely (42)
- CVE-2026-118146 — Windows Active Directory Domain Services Remote Code Execution Vulnerability (CVSS 8.8, Active Directory Domain Services)
- CVE-2026-118207 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Exchange Server)
- CVE-2026-121663 — Visual Studio Code Security Feature Bypass Vulnerability (CVSS 8.8, Visual Studio Code)
- CVE-2026-121662 — Visual Studio Code Remote Code Execution Vulnerability (CVSS 8.6, Visual Studio Code)
- CVE-2026-113862 — Windows Network Address Translation (NAT) Remote Code Execution Vulnerability (CVSS 8.1, Windows Network Address Translation (NAT))
- CVE-2026-119952 — Windows Schannel Remote Code Execution Vulnerability (CVSS 8.1, Windows Schannel)
- CVE-2026-105501 — Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Windows Installer)
- CVE-2026-105524 — Windows Management Instrumentation Elevation of Privilege Vulnerability (CVSS 7.8, Windows Management Instrumentation)
- CVE-2026-109473 — Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Windows Kernel)
- CVE-2026-112811 — Windows Print Spooler Components Elevation of Privilege Vulnerability (CVSS 7.8, Windows Print Spooler Components)
- CVE-2026-116714 — Windows AppX Deployment Service Elevation of Privilege Vulnerability (CVSS 7.8, Windows AppX Deployment Service)
- CVE-2026-119818 — Windows Text Services Framework Elevation of Privilege Vulnerability (CVSS 7.8, Windows Text Services Framework)
- CVE-2026-119853 — Remote Access API Elevation of Privilege Vulnerability (CVSS 7.8, Windows Remote Access API)
- CVE-2026-119886 — Windows Telephony Service Elevation of Privilege Vulnerability (CVSS 7.8, Windows Telephony Service)
- CVE-2026-119892 — Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Windows Installer)
- CVE-2026-119903 — Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Windows Installer)
- CVE-2026-83563 — Winlogon Elevation of Privilege Vulnerability (CVSS 7.8, Winlogon)
- CVE-2026-88230 — Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Windows LUAFV)
- CVE-2026-88235 — Servicing Stack Updates Elevation of Privilege Vulnerability (CVSS 7.8, Servicing Stack Updates)
- CVE-2026-88238 — Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability (CVSS 7.8, Windows Camera Frame Server Monitor)
- +22 more
Executive Summary
You’ve hit your weekly limit · resets 4am (America/Toronto)
Critical Vulnerabilities
Entra Device Registration (1 Critical)
- CVE-2026-109469 — Entra Device Registration Elevation of Privilege Vulnerability (CVSS 10.0) Advisory
Windows Xbox Live Networking Service (1 Critical)
- CVE-2026-112967 — Windows Xbox Live Networking Service Remote Code Execution Vulnerability (CVSS 9.8) Advisory
Microsoft Windows Search Component (1 Critical)
- CVE-2026-116928 — Windows Search Remote Code Execution Vulnerability (CVSS 9.8) Advisory
Windows LDAP - Lightweight Directory Access Protocol (1 Critical)
- CVE-2026-119958 — Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability (CVSS 9.8) Advisory
Azure OpenAI (1 Critical)
- CVE-2026-119990 — Azure OpenAI Elevation of Privilege Vulnerability (CVSS 9.8) Advisory
Microsoft Office Outlook (3 Critical)
- CVE-2026-110043 — Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-110068 — Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-111309 — Microsoft Office Outlook Remote Code Execution Vulnerability (CVSS 8.8) Advisory
Microsoft Office Word (4 Critical)
- CVE-2026-110047 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-110067 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-111285 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-124185 — Microsoft Office Word Remote Code Execution Vulnerability (CVSS 7.5) Advisory
Microsoft Office (2 Critical)
- CVE-2026-111289 — Microsoft Office Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-120003 — Microsoft Office Remote Code Execution Vulnerability (CVSS 8.8) Advisory
Windows Raw Image Extension (1 Critical)
- CVE-2026-114169 — Windows Raw Image Extension Remote Code Execution Vulnerability (CVSS 8.8) Advisory
Active Directory Domain Services (2 Critical)
- CVE-2026-118146 — Windows Active Directory Domain Services Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-118148 — Active Directory Domain Services Elevation of Privilege Vulnerability (CVSS 7.5) Advisory
Microsoft Exchange Server (1 Critical)
- CVE-2026-118207 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8) Advisory
Microsoft Office Excel (12 Critical)
- CVE-2026-118292 — Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-118296 — Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-118297 — Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-118701 — Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-118702 — Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-118711 — Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-118713 — Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-118730 — Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-120786 — Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-120788 — Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-120789 — Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 8.8) Advisory
- CVE-2026-124170 — Microsoft Office Excel Remote Code Execution Vulnerability (CVSS 7.5) Advisory
Graphic Fonts (1 Critical)
- CVE-2026-119969 — Graphic Fonts Remote Code Execution Vulnerability (CVSS 8.8) Advisory
Microsoft Office PowerPoint (1 Critical)
- CVE-2026-120005 — Microsoft PowerPoint Remote Code Execution Vulnerability (CVSS 8.8) Advisory
Microsoft Defender (1 Critical)
- CVE-2026-122194 — Microsoft Defender Remote Code Execution Vulnerability (CVSS 8.8) Advisory
Windows Network Connected Devices Auto-Setup Service (1 Critical)
- CVE-2026-125136 — Windows Network Connected Devices Auto-Setup Service Remote Code Execution Vulnerability (CVSS 8.8) Advisory
Windows Hyper-V (8 Critical)
- CVE-2026-113753 — Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 8.2) Advisory
- CVE-2026-113856 — Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.8) Advisory
- CVE-2026-113865 — Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.8) Advisory
- CVE-2026-113861 — Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.5) Advisory
- CVE-2026-119947 — Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.5) Advisory
- CVE-2026-119960 — Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.5) Advisory
- CVE-2026-113860 — Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.0) Advisory
- CVE-2026-113864 — Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 6.4) Advisory
Windows Message Queuing Queue Manager (2 Critical)
- CVE-2026-109459 — Windows Message Queuing Queue Manager Remote Code Execution Vulnerability (CVSS 8.1) Advisory
- CVE-2026-119967 — Windows Message Queuing Queue Manager Remote Code Execution Vulnerability (CVSS 8.1) Advisory
Windows Network Address Translation (NAT) (1 Critical)
- CVE-2026-113862 — Windows Network Address Translation (NAT) Remote Code Execution Vulnerability (CVSS 8.1) Advisory
Windows Message Queuing (3 Critical)
- CVE-2026-116710 — Windows Message Queuing Remote Code Execution Vulnerability (CVSS 8.1) Advisory
- CVE-2026-119963 — Windows Message Queuing Remote Code Execution Vulnerability (CVSS 8.1) Advisory
- CVE-2026-119964 — Windows Message Queuing Remote Code Execution Vulnerability (CVSS 8.1) Advisory
Windows Remote Procedure Call Runtime (1 Critical)
- CVE-2026-118737 — Remote Procedure Call Runtime Remote Code Execution Vulnerability (CVSS 8.1) Advisory
Windows Deployment Services (1 Critical)
- CVE-2026-119951 — Windows Deployment Services Remote Code Execution Vulnerability (CVSS 8.1) Advisory
Windows Schannel (1 Critical)
- CVE-2026-119952 — Windows Schannel Remote Code Execution Vulnerability (CVSS 8.1) Advisory
Windows Internet Information Services (1 Critical)
- CVE-2026-119961 — Windows Internet Information Services Remote Code Execution Vulnerability (CVSS 8.1) Advisory
Windows Cred SSProvider Protocol (1 Critical)
- CVE-2026-119962 — Windows CredSSP Remote Code Execution Vulnerability (CVSS 8.1) Advisory
Windows TPM (1 Critical)
- CVE-2026-119382 — Windows TPM Elevation of Privilege Vulnerability (CVSS 7.8) Advisory
Windows Remote Desktop Services (1 Critical)
- CVE-2026-119957 — Windows Remote Desktop Services Elevation of Privilege Vulnerability (CVSS 7.8) Advisory
Windows Graphics Kernel (2 Critical)
- CVE-2026-125137 — Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.8) Advisory
- CVE-2026-119966 — Windows Graphics Kernel Elevation of Privilege Vulnerability (CVSS 7.5) Advisory
Microsoft Windows Codecs Library (1 Critical)
- CVE-2026-113749 — Microsoft Windows Codecs Library Remote Code Execution Vulnerability (CVSS 7.5) Advisory
Windows Print Spooler Components (1 Critical)
- CVE-2026-113752 — Windows Print Spooler Components Remote Code Execution Vulnerability (CVSS 7.5) Advisory
Windows SMB Server Network Transport Driver (srvnet.sys) (1 Critical)
- CVE-2026-113825 — Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability (CVSS 7.5) Advisory
Windows TCP/IP (1 Critical)
- CVE-2026-113859 — Windows TCP/IP Remote Code Execution Vulnerability (CVSS 7.5) Advisory
Windows Function Discovery SSDP Provider (1 Critical)
- CVE-2026-118145 — Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability (CVSS 7.5) Advisory
Windows Function Discovery Resource Publication (1 Critical)
- CVE-2026-125134 — Windows Function Discovery Resource Publication Remote Code Execution Vulnerability (CVSS 7.5) Advisory
Azure Managed Grafana (1 Critical)
- CVE-2026-114160 — Azure Managed Grafana Elevation of Privilege Vulnerability (CVSS N/A) Advisory
Product Family Breakdown
| Product Family | Total | Critical | Important |
|---|---|---|---|
| Microsoft Office Word | 65 | 4 | 61 |
| Microsoft Office Excel | 64 | 12 | 52 |
| SQL Server | 53 | 0 | 53 |
| Windows Advanced Rasterization Platform | 37 | 0 | 37 |
| Windows Installer | 36 | 0 | 36 |
| Windows Graphics Kernel | 35 | 2 | 33 |
| Windows Kernel | 28 | 0 | 28 |
| Microsoft Office SharePoint | 27 | 0 | 27 |
| Windows DNS | 22 | 0 | 22 |
| Windows Print Spooler Components | 20 | 1 | 19 |
| Microsoft Office Outlook | 20 | 3 | 16 |
| Visual Studio Code | 18 | 0 | 18 |
| Windows Hyper-V | 16 | 8 | 8 |
| ASP.NET Core | 14 | 0 | 14 |
| Remote Desktop Client | 12 | 0 | 12 |
| Role: DNS Server | 11 | 0 | 11 |
| Desktop Window Manager | 9 | 0 | 9 |
| Windows DHCP Server | 9 | 0 | 9 |
| Microsoft Office | 9 | 2 | 7 |
| Windows USB Driver | 9 | 0 | 9 |
| Microsoft Exchange Server | 9 | 1 | 8 |
| Windows Win32K | 8 | 0 | 8 |
| Windows Management Instrumentation | 8 | 0 | 8 |
| Windows Message Queuing | 8 | 3 | 5 |
| Windows Audio Service | 8 | 0 | 8 |
| Windows Broadcast DVR User Service | 8 | 0 | 8 |
| Windows NTFS | 7 | 0 | 7 |
| Microsoft Office PowerPoint | 7 | 1 | 6 |
| Microsoft Office Access | 7 | 0 | 7 |
| Windows Storage Spaces Controller | 6 | 0 | 6 |
| .NET | 6 | 0 | 6 |
| Windows Smart Card | 6 | 0 | 6 |
| Windows Overlay Filter | 6 | 0 | 6 |
| Windows Task Scheduler | 6 | 0 | 6 |
| Windows Client for NFS | 6 | 0 | 6 |
| Windows Kerberos | 6 | 0 | 6 |
| HID Parser Library | 6 | 0 | 6 |
| Windows Local Security Authority Subsystem Service (LSASS) | 6 | 0 | 6 |
| Windows Modern Device Management (MDM) | 5 | 0 | 5 |
| Windows Shell | 5 | 0 | 5 |
| Windows iSCSI | 5 | 0 | 5 |
| Windows Error Reporting | 5 | 0 | 5 |
| Windows Deployment Services | 5 | 1 | 4 |
| Windows Cloud Files Mini Filter Driver | 5 | 0 | 5 |
| Microsoft Windows Codecs Library | 5 | 1 | 4 |
| Visual Studio | 5 | 0 | 5 |
| Microsoft WDAC OLE DB provider for SQL | 5 | 0 | 5 |
| Windows Internet Connection Sharing (ICS) | 5 | 0 | 5 |
| Azure CycleCloud | 4 | 0 | 4 |
| Windows Storage | 4 | 0 | 4 |
| Windows NetBIOS | 4 | 0 | 4 |
| Active Directory Domain Services | 4 | 2 | 2 |
| Windows DWM Core Library | 4 | 0 | 4 |
| Windows Remote Desktop Services | 4 | 1 | 3 |
| Windows Telephony Service | 4 | 0 | 4 |
| Windows File Server Resource Management Service | 4 | 0 | 4 |
| Windows Device Association Service | 4 | 0 | 4 |
| Windows SMB Client | 4 | 0 | 4 |
| Windows USB Video Driver | 4 | 0 | 4 |
| Windows PowerShell | 4 | 0 | 4 |
| Windows TCP/IP | 4 | 1 | 3 |
| Windows DHCP Client | 4 | 0 | 4 |
| Aspire | 4 | 0 | 4 |
| Kernel Transaction Manager | 4 | 0 | 4 |
| Windows Text Services Framework | 4 | 0 | 4 |
| Windows Storport Miniport Driver | 4 | 0 | 4 |
| Windows HTTP.sys | 4 | 0 | 4 |
| Windows Brokering File System | 4 | 0 | 4 |
| Windows Microsoft DirectMusic | 4 | 0 | 4 |
| Windows Network Connection Broker | 3 | 0 | 3 |
| Windows COM | 3 | 0 | 3 |
| Windows Filtering Platform (WFP) | 3 | 0 | 3 |
| Windows Active Directory | 3 | 0 | 3 |
| Windows MIDI Service Module | 3 | 0 | 3 |
| Windows GDI | 3 | 0 | 3 |
| Azure DevOps Server | 3 | 0 | 3 |
| Windows Container Isolation FS Filter Driver (unionfs.sys) | 3 | 0 | 3 |
| Windows Security Account Manager | 3 | 0 | 3 |
| Windows Diagnostic Policy Service | 3 | 0 | 3 |
| Windows FileCrypt Driver | 3 | 0 | 3 |
| Windows COM+ Event System Service | 3 | 0 | 3 |
| Windows Performance Counters | 3 | 0 | 3 |
| Windows Link Layer Topology Discovery Protocol | 3 | 0 | 3 |
| Microsoft Windows Search Component | 3 | 1 | 2 |
| Quality Windows Audio/Video Experience (QWAVE) service | 3 | 0 | 3 |
| Windows Subsystem for Linux | 3 | 0 | 3 |
| Windows Universal Disk Format File System Driver (UDFS) | 3 | 0 | 3 |
| Microsoft XPS Document Converter | 3 | 0 | 3 |
| Windows Internet Information Services | 3 | 1 | 2 |
| Graphic Fonts | 3 | 1 | 2 |
| Microsoft PowerShell Core | 3 | 0 | 3 |
| Remote Desktop Gateway Service | 3 | 0 | 3 |
| Windows Camera Frame Server Monitor | 3 | 0 | 3 |
| Windows Biometric Service | 3 | 0 | 3 |
| Windows USB Hub Driver | 3 | 0 | 3 |
| Microsoft Color Management | 3 | 0 | 3 |
| Windows Connected User Experiences and Telemetry | 3 | 0 | 3 |
| Windows Volume Shadow Copy | 2 | 0 | 2 |
| Windows Resilient File System (ReFS) | 2 | 0 | 2 |
| Windows Secure Socket Tunneling Protocol (SSTP) | 2 | 0 | 2 |
| Windows Point-to-Point Protocol over Ethernet (PPPoE) | 2 | 0 | 2 |
| Microsoft QUIC | 2 | 0 | 2 |
| Winlogon | 2 | 0 | 2 |
| Winsock | 2 | 0 | 2 |
| Windows Encrypting File System (EFS) | 2 | 0 | 2 |
| Windows Setup and Deployment | 2 | 0 | 2 |
| Microsoft JScript | 2 | 0 | 2 |
| Microsoft Windows SCSI Class System File | 2 | 0 | 2 |
| Windows Active Directory Certificate Services | 2 | 0 | 2 |
| Windows CD-ROM Driver | 2 | 0 | 2 |
| Windows Redirected Drive Buffering | 2 | 0 | 2 |
| Windows Message Queuing Queue Manager | 2 | 2 | 0 |
| Microsoft Office Visio | 2 | 0 | 2 |
| Windows exFAT File System | 2 | 0 | 2 |
| Windows Event Collector Service | 2 | 0 | 2 |
| Windows Projected File System | 2 | 0 | 2 |
| Windows eSCL Scanner | 2 | 0 | 2 |
| Microsoft Account | 2 | 0 | 2 |
| Windows Link-Layer Discovery Protocol (LLDP) | 2 | 0 | 2 |
| Servicing Stack Updates | 2 | 0 | 2 |
| Windows Filter Manager | 2 | 0 | 2 |
| Windows Network Address Translation (NAT) | 2 | 1 | 1 |
| Windows Raw Image Extension | 2 | 1 | 1 |
| Windows AppX Deployment Service | 2 | 0 | 2 |
| Windows Remote Access API | 2 | 0 | 2 |
| Windows Microsoft Account Sign-in Assistant | 2 | 0 | 2 |
| Windows BitLocker | 2 | 0 | 2 |
| Windows Input System | 2 | 0 | 2 |
| Windows PrintWorkflowUserSvc | 2 | 0 | 2 |
| Windows Function Discovery Resource Publication | 2 | 1 | 1 |
| Windows Distributed Transaction Coordinator | 2 | 0 | 2 |
| Windows SMB | 2 | 0 | 2 |
| Microsoft Trace Data Helper | 2 | 0 | 2 |
| Microsoft Windows Media Foundation | 2 | 0 | 2 |
| Microsoft Teams for Android | 2 | 0 | 2 |
| Windows Program Compatibility Assistant Service | 2 | 0 | 2 |
| Xbox | 2 | 0 | 2 |
| AMD Zen | 2 | 0 | 2 |
| Windows Bluetooth Service | 2 | 0 | 2 |
| Windows LUAFV | 2 | 0 | 2 |
| Windows OLE | 2 | 0 | 2 |
| Windows User Manager Service | 2 | 0 | 2 |
| Windows Connection Manager Service | 2 | 0 | 2 |
| Windows PCI Bus Driver | 2 | 0 | 2 |
| HEIF Image Extensions | 1 | 0 | 1 |
| Windows CNG Key Isolation Service | 1 | 0 | 1 |
| Windows Partition Management Driver | 1 | 0 | 1 |
| Microsoft Remote Registry Service | 1 | 0 | 1 |
| Azure NFS mount helper (aznfs) | 1 | 0 | 1 |
| Microsoft Input Method Editor (IME) | 1 | 0 | 1 |
| Windows System Events Broker | 1 | 0 | 1 |
| Mailslot File System | 1 | 0 | 1 |
| Windows Background Intelligent Transfer Service (BITS) | 1 | 0 | 1 |
| Windows Container Manager Service | 1 | 0 | 1 |
| Windows Inventory Backup | 1 | 0 | 1 |
| Windows OLE DB | 1 | 0 | 1 |
| Windows Wireless Networking | 1 | 0 | 1 |
| Azure Local | 1 | 0 | 1 |
| Windows Layer-2 Bridge Network Driver | 1 | 0 | 1 |
| Windows ODBC Driver | 1 | 0 | 1 |
| Windows Projected File System Filter Driver | 1 | 0 | 1 |
| Windows WinHTTP | 1 | 0 | 1 |
| Microsoft Authentication Library for JavaScript | 1 | 0 | 1 |
| Microsoft Authentication Library (MSAL) for Node.js | 1 | 0 | 1 |
| Azure CLI | 1 | 0 | 1 |
| Microsoft Entra Private Network Connector | 1 | 0 | 1 |
| Azure Firmware | 1 | 0 | 1 |
| Azure DevOps | 1 | 0 | 1 |
| Microsoft 365 Agents SDK | 1 | 0 | 1 |
| Microsoft MCP Gateway | 1 | 0 | 1 |
| Windows Remote Assistance | 1 | 0 | 1 |
| Microsoft Graphics Component | 1 | 0 | 1 |
| Windows RNDIS | 1 | 0 | 1 |
| Windows Secure Kernel Mode | 1 | 0 | 1 |
| Windows Defender Firewall Service | 1 | 0 | 1 |
| Microsoft Local Security Authority Server (lsasrv) | 1 | 0 | 1 |
| Windows Composite Image File System | 1 | 0 | 1 |
| Windows Xbox Live Networking Service | 1 | 1 | 0 |
| Windows SMB Server | 1 | 0 | 1 |
| Windows State Repository Service | 1 | 0 | 1 |
| Software Protection Platform (SPP) | 1 | 0 | 1 |
| Windows Device Inventory | 1 | 0 | 1 |
| Windows Fast FAT Driver | 1 | 0 | 1 |
| Windows XWizard Framework | 1 | 0 | 1 |
| Windows DPAPI (Data Protection Application Programming Interface) | 1 | 0 | 1 |
| Windows Language Experience Service | 1 | 0 | 1 |
| Windows Devices Human Interface | 1 | 0 | 1 |
| Windows SMB Server Network Transport Driver (srvnet.sys) | 1 | 1 | 0 |
| Windows Security Center | 1 | 0 | 1 |
| Windows Remote Access Connection Manager | 1 | 0 | 1 |
| Azure Managed Grafana | 1 | 1 | 0 |
| Microsoft Graph | 1 | 0 | 1 |
| Reliable Multicast Transport Driver (RMCAST) | 1 | 0 | 1 |
| Microsoft Teams | 1 | 0 | 1 |
| Windows FTP Service | 1 | 0 | 1 |
| Windows Server for NFS | 1 | 0 | 1 |
| Windows Distributed File System (DFS) | 1 | 0 | 1 |
| Windows Function Discovery SSDP Provider | 1 | 1 | 0 |
| Windows Multiple Provider Router | 1 | 0 | 1 |
| Azure File Sync | 1 | 0 | 1 |
| Windows Network File System | 1 | 0 | 1 |
| Windows Remote Procedure Call Runtime | 1 | 1 | 0 |
| Azure Front Door (AFD) | 1 | 0 | 1 |
| Windows TPM | 1 | 1 | 0 |
| Windows Credential Manager | 1 | 0 | 1 |
| Windows Enhanced Storage | 1 | 0 | 1 |
| Storport.sys Driver | 1 | 0 | 1 |
| Windows Backup Engine | 1 | 0 | 1 |
| Windows USB Audio Class driver (usbaudio.sys) | 1 | 0 | 1 |
| Windows Management Services | 1 | 0 | 1 |
| Virtual Hard Disk (VHD) Miniport Driver | 1 | 0 | 1 |
| Windows Failover Cluster | 1 | 0 | 1 |
| Windows IP Translation Configuration Service | 1 | 0 | 1 |
| Windows USB Scanner Driver | 1 | 0 | 1 |
| Data Deduplication | 1 | 0 | 1 |
| ActiveSyncProvider | 1 | 0 | 1 |
| Microsoft Windows Speech | 1 | 0 | 1 |
| Windows Sandbox | 1 | 0 | 1 |
| Windows Remote Desktop | 1 | 0 | 1 |
| Microsoft Streaming Service | 1 | 0 | 1 |
| Windows Mobile Device Management | 1 | 0 | 1 |
| Windows Schannel | 1 | 1 | 0 |
| Windows LDAP - Lightweight Directory Access Protocol | 1 | 1 | 0 |
| Windows Cred SSProvider Protocol | 1 | 1 | 0 |
| Windows Remote Procedure Call | 1 | 0 | 1 |
| Visual Studio Code - GitHub Pull Requests and Issues Extension | 1 | 0 | 1 |
| Microsoft Windows App Store | 1 | 0 | 1 |
| Azure Pipelines | 1 | 0 | 1 |
| Azure OpenAI | 1 | 1 | 0 |
| Microsoft Configuration Manager | 1 | 0 | 1 |
| Azure Confidential Clean Rooms | 1 | 0 | 1 |
| Windows NTLM | 1 | 0 | 1 |
| Windows Update Stack | 1 | 0 | 1 |
| Windows Image Acquisition | 1 | 0 | 1 |
| Windows IKE Extension | 1 | 0 | 1 |
| Windows Autopilot | 1 | 0 | 1 |
| Windows Maps | 1 | 0 | 1 |
| Microsoft Defender | 1 | 1 | 0 |
| Microsoft Dynamics 365 (on-premises) | 1 | 0 | 1 |
| Microsoft PowerShell | 1 | 0 | 1 |
| Microsoft Azure Kubernetes Service | 1 | 0 | 1 |
| Microsoft High Performance Computing (HPC) Pack | 1 | 0 | 1 |
| Windows Admin Center | 1 | 0 | 1 |
| Windows Network Connected Devices Auto-Setup Service | 1 | 1 | 0 |
| JDBC Driver for SQL Server | 1 | 0 | 1 |
| Microsoft Bluetooth Driver | 1 | 0 | 1 |
| Windows Bind Filter Driver | 1 | 0 | 1 |
| Windows iSCSI Target Service | 1 | 0 | 1 |
| RPC Runtime | 1 | 0 | 1 |
| Github Copilot | 1 | 0 | 1 |
| Windows SSDP Service | 1 | 0 | 1 |
| Windows Bluetooth A2DP driver | 1 | 0 | 1 |
| Windows Media Player | 1 | 0 | 1 |
| Windows Sensor Data Service | 1 | 0 | 1 |
| Windows Ancillary Function Driver for WinSock | 1 | 0 | 1 |
| Windows DirectX | 1 | 0 | 1 |
| Windows Local Session Manager (LSM) | 1 | 0 | 1 |
| Windows Push Notifications | 1 | 0 | 1 |
| Windows App Readiness Service | 1 | 0 | 1 |
| Windows Virtual Filtering Platform (VFP) | 1 | 0 | 1 |
| Data Sharing Service Client | 1 | 0 | 1 |
| Windows Event Viewer | 1 | 0 | 1 |
| vhdmp.sys | 1 | 0 | 1 |
| Windows Bluetooth Port Driver | 1 | 0 | 1 |
| Windows Event Logging Service | 1 | 0 | 1 |
| Windows StateRepository API | 1 | 0 | 1 |
| Connected Devices Platform Service (Cdpsvc) | 1 | 0 | 1 |
| Windows AppContainer | 1 | 0 | 1 |
| Windows Push Notification Core | 1 | 0 | 1 |
| HID class driver | 1 | 0 | 1 |
| Windows AppX Package Manager | 1 | 0 | 1 |
| Windows Feedback Hub | 1 | 0 | 1 |
| Windows DIAL Client | 1 | 0 | 1 |
| Windows Rich Text Edit Control | 1 | 0 | 1 |
| Windows WLAN Service | 1 | 0 | 1 |
| Windows Internet (wininet.dll) | 1 | 0 | 1 |
| Windows Phone Service | 1 | 0 | 1 |
| Windows Kernel-Mode Drivers | 1 | 0 | 1 |
| Windows Broker Infrastructure Service | 1 | 0 | 1 |
| Microsoft ActiveX Installer Service | 1 | 0 | 1 |
| Windows Clipboard Virtual Channel Extension | 1 | 0 | 1 |
| Windows Imaging Component | 1 | 0 | 1 |
| Windows Credential User Interface | 1 | 0 | 1 |
| Secondary Logon | 1 | 0 | 1 |
| Windows Performance Monitor | 1 | 0 | 1 |
| Windows USM Communication Manager | 1 | 0 | 1 |
| Windows VMSwitch | 1 | 0 | 1 |
| Entra Device Registration | 1 | 1 | 0 |
Data sourced from the Microsoft Security Response Center. Mariner (Azure Linux) and Edge (Chromium-based) CVEs are excluded from this summary. Generated by ARETIQ AI.