Solutions for:
Home Products
Small Business
Medium Business
Enterprise
Vulnerability articles Threats
Home Vulnerability articles

Multiple vulnerabilities in Microsoft Windows

Kaspersky ID:
KLA91214
Detect Date:
08/11/2026
Updated:
09/03/2026

Description

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, read local files, spoof user interface.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in Remote Access Management service/API (RPC server) can be exploited remotely to gain privileges.
  2. A remote code execution vulnerability in Windows Active Directory Domain Services can be exploited remotely to execute arbitrary code.
  3. An elevation of privilege vulnerability in Windows LUA File Virtualization Filter Driver can be exploited remotely to gain privileges.
  4. A denial of service vulnerability in Remote Procedure Call can be exploited remotely to cause denial of service.
  5. A remote code execution vulnerability in Windows Imaging Component can be exploited remotely to execute arbitrary code.
  6. An elevation of privilege vulnerability in Windows Narrator Braille can be exploited remotely to gain privileges.
  7. A spoofing vulnerability in Windows Network Address Translation (NAT) can be exploited remotely to spoof user interface.
  8. An elevation of privilege vulnerability in Windows Telephony Service can be exploited remotely to gain privileges.
  9. An elevation of privilege vulnerability in Windows Remote Desktop Services can be exploited remotely to gain privileges.
  10. An elevation of privilege vulnerability in Windows Event Logging Service can be exploited remotely to gain privileges.
  11. An elevation of privilege vulnerability in Windows Installer can be exploited remotely to gain privileges.
  12. An information disclosure vulnerability in Windows Encrypting File System (EFS) can be exploited remotely to obtain sensitive information.
  13. An information disclosure vulnerability in AMD Zen can be exploited remotely to obtain sensitive information.
  14. A denial of service vulnerability in Windows TCP/IP can be exploited remotely to cause denial of service.
  15. A remote code execution vulnerability in Remote Desktop Client can be exploited remotely to execute arbitrary code.
  16. An information disclosure vulnerability in Microsoft Windows Search Component can be exploited remotely to obtain sensitive information.
  17. An information disclosure vulnerability in Microsoft COM for Windows can be exploited remotely to obtain sensitive information.
  18. An information disclosure vulnerability in Windows Event Logging Service can be exploited remotely to obtain sensitive information.
  19. A denial of service vulnerability in Microsoft Remote Registry Service can be exploited remotely to cause denial of service.
  20. An elevation of privilege vulnerability in Windows Graphics Kernel can be exploited remotely to gain privileges.
  21. An elevation of privilege vulnerability in Windows Ancillary Function Driver for WinSock can be exploited remotely to gain privileges.
  22. An elevation of privilege vulnerability in Windows Work Folder Service can be exploited remotely to gain privileges.
  23. An information disclosure vulnerability in Windows NTFS can be exploited remotely to obtain sensitive information.
  24. An elevation of privilege vulnerability in Windows Sensor Data Service can be exploited remotely to gain privileges.
  25. An elevation of privilege vulnerability in Application Information Services can be exploited remotely to gain privileges.
  26. An elevation of privilege vulnerability in Windows Accessibility Infrastructure (ATBroker.exe) can be exploited remotely to gain privileges.
  27. An elevation of privilege vulnerability in Windows Storage can be exploited remotely to gain privileges.
  28. An information disclosure vulnerability in Windows GDI can be exploited remotely to obtain sensitive information.
  29. A remote code execution vulnerability in Windows DHCP Client can be exploited remotely to execute arbitrary code.
  30. An elevation of privilege vulnerability in Windows Network Connection Broker can be exploited remotely to gain privileges.
  31. An information disclosure vulnerability in Windows Hyper-V can be exploited remotely to obtain sensitive information.
  32. An information disclosure vulnerability in Windows Remote Desktop Client can be exploited remotely to obtain sensitive information.
  33. A remote code execution vulnerability in Windows DNS Server can be exploited remotely to execute arbitrary code.
  34. An elevation of privilege vulnerability in Windows Display Enhancement Service can be exploited remotely to gain privileges.
  35. An elevation of privilege vulnerability in Windows USB Driver can be exploited remotely to gain privileges.
  36. An elevation of privilege vulnerability in Windows Bind Filter Driver can be exploited remotely to gain privileges.
  37. A tampering vulnerability in Windows Hello can be exploited remotely to spoof user interface.
  38. An elevation of privilege vulnerability in Windows Kernel can be exploited remotely to gain privileges.
  39. An elevation of privilege vulnerability in Windows DWM Core Library can be exploited remotely to gain privileges.
  40. An information disclosure vulnerability in Windows DWM Core Library can be exploited remotely to obtain sensitive information.
  41. A security feature bypass vulnerability in Windows Defender Firewall Service can be exploited remotely to bypass security restrictions.
  42. An elevation of privilege vulnerability in Windows HTTP.sys can be exploited remotely to gain privileges.
  43. An elevation of privilege vulnerability in Winlogon can be exploited remotely to gain privileges.
  44. An elevation of privilege vulnerability in Windows Push Notifications can be exploited remotely to gain privileges.
  45. An elevation of privilege vulnerability in Windows Program Compatibility Assistant Service can be exploited remotely to gain privileges.
  46. An elevation of privilege vulnerability in Microsoft Digest Authentication can be exploited remotely to gain privileges.
  47. A remote code execution vulnerability in Windows Universal Disk Format File System Driver (UDFS) can be exploited remotely to execute arbitrary code.
  48. An elevation of privilege vulnerability in Windows NTFS can be exploited remotely to gain privileges.
  49. A denial of service vulnerability in Windows Graphics Kernel can be exploited remotely to cause denial of service.
  50. An elevation of privilege vulnerability in Windows Modern Device Management (MDM) can be exploited remotely to gain privileges.
  51. An information disclosure vulnerability in Windows GDI+ can be exploited remotely to obtain sensitive information.
  52. An elevation of privilege vulnerability in Windows Device Association Service can be exploited remotely to gain privileges.
  53. An elevation of privilege vulnerability in Windows Win32k can be exploited remotely to gain privileges.
  54. An elevation of privilege vulnerability in Windows Cloud Files Mini Filter Driver can be exploited remotely to gain privileges.
  55. An information disclosure vulnerability in Windows DHCP Server can be exploited remotely to obtain sensitive information.
  56. An elevation of privilege vulnerability in Windows Message Queuing can be exploited remotely to gain privileges.
  57. An elevation of privilege vulnerability in Windows User-Mode Power Service (UMPS) can be exploited remotely to gain privileges.
  58. An elevation of privilege vulnerability in Windows Common Log File System Driver can be exploited remotely to gain privileges.
  59. An information disclosure vulnerability in Windows Wired AutoConfig Service can be exploited remotely to obtain sensitive information.
  60. An elevation of privilege vulnerability in Windows DHCP Client can be exploited remotely to gain privileges.
  61. An information disclosure vulnerability in Windows Management Instrumentation can be exploited remotely to obtain sensitive information.
  62. An information disclosure vulnerability in Windows Imaging Component can be exploited remotely to obtain sensitive information.
  63. An information disclosure vulnerability in Win32k can be exploited remotely to obtain sensitive information.
  64. A tampering vulnerability in Windows HTTP Protocol Stack can be exploited remotely to spoof user interface.
  65. An elevation of privilege vulnerability in Windows Projected File System can be exploited remotely to gain privileges.
  66. An elevation of privilege vulnerability in Windows Kerberos can be exploited remotely to gain privileges.
  67. A security feature bypass vulnerability in Windows Schannel can be exploited remotely to bypass security restrictions.
  68. An elevation of privilege vulnerability in Windows Remote Access Connection Manager can be exploited remotely to gain privileges.
  69. An elevation of privilege vulnerability in Windows DHCP Server can be exploited remotely to gain privileges.
  70. An elevation of privilege vulnerability in Windows DNS can be exploited remotely to gain privileges.
  71. An elevation of privilege vulnerability in Windows Shell can be exploited remotely to gain privileges.
  72. An elevation of privilege vulnerability in Windows Container Isolation FS Filter Driver (unionfs.sys) can be exploited remotely to gain privileges.
  73. An information disclosure vulnerability in Windows Container Isolation FS Filter Driver (unionfs.sys) can be exploited remotely to obtain sensitive information.
  74. An elevation of privilege vulnerability in Windows License Manager can be exploited remotely to gain privileges.
  75. An elevation of privilege vulnerability in Windows Schannel can be exploited remotely to gain privileges.
  76. A remote code execution vulnerability in RPC Runtime Library can be exploited remotely to execute arbitrary code.
  77. An information disclosure vulnerability in Windows SMB Client can be exploited remotely to obtain sensitive information.
  78. A remote code execution vulnerability in Microsoft Local Security Authority Server (lsasrv) can be exploited remotely to execute arbitrary code.
  79. A remote code execution vulnerability in Windows LDAP – Lightweight Directory Access Protocol can be exploited remotely to execute arbitrary code.
  80. A remote code execution vulnerability in Windows SMBv3 Server can be exploited remotely to execute arbitrary code.
  81. A remote code execution vulnerability in Windows TCP/IP can be exploited remotely to execute arbitrary code.
  82. An elevation of privilege vulnerability in Windows SMB Client can be exploited remotely to gain privileges.
  83. A remote code execution vulnerability in Microsoft QUIC can be exploited remotely to execute arbitrary code.
  84. A remote code execution vulnerability in Windows Reliable Multicast Transport Driver (RMCAST) can be exploited remotely to execute arbitrary code.
  85. A remote code execution vulnerability in Windows Active Directory Certificate Services (AD CS) can be exploited remotely to execute arbitrary code.
  86. A remote code execution vulnerability in Windows Routing and Remote Access Service (RRAS) can be exploited remotely to execute arbitrary code.
  87. A remote code execution vulnerability in Windows GDI+ can be exploited remotely to execute arbitrary code.
  88. A remote code execution vulnerability in Windows DHCP Server can be exploited remotely to execute arbitrary code.
  89. An elevation of privilege vulnerability in Windows User Profile Service can be exploited remotely to gain privileges.
  90. A remote code execution vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) can be exploited remotely to execute arbitrary code.
  91. An elevation of privilege vulnerability in Windows GDI+ can be exploited remotely to execute arbitrary code.
  92. An elevation of privilege vulnerability in Capability Access Management Service (camsvc) can be exploited remotely to gain privileges.
  93. A remote code execution vulnerability in Windows Deployment Services TFTP Server can be exploited remotely to execute arbitrary code.
  94. An elevation of privilege vulnerability in Windows Backup Engine can be exploited remotely to gain privileges.
  95. An elevation of privilege vulnerability in Remote Access API can be exploited remotely to gain privileges.
  96. A remote code execution vulnerability in Windows iSCSI Target Service can be exploited remotely to execute arbitrary code.
  97. A denial of service vulnerability in Windows iSCSI Target Service can be exploited remotely to cause denial of service.
  98. A security feature bypass vulnerability in Active Directory can be exploited remotely to bypass security restrictions.
  99. An elevation of privilege vulnerability in Windows Autopilot can be exploited remotely to gain privileges.
  100. A denial of service vulnerability in Windows DHCP Client can be exploited remotely to cause denial of service.
  101. An elevation of privilege vulnerability in Desktop Window Manager can be exploited remotely to gain privileges.
  102. An elevation of privilege vulnerability in Microsoft Windows Storage Port Driver can be exploited remotely to gain privileges.
  103. An elevation of privilege vulnerability in Windows Key Guard can be exploited remotely to gain privileges.
  104. A remote code execution vulnerability in Windows Device Health Attestation (DHA) can be exploited remotely to execute arbitrary code.
  105. An elevation of privilege vulnerability in Microsoft Windows Cross Device Service can be exploited remotely to gain privileges.
  106. Security UI vulnerability can be exploited to spoof user interface.
  107. A denial of service vulnerability in Windows Network File System can be exploited remotely to cause denial of service.
  108. An information disclosure vulnerability in Windows App for Mac can be exploited remotely to obtain sensitive information.
  109. A denial of service vulnerability in Windows Management Services can be exploited remotely to cause denial of service.
  110. A tampering vulnerability in Windows Container Isolation FS Filter Driver (unionfs.sys) can be exploited remotely to spoof user interface.

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

CVE list

  • CVE-2026-6726
    critical
  • CVE-2026-6727
    high
  • CVE-2026-42976
    critical
  • CVE-2026-49179
    critical
  • CVE-2026-50472
    high
  • CVE-2026-54113
    critical
  • CVE-2026-54984
    critical
  • CVE-2026-56174
    critical
  • CVE-2026-56179
    critical
  • CVE-2026-59122
    high
  • CVE-2026-59125
    high
  • CVE-2026-59126
    high
  • CVE-2026-59127
    critical
  • CVE-2026-59128
    high
  • CVE-2026-59130
    high
  • CVE-2026-59131
    high
  • CVE-2026-59132
    critical
  • CVE-2026-59134
    critical
  • CVE-2026-59135
    high
  • CVE-2026-59136
    high
  • CVE-2026-59137
    high
  • CVE-2026-59138
    high
  • CVE-2026-61345
    high
  • CVE-2026-61346
    high
  • CVE-2026-61347
    high
  • CVE-2026-61348
    high
  • CVE-2026-61349
    critical
  • CVE-2026-61350
    warning
  • CVE-2026-61352
    critical
  • CVE-2026-61353
    critical
  • CVE-2026-61355
    critical
  • CVE-2026-61356
    critical
  • CVE-2026-61357
    critical
  • CVE-2026-61358
    critical
  • CVE-2026-61359
    critical
  • CVE-2026-61360
    high
  • CVE-2026-61361
    high
  • CVE-2026-61363
    critical
  • CVE-2026-61364
    critical
  • CVE-2026-61365
    critical
  • CVE-2026-61366
    high
  • CVE-2026-61367
    critical
  • CVE-2026-61368
    high
  • CVE-2026-61918
    critical
  • CVE-2026-61920
    high
  • CVE-2026-61921
    high
  • CVE-2026-61923
    critical
  • CVE-2026-61924
    critical
  • CVE-2026-61925
    critical
  • CVE-2026-61926
    critical
  • CVE-2026-61927
    high
  • CVE-2026-61928
    high
  • CVE-2026-61929
    high
  • CVE-2026-61930
    critical
  • CVE-2026-61932
    critical
  • CVE-2026-61933
    high
  • CVE-2026-61934
    critical
  • CVE-2026-61936
    high
  • CVE-2026-61937
    critical
  • CVE-2026-61938
    high
  • CVE-2026-61939
    high
  • CVE-2026-62688
    critical
  • CVE-2026-62690
    high
  • CVE-2026-62692
    critical
  • CVE-2026-62693
    high
  • CVE-2026-62695
    critical
  • CVE-2026-62696
    critical
  • CVE-2026-62698
    critical
  • CVE-2026-62699
    high
  • CVE-2026-62700
    critical
  • CVE-2026-62701
    critical
  • CVE-2026-62702
    critical
  • CVE-2026-62703
    high
  • CVE-2026-62705
    high
  • CVE-2026-62707
    critical
  • CVE-2026-62708
    high
  • CVE-2026-62709
    high
  • CVE-2026-62710
    critical
  • CVE-2026-62711
    critical
  • CVE-2026-62712
    critical
  • CVE-2026-62713
    critical
  • CVE-2026-62714
    high
  • CVE-2026-62715
    high
  • CVE-2026-62716
    high
  • CVE-2026-62717
    critical
  • CVE-2026-62718
    high
  • CVE-2026-62719
    critical
  • CVE-2026-62720
    high
  • CVE-2026-62721
    critical
  • CVE-2026-62722
    critical
  • CVE-2026-62723
    high
  • CVE-2026-62724
    high
  • CVE-2026-62725
    high
  • CVE-2026-62726
    high
  • CVE-2026-62728
    high
  • CVE-2026-62729
    high
  • CVE-2026-62730
    high
  • CVE-2026-62732
    critical
  • CVE-2026-62733
    critical
  • CVE-2026-62734
    high
  • CVE-2026-62735
    critical
  • CVE-2026-62736
    critical
  • CVE-2026-62737
    critical
  • CVE-2026-62738
    high
  • CVE-2026-62739
    critical
  • CVE-2026-62740
    high
  • CVE-2026-62741
    critical
  • CVE-2026-62742
    high
  • CVE-2026-62743
    high
  • CVE-2026-62745
    high
  • CVE-2026-62746
    high
  • CVE-2026-62747
    critical
  • CVE-2026-62748
    high
  • CVE-2026-62749
    high
  • CVE-2026-62750
    high
  • CVE-2026-62751
    critical
  • CVE-2026-62752
    critical
  • CVE-2026-62753
    high
  • CVE-2026-62754
    critical
  • CVE-2026-62755
    critical
  • CVE-2026-62757
    high
  • CVE-2026-62758
    critical
  • CVE-2026-62761
    critical
  • CVE-2026-62766
    high
  • CVE-2026-62768
    critical
  • CVE-2026-62769
    high
  • CVE-2026-62770
    critical
  • CVE-2026-62771
    critical
  • CVE-2026-62772
    critical
  • CVE-2026-62773
    high
  • CVE-2026-62774
    high
  • CVE-2026-62775
    high
  • CVE-2026-62776
    critical
  • CVE-2026-62777
    critical
  • CVE-2026-62778
    critical
  • CVE-2026-62779
    critical
  • CVE-2026-62780
    high
  • CVE-2026-62781
    critical
  • CVE-2026-62782
    critical
  • CVE-2026-62783
    critical
  • CVE-2026-62784
    critical
  • CVE-2026-62785
    critical
  • CVE-2026-62786
    high
  • CVE-2026-62787
    critical
  • CVE-2026-62788
    high
  • CVE-2026-62790
    critical
  • CVE-2026-62792
    critical
  • CVE-2026-62793
    high
  • CVE-2026-62795
    critical
  • CVE-2026-62796
    high
  • CVE-2026-62797
    critical
  • CVE-2026-62798
    high
  • CVE-2026-62799
    critical
  • CVE-2026-62800
    critical
  • CVE-2026-62803
    critical
  • CVE-2026-62807
    critical
  • CVE-2026-62811
    critical
  • CVE-2026-62812
    critical
  • CVE-2026-62814
    high
  • CVE-2026-62815
    critical
  • CVE-2026-62816
    critical
  • CVE-2026-62817
    critical
  • CVE-2026-62818
    critical
  • CVE-2026-62819
    critical
  • CVE-2026-62820
    critical
  • CVE-2026-62822
    critical
  • CVE-2026-62823
    critical
  • CVE-2026-62824
    critical
  • CVE-2026-62832
    critical
  • CVE-2026-62876
    critical
  • CVE-2026-62877
    critical
  • CVE-2026-62878
    critical
  • CVE-2026-62880
    critical
  • CVE-2026-62881
    high
  • CVE-2026-62883
    high
  • CVE-2026-62885
    critical
  • CVE-2026-62887
    high
  • CVE-2026-62888
    critical
  • CVE-2026-62889
    critical
  • CVE-2026-62890
    critical
  • CVE-2026-62892
    high
  • CVE-2026-62893
    critical
  • CVE-2026-62894
    critical
  • CVE-2026-62908
    high
  • CVE-2026-65662
    high
  • CVE-2026-65671
    critical
  • CVE-2026-65672
    critical
  • CVE-2026-65678
    high
  • CVE-2026-65679
    critical
  • CVE-2026-65681
    critical
  • CVE-2026-65773
    critical
  • CVE-2026-65774
    critical
  • CVE-2026-65775
    critical
  • CVE-2026-65776
    high
  • CVE-2026-65777
    high
  • CVE-2026-65778
    high
  • CVE-2026-65779
    high
  • CVE-2026-65780
    high
  • CVE-2026-65781
    high
  • CVE-2026-65782
    high
  • CVE-2026-65783
    high
  • CVE-2026-65784
    high
  • CVE-2026-65785
    high
  • CVE-2026-65786
    critical
  • CVE-2026-65787
    critical
  • CVE-2026-65788
    high
  • CVE-2026-65789
    critical
  • CVE-2026-65790
    critical
  • CVE-2026-65791
    critical
  • CVE-2026-65794
    high
  • CVE-2026-65795
    high
  • CVE-2026-65796
    critical
  • CVE-2026-65797
    high
  • CVE-2026-65798
    high
  • CVE-2026-65799
    critical
  • CVE-2026-65814
    critical
  • CVE-2026-66799
    critical
  • CVE-2026-66802
    critical
  • CVE-2026-66804
    critical
  • CVE-2026-68819
    critical
  • CVE-2026-68820
    high
  • CVE-2026-70304
    critical
  • CVE-2026-70307
    high
  • CVE-2026-70330
    critical
  • CVE-2026-70344
    critical
  • CVE-2026-70345
    critical
  • CVE-2026-70346
    critical
  • CVE-2026-70347
    critical
  • CVE-2026-70348
    high
  • CVE-2026-71331
    critical
  • CVE-2026-72971
    high
  • CVE-2026-62727
    unknown
  • CVE-2026-69550
    high

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Related articles
04 September 2026
Securelist
Angry Birds: Toy Ghouls’ new toys
01 September 2026
Securelist
Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set
31 August 2026
Securelist
ValleyRAT masquerading as adware
27 August 2026
Securelist
Threat landscape for industrial automation systems. Q2 2026
26 August 2026
Securelist
Exploits and vulnerabilities in Q2 2026
21 August 2026
Securelist
The invisible passenger in your car
Found an inaccuracy in the description of this vulnerability?
If you found a new Threat or Vulnerability, please, let us know by email:
newvirus@kaspersky.com
Found a new Threat or Vulnerability?
If you found a new Threat or Vulnerability, please, let us know by email:
newvirus@kaspersky.com
Solutions for
Home Products
Small Business
Medium Business
Enterprise
Select language
Severity level
Critical
High
Warning
Sorting
Kaspersky ID
Article name
Detect date
Severity
You must select at least one severity level
Do you want to save your changes?
Your message has been sent successfully.