Multiple vulnerabilities in Microsoft Windows

Description

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, gain privileges, spoof user interface, cause denial of service, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Windows Hyper-V can be exploited remotely to execute arbitrary code.
2. A security feature bypass vulnerability in Windows Shell can be exploited remotely to bypass security restrictions.
3. An elevation of privilege vulnerability in Windows Subsystem for Linux can be exploited remotely to gain privileges.
4. A spoofing vulnerability in Windows NTLM can be exploited remotely to spoof user interface.
5. An elevation of privilege vulnerability in Windows App for Mac Installer can be exploited remotely to gain privileges.
6. An elevation of privilege vulnerability in Windows Graphics Component can be exploited remotely to gain privileges.
7. An elevation of privilege vulnerability in Windows HTTP.sys can be exploited remotely to gain privileges.
8. A denial of service vulnerability in Windows Lightweight Directory Access Protocol (LDAP) can be exploited remotely to cause denial of service.
9. An elevation of privilege vulnerability in Windows Remote Desktop Services can be exploited remotely to gain privileges.
10. A denial of service vulnerability in Windows Remote Access Connection Manager can be exploited remotely to cause denial of service.
11. An elevation of privilege vulnerability in Desktop Window Manager can be exploited remotely to gain privileges.
12. An elevation of privilege vulnerability in Windows Ancillary Function Driver for WinSock can be exploited remotely to gain privileges.
13. A denial of service vulnerability in GDI+ can be exploited remotely to cause denial of service.
14. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
15. An elevation of privilege vulnerability in Cluster Client Failover (CCF) can be exploited remotely to gain privileges.
16. A security feature bypass vulnerability in Windows Hyper-V can be exploited remotely to bypass security restrictions.
17. An elevation of privilege vulnerability in Mailslot File System can be exploited remotely to gain privileges.
18. An information disclosure vulnerability in Windows Kernel can be exploited remotely to obtain sensitive information.
19. A security feature bypass vulnerability in MSHTML Framework can be exploited remotely to bypass security restrictions.
20. An elevation of privilege vulnerability in Windows Connected Devices Platform Service can be exploited remotely to gain privileges.
21. An elevation of privilege vulnerability in Windows Storage can be exploited remotely to gain privileges.

Original advisories

• CVE-2026-21244

• CVE-2026-21510
• CVE-2026-21242
• CVE-2026-21249
• CVE-2026-21517
• CVE-2026-21246
• CVE-2026-21250
• CVE-2026-21235
• CVE-2026-21243
• CVE-2023-2804
• CVE-2026-21232
• CVE-2026-21533
• CVE-2026-21525
• CVE-2026-21519
• CVE-2026-21236
• CVE-2026-21248
• CVE-2026-20846
• CVE-2026-21231
• CVE-2026-21251
• CVE-2026-21255
• CVE-2026-21253
• CVE-2026-21245
• CVE-2026-21240
• CVE-2026-21239
• CVE-2026-21222
• CVE-2026-21513
• CVE-2026-21237
• CVE-2026-21247
• CVE-2026-21241
• CVE-2026-21234
• CVE-2026-21508
• CVE-2026-21238

Exploitation

Public exploits exist for this vulnerability.

Related products

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-10
• Microsoft-Windows-Server-2016
• Microsoft-Windows-Server-2019
• Microsoft-Windows-11
• Microsoft-Windows-Server-2022
• Microsoft-Windows-Server-2025

CVE list

• CVE-2023-2804
  high
• CVE-2026-20846
  critical
• CVE-2026-21222
  high
• CVE-2026-21231
  critical
• CVE-2026-21232
  critical
• CVE-2026-21234
  high
• CVE-2026-21235
  high
• CVE-2026-21236
  critical
• CVE-2026-21237
  high
• CVE-2026-21238
  critical
• CVE-2026-21239
  critical
• CVE-2026-21240
  high
• CVE-2026-21241
  high
• CVE-2026-21242
  high
• CVE-2026-21243
  critical
• CVE-2026-21244
  high
• CVE-2026-21245
  critical
• CVE-2026-21246
  critical
• CVE-2026-21247
  high
• CVE-2026-21248
  high
• CVE-2026-21249
  warning
• CVE-2026-21250
  critical
• CVE-2026-21251
  critical
• CVE-2026-21253
  high
• CVE-2026-21255
  critical
• CVE-2026-21508
  high
• CVE-2026-21510
  critical
• CVE-2026-21513
  critical
• CVE-2026-21517
  warning
• CVE-2026-21519
  critical
• CVE-2026-21525
  high
• CVE-2026-21533
  critical

KB list

• 5075897
• 5075912
• 5075899
• 5075904
• 5077212
• 5075906
• 5075999
• 5075941
• 5077181
• 5075942
• 5075943
• 5077179

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com