# KB5099535: July 2026 cumulative update for Windows 10 1607 KB5099535, released July 14, 2026, fixes 258 CVEs across 8 products. 2 of them are being exploited (CVE-2026-32202); 2 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5099535 - Platform: Microsoft - Released: Jul 14, 2026 - Priority: Patch now (Closes CVE-2026-32202, exploited (CISA KEV)) - CVEs: 258, exploited: 2, on CISA KEV: 2 - Vendor advisory: https://support.microsoft.com/help/5099535 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1607 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-3.5-and-4.7.2-on-windows-10-version-1607-for-32-bit-systems.md) | | 14393.9339 | | [Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1607 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-3.5-and-4.7.2-on-windows-10-version-1607-for-x64-based-systems.md) | | 14393.9339 | | [Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-3.5-and-4.7.2-on-windows-server-2016.md) | | 14393.9339 | | [Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-3.5-and-4.7.2-on-windows-server-2016-server-core-installation.md) | | 14393.9339 | | [Windows 10 Version 1607 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1607-for-32-bit-systems.md) | | 14393.9339 | | [Windows 10 Version 1607 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1607-for-x64-based-systems.md) | | 14393.9339 | | [Windows Server 2016](https://patchblox.com/security/data/product/microsoft/windows-server-2016.md) | | 14393.9339 | | [Windows Server 2016 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2016-server-core-installation.md) | | 14393.9339 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-32202](https://patchblox.com/security/data/cve/CVE-2026-32202.md) | Patch now | Windows Shell | 4.3 | 0.7090 | CISA KEV | | [CVE-2026-56155](https://patchblox.com/security/data/cve/CVE-2026-56155.md) | Patch now | Active Directory Federation Services (AD FS) | 7.8 | 0.0035 | CISA KEV | | [CVE-2026-50509](https://patchblox.com/security/data/cve/CVE-2026-50509.md) | Urgent | Windows Wireless Wide Area Network Service | 7.8 | 0.0353 | More likely | | [CVE-2026-50518](https://patchblox.com/security/data/cve/CVE-2026-50518.md) | Urgent | Windows DHCP Server | 9.8 | 0.0097 | More likely | | [CVE-2026-56159](https://patchblox.com/security/data/cve/CVE-2026-56159.md) | Urgent | Windows DHCP Server | 9.8 | 0.0097 | | | [CVE-2026-57092](https://patchblox.com/security/data/cve/CVE-2026-57092.md) | Urgent | Windows VMSwitch | 9.9 | 0.0091 | | | [CVE-2026-48564](https://patchblox.com/security/data/cve/CVE-2026-48564.md) | Urgent | Windows DHCP Server | 8.8 | 0.0091 | | | [CVE-2026-50380](https://patchblox.com/security/data/cve/CVE-2026-50380.md) | Urgent | Windows GDI+ | 9.6 | 0.0082 | | | [CVE-2026-50474](https://patchblox.com/security/data/cve/CVE-2026-50474.md) | Urgent | Remote Desktop Client | 8.8 | 0.0082 | | | [CVE-2026-57090](https://patchblox.com/security/data/cve/CVE-2026-57090.md) | Urgent | Microsoft Windows Media Foundation | 8.8 | 0.0082 | | | [CVE-2026-57094](https://patchblox.com/security/data/cve/CVE-2026-57094.md) | Urgent | Microsoft Windows Media Foundation | 8.8 | 0.0082 | | | [CVE-2026-57087](https://patchblox.com/security/data/cve/CVE-2026-57087.md) | Urgent | Microsoft Windows Media Foundation | 8.8 | 0.0079 | | | [CVE-2026-49164](https://patchblox.com/security/data/cve/CVE-2026-49164.md) | Urgent | Active Directory Domain Services | 8.1 | 0.0079 | | | [CVE-2026-50694](https://patchblox.com/security/data/cve/CVE-2026-50694.md) | Urgent | Windows Secure Socket Tunneling Protocol (SSTP) | 8.1 | 0.0079 | | | [CVE-2026-54995](https://patchblox.com/security/data/cve/CVE-2026-54995.md) | Urgent | Reliable Multicast Transport Driver (RMCAST) | 8.1 | 0.0079 | | | [CVE-2026-50444](https://patchblox.com/security/data/cve/CVE-2026-50444.md) | Urgent | Windows Server Update Service | 8.8 | 0.0078 | | | [CVE-2026-54121](https://patchblox.com/security/data/cve/CVE-2026-54121.md) | Urgent | Active Directory Certificate Services (AD CS) | 8.8 | 0.0078 | | | [CVE-2026-56188](https://patchblox.com/security/data/cve/CVE-2026-56188.md) | Urgent | Windows Server Network driver | 9.8 | 0.0061 | More likely | | [CVE-2026-58608](https://patchblox.com/security/data/cve/CVE-2026-58608.md) | Urgent | Windows Print Spooler Components | 8.8 | 0.0057 | | | [CVE-2026-54982](https://patchblox.com/security/data/cve/CVE-2026-54982.md) | Urgent | Reliable Multicast Transport Driver (RMCAST) | 8.8 | 0.0054 | | | [CVE-2026-58531](https://patchblox.com/security/data/cve/CVE-2026-58531.md) | Urgent | Windows SMB | 7.5 | 0.0051 | More likely | | [CVE-2026-50370](https://patchblox.com/security/data/cve/CVE-2026-50370.md) | Urgent | Windows DHCP Server | 8.8 | 0.0050 | More likely | | [CVE-2026-49796](https://patchblox.com/security/data/cve/CVE-2026-49796.md) | Urgent | Windows GDI+ | 7.8 | 0.0047 | | | [CVE-2026-50655](https://patchblox.com/security/data/cve/CVE-2026-50655.md) | Urgent | Windows Media | 7.8 | 0.0047 | More likely | | [CVE-2026-54999](https://patchblox.com/security/data/cve/CVE-2026-54999.md) | Urgent | Windows TCP/IP | 8.8 | 0.0041 | | | [CVE-2026-56189](https://patchblox.com/security/data/cve/CVE-2026-56189.md) | Urgent | Microsoft Windows Media Foundation | 7.8 | 0.0039 | | | [CVE-2026-50475](https://patchblox.com/security/data/cve/CVE-2026-50475.md) | Urgent | Windows Kernel | 5.5 | 0.0038 | More likely | | [CVE-2026-49798](https://patchblox.com/security/data/cve/CVE-2026-49798.md) | Urgent | Windows Kernel | 9.3 | 0.0036 | More likely | | [CVE-2026-54128](https://patchblox.com/security/data/cve/CVE-2026-54128.md) | Urgent | Windows DHCP Client | 8.4 | 0.0036 | More likely | | [CVE-2026-54992](https://patchblox.com/security/data/cve/CVE-2026-54992.md) | Urgent | Windows Message Queuing Queue Manager | 8.4 | 0.0034 | More likely | | [CVE-2026-50489](https://patchblox.com/security/data/cve/CVE-2026-50489.md) | Urgent | Windows Win32K | 8.8 | 0.0033 | More likely | | [CVE-2026-42982](https://patchblox.com/security/data/cve/CVE-2026-42982.md) | Urgent | Windows Secure Kernel Mode | 7.8 | 0.0033 | | | [CVE-2026-50332](https://patchblox.com/security/data/cve/CVE-2026-50332.md) | Urgent | Windows Kernel | 7.8 | 0.0033 | More likely | | [CVE-2026-50387](https://patchblox.com/security/data/cve/CVE-2026-50387.md) | Urgent | Windows GDI | 7.8 | 0.0033 | More likely | | [CVE-2026-50433](https://patchblox.com/security/data/cve/CVE-2026-50433.md) | Urgent | Windows Media | 7.8 | 0.0033 | More likely | | [CVE-2026-54986](https://patchblox.com/security/data/cve/CVE-2026-54986.md) | Urgent | Windows Win32K | 7.8 | 0.0033 | More likely | | [CVE-2026-57091](https://patchblox.com/security/data/cve/CVE-2026-57091.md) | Urgent | Windows File History Service | 7.8 | 0.0033 | More likely | | [CVE-2026-50351](https://patchblox.com/security/data/cve/CVE-2026-50351.md) | Urgent | Windows Audio Compression Manager (ACM) | 7.8 | 0.0030 | More likely | | [CVE-2026-50476](https://patchblox.com/security/data/cve/CVE-2026-50476.md) | Urgent | Microsoft Windows | 7.8 | 0.0028 | More likely | | [CVE-2026-50688](https://patchblox.com/security/data/cve/CVE-2026-50688.md) | Urgent | Windows Kernel | 7.8 | 0.0028 | More likely | | [CVE-2026-50390](https://patchblox.com/security/data/cve/CVE-2026-50390.md) | Urgent | Windows Kernel | 7.0 | 0.0028 | More likely | | [CVE-2026-49805](https://patchblox.com/security/data/cve/CVE-2026-49805.md) | Urgent | Windows Win32K | 7.0 | 0.0024 | More likely | | [CVE-2026-50297](https://patchblox.com/security/data/cve/CVE-2026-50297.md) | Urgent | Windows Win32K | 7.0 | 0.0024 | More likely | | [CVE-2026-50325](https://patchblox.com/security/data/cve/CVE-2026-50325.md) | Urgent | Windows Win32K | 7.0 | 0.0024 | More likely | | [CVE-2026-58638](https://patchblox.com/security/data/cve/CVE-2026-58638.md) | Urgent | Windows Boot Loader | 6.0 | 0.0024 | More likely | | [CVE-2026-50667](https://patchblox.com/security/data/cve/CVE-2026-50667.md) | Urgent | Windows NTFS | 7.8 | 0.0021 | More likely | | [CVE-2026-50646](https://patchblox.com/security/data/cve/CVE-2026-50646.md) | High | .NET Framework | 8.8 | 0.0402 | | | [CVE-2026-50649](https://patchblox.com/security/data/cve/CVE-2026-50649.md) | High | .NET | 8.8 | 0.0402 | | | [CVE-2026-50652](https://patchblox.com/security/data/cve/CVE-2026-50652.md) | High | Azure Active Directory | 7.5 | 0.0173 | | | [CVE-2026-50330](https://patchblox.com/security/data/cve/CVE-2026-50330.md) | High | Remote Desktop Client | 7.5 | 0.0125 | | | [CVE-2026-50328](https://patchblox.com/security/data/cve/CVE-2026-50328.md) | High | Windows Server Update Service | 7.5 | 0.0123 | | | [CVE-2026-47302](https://patchblox.com/security/data/cve/CVE-2026-47302.md) | High | .NET | 8.8 | 0.0117 | | | [CVE-2026-50525](https://patchblox.com/security/data/cve/CVE-2026-50525.md) | High | .NET | 8.8 | 0.0117 | | | [CVE-2026-50527](https://patchblox.com/security/data/cve/CVE-2026-50527.md) | High | .NET Framework | 8.8 | 0.0117 | | | [CVE-2026-50648](https://patchblox.com/security/data/cve/CVE-2026-50648.md) | High | .NET Framework | 8.8 | 0.0117 | | | [CVE-2026-40378](https://patchblox.com/security/data/cve/CVE-2026-40378.md) | High | Windows Local Security Authority Subsystem Service (LSASS) | 7.5 | 0.0117 | | | [CVE-2026-49787](https://patchblox.com/security/data/cve/CVE-2026-49787.md) | High | Windows HTTP.sys | 7.5 | 0.0117 | | | [CVE-2026-49788](https://patchblox.com/security/data/cve/CVE-2026-49788.md) | High | HTTP/2 | 7.5 | 0.0117 | | | [CVE-2026-50304](https://patchblox.com/security/data/cve/CVE-2026-50304.md) | High | Active Directory Federation Services (AD FS) | 7.5 | 0.0117 | | | [CVE-2026-50355](https://patchblox.com/security/data/cve/CVE-2026-50355.md) | High | Active Directory Federation Services (AD FS) | 7.5 | 0.0117 | | | [CVE-2026-50368](https://patchblox.com/security/data/cve/CVE-2026-50368.md) | High | Active Directory Federation Services (AD FS) | 7.5 | 0.0117 | | | [CVE-2026-50411](https://patchblox.com/security/data/cve/CVE-2026-50411.md) | High | Active Directory Federation Services (AD FS) | 7.5 | 0.0117 | | | [CVE-2026-50496](https://patchblox.com/security/data/cve/CVE-2026-50496.md) | High | Windows Network Policy Server SNMP | 7.5 | 0.0117 | | | [CVE-2026-50647](https://patchblox.com/security/data/cve/CVE-2026-50647.md) | High | Active Directory Federation Services (AD FS) | 7.5 | 0.0117 | | | [CVE-2026-50653](https://patchblox.com/security/data/cve/CVE-2026-50653.md) | High | Azure Active Directory | 7.5 | 0.0117 | | | [CVE-2026-50695](https://patchblox.com/security/data/cve/CVE-2026-50695.md) | High | Active Directory Federation Services (AD FS) | 7.5 | 0.0117 | | | [CVE-2026-54119](https://patchblox.com/security/data/cve/CVE-2026-54119.md) | High | Windows Active Directory | 7.5 | 0.0117 | | | [CVE-2026-54983](https://patchblox.com/security/data/cve/CVE-2026-54983.md) | High | Active Directory Federation Services (AD FS) | 7.5 | 0.0117 | | | [CVE-2026-58627](https://patchblox.com/security/data/cve/CVE-2026-58627.md) | High | Windows DHCP Server | 7.5 | 0.0117 | | | [CVE-2026-49181](https://patchblox.com/security/data/cve/CVE-2026-49181.md) | High | Windows DHCP Client | 7.5 | 0.0117 | | | [CVE-2026-56186](https://patchblox.com/security/data/cve/CVE-2026-56186.md) | High | Windows Schannel | 8.1 | 0.0111 | | | [CVE-2026-50429](https://patchblox.com/security/data/cve/CVE-2026-50429.md) | High | Windows Kernel | 8.2 | 0.0107 | | | [CVE-2026-50470](https://patchblox.com/security/data/cve/CVE-2026-50470.md) | High | Windows Network Policy Server SNMP | 7.5 | 0.0103 | | | [CVE-2026-42990](https://patchblox.com/security/data/cve/CVE-2026-42990.md) | High | SQL Server ODBC driver | 9.8 | 0.0097 | | | [CVE-2026-49172](https://patchblox.com/security/data/cve/CVE-2026-49172.md) | High | Windows FTP Service | 9.8 | 0.0097 | | | [CVE-2026-50447](https://patchblox.com/security/data/cve/CVE-2026-50447.md) | High | Windows Message Queuing | 9.8 | 0.0097 | | | [CVE-2026-56190](https://patchblox.com/security/data/cve/CVE-2026-56190.md) | High | Windows RDP | 9.8 | 0.0097 | | | [CVE-2026-49178](https://patchblox.com/security/data/cve/CVE-2026-49178.md) | High | Active Directory Domain Services | 8.8 | 0.0091 | | | [CVE-2026-50666](https://patchblox.com/security/data/cve/CVE-2026-50666.md) | High | Windows Remote Access Connection Manager | 8.8 | 0.0091 | | | [CVE-2026-56194](https://patchblox.com/security/data/cve/CVE-2026-56194.md) | High | Windows Network File System | 8.8 | 0.0091 | | | [CVE-2026-56647](https://patchblox.com/security/data/cve/CVE-2026-56647.md) | High | Windows Remote Access Service Infrastructure | 8.8 | 0.0091 | | | [CVE-2026-58594](https://patchblox.com/security/data/cve/CVE-2026-58594.md) | High | Windows RDP | 8.8 | 0.0082 | | | [CVE-2026-50439](https://patchblox.com/security/data/cve/CVE-2026-50439.md) | High | Windows Message Queuing Queue Manager | 8.1 | 0.0079 | | | [CVE-2026-50500](https://patchblox.com/security/data/cve/CVE-2026-50500.md) | High | Windows Netlogon | 7.5 | 0.0074 | | | [CVE-2026-50505](https://patchblox.com/security/data/cve/CVE-2026-50505.md) | High | Windows Message Queuing | 7.5 | 0.0074 | | | [CVE-2026-50659](https://patchblox.com/security/data/cve/CVE-2026-50659.md) | High | .NET | 8.8 | 0.0074 | | | [CVE-2026-50686](https://patchblox.com/security/data/cve/CVE-2026-50686.md) | High | Windows OLE | 8.1 | 0.0071 | | | [CVE-2026-50369](https://patchblox.com/security/data/cve/CVE-2026-50369.md) | High | Windows Remote Desktop Services | 8.8 | 0.0070 | | | [CVE-2026-50685](https://patchblox.com/security/data/cve/CVE-2026-50685.md) | High | Windows DHCP Server | 7.5 | 0.0066 | | | [CVE-2026-50502](https://patchblox.com/security/data/cve/CVE-2026-50502.md) | High | Windows Event Logging Service | 8.0 | 0.0065 | | | [CVE-2026-50683](https://patchblox.com/security/data/cve/CVE-2026-50683.md) | High | Windows DHCP Server | 8.0 | 0.0058 | | | [CVE-2026-42900](https://patchblox.com/security/data/cve/CVE-2026-42900.md) | High | Microsoft Windows App Store | 8.1 | 0.0054 | | | [CVE-2026-50365](https://patchblox.com/security/data/cve/CVE-2026-50365.md) | High | Windows RPC API | 8.0 | 0.0054 | | | [CVE-2026-42975](https://patchblox.com/security/data/cve/CVE-2026-42975.md) | High | Windows Bluetooth Port Driver | 8.0 | 0.0054 | | | [CVE-2026-56648](https://patchblox.com/security/data/cve/CVE-2026-56648.md) | High | Windows Network File System | 7.5 | 0.0051 | | | [CVE-2026-49797](https://patchblox.com/security/data/cve/CVE-2026-49797.md) | High | Windows NTFS | 7.8 | 0.0047 | | | [CVE-2026-50308](https://patchblox.com/security/data/cve/CVE-2026-50308.md) | High | Windows NTFS | 7.8 | 0.0047 | | | [CVE-2026-50313](https://patchblox.com/security/data/cve/CVE-2026-50313.md) | High | Windows NTFS | 7.8 | 0.0047 | | | [CVE-2026-50347](https://patchblox.com/security/data/cve/CVE-2026-50347.md) | High | Windows Data.dll | 7.8 | 0.0047 | | | [CVE-2026-50362](https://patchblox.com/security/data/cve/CVE-2026-50362.md) | High | Windows Resilient File System (ReFS) | 7.8 | 0.0047 | | | [CVE-2026-50386](https://patchblox.com/security/data/cve/CVE-2026-50386.md) | High | Windows NTFS | 7.8 | 0.0047 | | | [CVE-2026-50388](https://patchblox.com/security/data/cve/CVE-2026-50388.md) | High | Windows NTFS | 7.8 | 0.0047 | | | [CVE-2026-50448](https://patchblox.com/security/data/cve/CVE-2026-50448.md) | High | Windows NTFS | 7.8 | 0.0047 | | | [CVE-2026-50461](https://patchblox.com/security/data/cve/CVE-2026-50461.md) | High | Windows NTFS | 7.8 | 0.0047 | | | [CVE-2026-50471](https://patchblox.com/security/data/cve/CVE-2026-50471.md) | High | Windows NTFS | 7.8 | 0.0047 | | | [CVE-2026-58609](https://patchblox.com/security/data/cve/CVE-2026-58609.md) | High | Microsoft Graphics Component | 7.8 | 0.0047 | | | [CVE-2026-58610](https://patchblox.com/security/data/cve/CVE-2026-58610.md) | High | Microsoft Windows Media Foundation | 7.8 | 0.0047 | | | [CVE-2026-50650](https://patchblox.com/security/data/cve/CVE-2026-50650.md) | High | .NET Framework | 8.8 | 0.0046 | | | [CVE-2026-50462](https://patchblox.com/security/data/cve/CVE-2026-50462.md) | High | Windows Ancillary Function Driver for WinSock | 7.8 | 0.0046 | | | [CVE-2026-50697](https://patchblox.com/security/data/cve/CVE-2026-50697.md) | High | Windows Common Log File System Driver | 7.8 | 0.0040 | | | [CVE-2026-49791](https://patchblox.com/security/data/cve/CVE-2026-49791.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.1 | 0.0038 | | | [CVE-2026-54122](https://patchblox.com/security/data/cve/CVE-2026-54122.md) | High | Windows GDI+ | 8.4 | 0.0036 | | | [CVE-2026-50498](https://patchblox.com/security/data/cve/CVE-2026-50498.md) | High | Windows Universal Disk Format File System Driver (UDFS) | 7.8 | 0.0036 | | | [CVE-2026-58530](https://patchblox.com/security/data/cve/CVE-2026-58530.md) | High | Windows Resilient File System (ReFS) | 7.8 | 0.0036 | | | [CVE-2026-49789](https://patchblox.com/security/data/cve/CVE-2026-49789.md) | High | Windows NTFS | 7.3 | 0.0036 | | | [CVE-2026-49790](https://patchblox.com/security/data/cve/CVE-2026-49790.md) | High | Windows Universal Disk Format File System Driver (UDFS) | 7.3 | 0.0036 | | | [CVE-2026-50482](https://patchblox.com/security/data/cve/CVE-2026-50482.md) | High | Windows NTFS | 7.3 | 0.0036 | | | [CVE-2026-58640](https://patchblox.com/security/data/cve/CVE-2026-58640.md) | High | Windows NTFS | 7.3 | 0.0036 | | | [CVE-2026-49165](https://patchblox.com/security/data/cve/CVE-2026-49165.md) | High | Microsoft Windows App Store | 7.1 | 0.0034 | | | [CVE-2026-49184](https://patchblox.com/security/data/cve/CVE-2026-49184.md) | High | Windows NTFS | 8.4 | 0.0034 | | | [CVE-2026-50477](https://patchblox.com/security/data/cve/CVE-2026-50477.md) | High | Windows Kernel | 8.8 | 0.0033 | | | [CVE-2026-50692](https://patchblox.com/security/data/cve/CVE-2026-50692.md) | High | Desktop Window Manager | 8.8 | 0.0033 | | | [CVE-2026-58534](https://patchblox.com/security/data/cve/CVE-2026-58534.md) | High | Microsoft Input Method Editor (IME) | 8.8 | 0.0033 | | | [CVE-2026-49783](https://patchblox.com/security/data/cve/CVE-2026-49783.md) | High | Windows Secure Boot | 7.8 | 0.0033 | | | [CVE-2026-49792](https://patchblox.com/security/data/cve/CVE-2026-49792.md) | High | Windows Resilient File System (ReFS) | 7.8 | 0.0033 | | | [CVE-2026-49793](https://patchblox.com/security/data/cve/CVE-2026-49793.md) | High | Windows Resilient File System (ReFS) | 7.8 | 0.0033 | | | [CVE-2026-50306](https://patchblox.com/security/data/cve/CVE-2026-50306.md) | High | Windows TCP/IP | 7.8 | 0.0033 | | | [CVE-2026-50309](https://patchblox.com/security/data/cve/CVE-2026-50309.md) | High | Windows NTFS | 7.8 | 0.0033 | | | [CVE-2026-50318](https://patchblox.com/security/data/cve/CVE-2026-50318.md) | High | Windows Resilient File System (ReFS) | 7.8 | 0.0033 | | | [CVE-2026-50331](https://patchblox.com/security/data/cve/CVE-2026-50331.md) | High | Windows Application Model | 7.8 | 0.0033 | | | [CVE-2026-50337](https://patchblox.com/security/data/cve/CVE-2026-50337.md) | High | Windows Notification | 7.8 | 0.0033 | | | [CVE-2026-50357](https://patchblox.com/security/data/cve/CVE-2026-50357.md) | High | Windows Resilient File System (ReFS) | 7.8 | 0.0033 | | | [CVE-2026-50363](https://patchblox.com/security/data/cve/CVE-2026-50363.md) | High | Windows Push Notifications | 7.8 | 0.0033 | | | [CVE-2026-50400](https://patchblox.com/security/data/cve/CVE-2026-50400.md) | High | Windows App Installer | 7.8 | 0.0033 | | | [CVE-2026-50402](https://patchblox.com/security/data/cve/CVE-2026-50402.md) | High | Windows NTFS | 7.8 | 0.0033 | | | [CVE-2026-50407](https://patchblox.com/security/data/cve/CVE-2026-50407.md) | High | Windows Resilient File System (ReFS) | 7.8 | 0.0033 | | | [CVE-2026-50412](https://patchblox.com/security/data/cve/CVE-2026-50412.md) | High | Windows NTFS | 7.8 | 0.0033 | | | [CVE-2026-50417](https://patchblox.com/security/data/cve/CVE-2026-50417.md) | High | Windows NTFS | 7.8 | 0.0033 | | | [CVE-2026-50421](https://patchblox.com/security/data/cve/CVE-2026-50421.md) | High | Windows Connected User Experiences and Telemetry | 7.8 | 0.0033 | | | [CVE-2026-50422](https://patchblox.com/security/data/cve/CVE-2026-50422.md) | High | Windows NTFS | 7.8 | 0.0033 | | | [CVE-2026-50435](https://patchblox.com/security/data/cve/CVE-2026-50435.md) | High | Windows Overlay Filter | 7.8 | 0.0033 | | | [CVE-2026-50441](https://patchblox.com/security/data/cve/CVE-2026-50441.md) | High | Windows Resilient File System (ReFS) | 7.8 | 0.0033 | | | [CVE-2026-50480](https://patchblox.com/security/data/cve/CVE-2026-50480.md) | High | Windows Web Proxy Auto-Discovery Protocol (WPAD) | 7.8 | 0.0033 | | | [CVE-2026-50494](https://patchblox.com/security/data/cve/CVE-2026-50494.md) | High | Windows NTFS | 7.8 | 0.0033 | | | [CVE-2026-54109](https://patchblox.com/security/data/cve/CVE-2026-54109.md) | High | Windows Resilient File System (ReFS) | 7.8 | 0.0033 | | | [CVE-2026-54115](https://patchblox.com/security/data/cve/CVE-2026-54115.md) | High | Windows Active Directory | 7.8 | 0.0033 | | | [CVE-2026-54987](https://patchblox.com/security/data/cve/CVE-2026-54987.md) | High | Windows Overlay Filter | 7.8 | 0.0033 | | | [CVE-2026-55004](https://patchblox.com/security/data/cve/CVE-2026-55004.md) | High | Microsoft Printer Drivers | 7.8 | 0.0033 | | | [CVE-2026-56175](https://patchblox.com/security/data/cve/CVE-2026-56175.md) | High | Windows NTFS | 7.8 | 0.0033 | | | [CVE-2026-56176](https://patchblox.com/security/data/cve/CVE-2026-56176.md) | High | Windows Win32K - GRFX | 7.8 | 0.0033 | | | [CVE-2026-56182](https://patchblox.com/security/data/cve/CVE-2026-56182.md) | High | Windows NTFS | 7.8 | 0.0033 | | | [CVE-2026-56643](https://patchblox.com/security/data/cve/CVE-2026-56643.md) | High | Windows Kernel | 7.8 | 0.0033 | | | [CVE-2026-56644](https://patchblox.com/security/data/cve/CVE-2026-56644.md) | High | Windows Kernel | 7.8 | 0.0033 | | | [CVE-2026-56650](https://patchblox.com/security/data/cve/CVE-2026-56650.md) | High | Windows Network File System | 7.8 | 0.0033 | | | [CVE-2026-57096](https://patchblox.com/security/data/cve/CVE-2026-57096.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.8 | 0.0033 | | | [CVE-2026-58532](https://patchblox.com/security/data/cve/CVE-2026-58532.md) | High | Windows Kernel | 7.8 | 0.0033 | | | [CVE-2026-58541](https://patchblox.com/security/data/cve/CVE-2026-58541.md) | High | Windows DWM | 7.8 | 0.0033 | | | [CVE-2026-58601](https://patchblox.com/security/data/cve/CVE-2026-58601.md) | High | Virtual Hard Disk (VHD) Miniport Driver | 7.8 | 0.0033 | | | [CVE-2026-58632](https://patchblox.com/security/data/cve/CVE-2026-58632.md) | High | Windows Win32K | 7.8 | 0.0033 | | | [CVE-2026-50354](https://patchblox.com/security/data/cve/CVE-2026-50354.md) | High | Windows Kernel | 7.1 | 0.0033 | | | [CVE-2026-49176](https://patchblox.com/security/data/cve/CVE-2026-49176.md) | High | Windows WalletService | 7.8 | 0.0033 | | | [CVE-2026-50451](https://patchblox.com/security/data/cve/CVE-2026-50451.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.1 | 0.0031 | | | [CVE-2026-49171](https://patchblox.com/security/data/cve/CVE-2026-49171.md) | High | Microsoft Windows Speech | 7.5 | 0.0030 | | | [CVE-2026-50311](https://patchblox.com/security/data/cve/CVE-2026-50311.md) | High | Windows Server | 7.8 | 0.0030 | | | [CVE-2026-50333](https://patchblox.com/security/data/cve/CVE-2026-50333.md) | High | Windows Spaceport.sys | 7.8 | 0.0030 | | | [CVE-2026-50344](https://patchblox.com/security/data/cve/CVE-2026-50344.md) | High | Windows OLE | 7.8 | 0.0030 | | | [CVE-2026-50346](https://patchblox.com/security/data/cve/CVE-2026-50346.md) | High | RPC Runtime | 7.8 | 0.0030 | | | [CVE-2026-50391](https://patchblox.com/security/data/cve/CVE-2026-50391.md) | High | Windows Group Policy | 7.8 | 0.0030 | | | [CVE-2026-50405](https://patchblox.com/security/data/cve/CVE-2026-50405.md) | High | Windows Filtering Platform (WFP) | 7.8 | 0.0030 | | | [CVE-2026-55001](https://patchblox.com/security/data/cve/CVE-2026-55001.md) | High | Windows Active Directory | 7.8 | 0.0030 | | | [CVE-2026-58540](https://patchblox.com/security/data/cve/CVE-2026-58540.md) | High | Windows Installer | 7.8 | 0.0030 | | | [CVE-2026-47304](https://patchblox.com/security/data/cve/CVE-2026-47304.md) | High | .NET | 9.8 | 0.0029 | | | [CVE-2026-50358](https://patchblox.com/security/data/cve/CVE-2026-50358.md) | High | Windows Media | 7.0 | 0.0028 | | | [CVE-2026-50359](https://patchblox.com/security/data/cve/CVE-2026-50359.md) | High | Microsoft XML Core Services | 7.0 | 0.0028 | | | [CVE-2026-50490](https://patchblox.com/security/data/cve/CVE-2026-50490.md) | High | Windows Installer | 7.0 | 0.0028 | | | [CVE-2026-50491](https://patchblox.com/security/data/cve/CVE-2026-50491.md) | High | Code Integrity DLL (ci.dll) | 7.0 | 0.0028 | | | [CVE-2026-54989](https://patchblox.com/security/data/cve/CVE-2026-54989.md) | High | Quality Windows Audio/Video Experience (QWAVE) service | 7.0 | 0.0028 | | | [CVE-2026-57093](https://patchblox.com/security/data/cve/CVE-2026-57093.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0028 | | | [CVE-2026-50296](https://patchblox.com/security/data/cve/CVE-2026-50296.md) | High | Windows Graphics Kernel | 7.0 | 0.0026 | | | [CVE-2026-50372](https://patchblox.com/security/data/cve/CVE-2026-50372.md) | High | Windows Redirected Drive Buffering | 7.0 | 0.0026 | | | [CVE-2026-50397](https://patchblox.com/security/data/cve/CVE-2026-50397.md) | High | Windows Kernel | 7.0 | 0.0026 | | | [CVE-2026-58619](https://patchblox.com/security/data/cve/CVE-2026-58619.md) | High | Windows Sensor Data Service | 7.0 | 0.0026 | | | [CVE-2026-58629](https://patchblox.com/security/data/cve/CVE-2026-58629.md) | High | Windows DirectX | 7.0 | 0.0026 | | | [CVE-2026-58637](https://patchblox.com/security/data/cve/CVE-2026-58637.md) | High | Windows Client-Side Caching (CSC) Service | 7.0 | 0.0026 | | | [CVE-2026-54107](https://patchblox.com/security/data/cve/CVE-2026-54107.md) | High | Windows Win32K | 8.8 | 0.0021 | | | [CVE-2026-50321](https://patchblox.com/security/data/cve/CVE-2026-50321.md) | High | Windows USB Driver | 7.8 | 0.0021 | | | [CVE-2026-50673](https://patchblox.com/security/data/cve/CVE-2026-50673.md) | High | Windows Kernel | 7.8 | 0.0021 | | | [CVE-2026-49784](https://patchblox.com/security/data/cve/CVE-2026-49784.md) | High | Microsoft Windows App Store | 7.0 | 0.0020 | | | [CVE-2026-49803](https://patchblox.com/security/data/cve/CVE-2026-49803.md) | High | Windows AppX Deployment Service | 7.0 | 0.0020 | | | [CVE-2026-50356](https://patchblox.com/security/data/cve/CVE-2026-50356.md) | High | Microsoft Windows App Store | 7.0 | 0.0020 | | | [CVE-2026-50371](https://patchblox.com/security/data/cve/CVE-2026-50371.md) | High | Windows LUAFV | 7.0 | 0.0020 | | | [CVE-2026-50669](https://patchblox.com/security/data/cve/CVE-2026-50669.md) | High | Windows Telephony Service | 7.0 | 0.0020 | | | [CVE-2026-44806](https://patchblox.com/security/data/cve/CVE-2026-44806.md) | Routine | Windows Cryptographic Services | 5.3 | 0.0117 | | | [CVE-2026-49799](https://patchblox.com/security/data/cve/CVE-2026-49799.md) | Routine | Windows Local Security Authority Subsystem Service (LSASS) | 6.5 | 0.0114 | | | [CVE-2026-50366](https://patchblox.com/security/data/cve/CVE-2026-50366.md) | Routine | Active Directory Domain Services | 6.5 | 0.0114 | | | [CVE-2026-57976](https://patchblox.com/security/data/cve/CVE-2026-57976.md) | Routine | Active Directory Domain Services | 6.5 | 0.0114 | | | [CVE-2026-57982](https://patchblox.com/security/data/cve/CVE-2026-57982.md) | Routine | Windows RDP | 6.5 | 0.0100 | | | [CVE-2026-50432](https://patchblox.com/security/data/cve/CVE-2026-50432.md) | Routine | Windows Virtual Filtering Platform (VFP) | 5.3 | 0.0095 | | | [CVE-2026-50376](https://patchblox.com/security/data/cve/CVE-2026-50376.md) | Routine | Windows RDP | 6.5 | 0.0092 | | | [CVE-2026-50445](https://patchblox.com/security/data/cve/CVE-2026-50445.md) | Routine | Windows RDP | 6.5 | 0.0092 | | | [CVE-2026-50497](https://patchblox.com/security/data/cve/CVE-2026-50497.md) | Routine | Windows Remote Desktop Protocol | 6.5 | 0.0092 | | | [CVE-2026-50504](https://patchblox.com/security/data/cve/CVE-2026-50504.md) | Routine | Remote Desktop Client | 6.5 | 0.0092 | | | [CVE-2026-54126](https://patchblox.com/security/data/cve/CVE-2026-54126.md) | Routine | Windows RDP | 6.5 | 0.0092 | | | [CVE-2026-55003](https://patchblox.com/security/data/cve/CVE-2026-55003.md) | Routine | Windows RDP | 6.5 | 0.0092 | | | [CVE-2026-57979](https://patchblox.com/security/data/cve/CVE-2026-57979.md) | Routine | Windows RDP | 6.5 | 0.0092 | | | [CVE-2026-58533](https://patchblox.com/security/data/cve/CVE-2026-58533.md) | Routine | Windows RDP | 6.5 | 0.0092 | | | [CVE-2026-58535](https://patchblox.com/security/data/cve/CVE-2026-58535.md) | Routine | Windows RDP | 6.5 | 0.0092 | | | [CVE-2026-58539](https://patchblox.com/security/data/cve/CVE-2026-58539.md) | Routine | Windows RDP | 6.5 | 0.0092 | | | [CVE-2026-58546](https://patchblox.com/security/data/cve/CVE-2026-58546.md) | Routine | Windows RDP | 6.5 | 0.0092 | | | [CVE-2026-50324](https://patchblox.com/security/data/cve/CVE-2026-50324.md) | Routine | Active Directory Federation Services (AD FS) | 5.9 | 0.0086 | | | [CVE-2026-56649](https://patchblox.com/security/data/cve/CVE-2026-56649.md) | Routine | Windows Network File System | 5.9 | 0.0070 | | | [CVE-2026-50485](https://patchblox.com/security/data/cve/CVE-2026-50485.md) | Routine | Windows Hyper-V | 4.5 | 0.0066 | | | [CVE-2026-50426](https://patchblox.com/security/data/cve/CVE-2026-50426.md) | Routine | Role: DNS Server | 6.8 | 0.0056 | | | [CVE-2026-50453](https://patchblox.com/security/data/cve/CVE-2026-50453.md) | Routine | Windows USB Audio Class driver (usbaudio.sys) | 6.1 | 0.0051 | | | [CVE-2026-50294](https://patchblox.com/security/data/cve/CVE-2026-50294.md) | Routine | Windows Kernel | 6.2 | 0.0051 | | | [CVE-2026-57097](https://patchblox.com/security/data/cve/CVE-2026-57097.md) | Routine | Microsoft XML | 6.4 | 0.0050 | | | [CVE-2026-57095](https://patchblox.com/security/data/cve/CVE-2026-57095.md) | Routine | Windows Win32K | 6.2 | 0.0049 | | | [CVE-2026-49804](https://patchblox.com/security/data/cve/CVE-2026-49804.md) | Routine | Windows USB Video Driver | 6.6 | 0.0048 | | | [CVE-2026-50661](https://patchblox.com/security/data/cve/CVE-2026-50661.md) | Routine | Windows BitLocker | 6.1 | 0.0048 | Disclosed | | [CVE-2026-33842](https://patchblox.com/security/data/cve/CVE-2026-33842.md) | Routine | Windows File Explorer | 5.5 | 0.0048 | | | [CVE-2026-41087](https://patchblox.com/security/data/cve/CVE-2026-41087.md) | Routine | Windows File Explorer | 5.5 | 0.0048 | | | [CVE-2026-50334](https://patchblox.com/security/data/cve/CVE-2026-50334.md) | Routine | Windows Notification | 5.5 | 0.0048 | | | [CVE-2026-50352](https://patchblox.com/security/data/cve/CVE-2026-50352.md) | Routine | Windows Cryptographic Services | 5.5 | 0.0048 | | | [CVE-2026-50389](https://patchblox.com/security/data/cve/CVE-2026-50389.md) | Routine | Windows File Explorer | 5.5 | 0.0048 | | | [CVE-2026-50394](https://patchblox.com/security/data/cve/CVE-2026-50394.md) | Routine | Windows Media | 5.5 | 0.0048 | | | [CVE-2026-50409](https://patchblox.com/security/data/cve/CVE-2026-50409.md) | Routine | Windows Overlay Filter | 5.5 | 0.0048 | | | [CVE-2026-50430](https://patchblox.com/security/data/cve/CVE-2026-50430.md) | Routine | Windows Push Notifications | 5.5 | 0.0048 | | | [CVE-2026-50431](https://patchblox.com/security/data/cve/CVE-2026-50431.md) | Routine | Windows Quality of Service (QoS) Packet Scheduler | 5.5 | 0.0048 | | | [CVE-2026-50442](https://patchblox.com/security/data/cve/CVE-2026-50442.md) | Routine | Windows File Explorer | 5.5 | 0.0048 | | | [CVE-2026-50456](https://patchblox.com/security/data/cve/CVE-2026-50456.md) | Routine | Windows File Explorer | 5.5 | 0.0048 | | | [CVE-2026-50473](https://patchblox.com/security/data/cve/CVE-2026-50473.md) | Routine | Windows File Explorer | 5.5 | 0.0048 | | | [CVE-2026-50681](https://patchblox.com/security/data/cve/CVE-2026-50681.md) | Routine | Windows Cryptographic Services | 5.5 | 0.0048 | | | [CVE-2026-49794](https://patchblox.com/security/data/cve/CVE-2026-49794.md) | Routine | Windows USB Audio Class driver (usbaudio.sys) | 4.6 | 0.0047 | | | [CVE-2026-50419](https://patchblox.com/security/data/cve/CVE-2026-50419.md) | Routine | Windows Kernel | 3.3 | 0.0046 | | | [CVE-2026-49180](https://patchblox.com/security/data/cve/CVE-2026-49180.md) | Routine | Universal Plug and Play (upnp.dll) | 5.5 | 0.0044 | | | [CVE-2026-49177](https://patchblox.com/security/data/cve/CVE-2026-49177.md) | Routine | Windows TCP/IP | 5.5 | 0.0044 | | | [CVE-2026-49168](https://patchblox.com/security/data/cve/CVE-2026-49168.md) | Routine | Windows Storage Spaces Direct | 6.8 | 0.0044 | | | [CVE-2026-50298](https://patchblox.com/security/data/cve/CVE-2026-50298.md) | Routine | Windows Spaceport.sys | 6.8 | 0.0044 | | | [CVE-2026-50299](https://patchblox.com/security/data/cve/CVE-2026-50299.md) | Routine | Windows Storage Spaces Direct | 6.8 | 0.0044 | | | [CVE-2026-50492](https://patchblox.com/security/data/cve/CVE-2026-50492.md) | Routine | Windows Resilient File System (ReFS) | 6.8 | 0.0044 | | | [CVE-2026-50668](https://patchblox.com/security/data/cve/CVE-2026-50668.md) | Routine | Windows NTFS | 6.8 | 0.0044 | | | [CVE-2026-54132](https://patchblox.com/security/data/cve/CVE-2026-54132.md) | Routine | Windows Kernel | 6.8 | 0.0044 | | | [CVE-2026-50377](https://patchblox.com/security/data/cve/CVE-2026-50377.md) | Routine | Windows Kernel | 5.5 | 0.0041 | | | [CVE-2026-59116](https://patchblox.com/security/data/cve/CVE-2026-59116.md) | Routine | Windows Remote Desktop | 6.8 | 0.0040 | | | [CVE-2026-40422](https://patchblox.com/security/data/cve/CVE-2026-40422.md) | Routine | Windows File Explorer | 5.5 | 0.0040 | | | [CVE-2026-49801](https://patchblox.com/security/data/cve/CVE-2026-49801.md) | Routine | Windows SMB | 5.5 | 0.0040 | | | [CVE-2026-50300](https://patchblox.com/security/data/cve/CVE-2026-50300.md) | Routine | Windows Kernel | 5.5 | 0.0040 | | | [CVE-2026-50341](https://patchblox.com/security/data/cve/CVE-2026-50341.md) | Routine | Windows NTFS | 5.5 | 0.0040 | | | [CVE-2026-50437](https://patchblox.com/security/data/cve/CVE-2026-50437.md) | Routine | Windows DWM Core Library | 5.5 | 0.0040 | | | [CVE-2026-50455](https://patchblox.com/security/data/cve/CVE-2026-50455.md) | Routine | Universal Plug and Play (upnp.dll) | 5.5 | 0.0040 | | | [CVE-2026-50690](https://patchblox.com/security/data/cve/CVE-2026-50690.md) | Routine | Windows SMB | 5.5 | 0.0040 | | | [CVE-2026-54997](https://patchblox.com/security/data/cve/CVE-2026-54997.md) | Routine | Windows SMB | 5.5 | 0.0040 | | | [CVE-2026-58614](https://patchblox.com/security/data/cve/CVE-2026-58614.md) | Routine | Windows Kernel | 5.5 | 0.0040 | | | [CVE-2026-50684](https://patchblox.com/security/data/cve/CVE-2026-50684.md) | Routine | Active Directory Federation Services (AD FS) | 4.8 | 0.0040 | | | [CVE-2026-57085](https://patchblox.com/security/data/cve/CVE-2026-57085.md) | Routine | Windows Print Spooler Components | 5.5 | 0.0037 | | | [CVE-2026-58545](https://patchblox.com/security/data/cve/CVE-2026-58545.md) | Routine | Windows Kernel | 5.5 | 0.0035 | | | [CVE-2026-50312](https://patchblox.com/security/data/cve/CVE-2026-50312.md) | Routine | Windows Ancillary Function Driver for WinSock | 4.7 | 0.0035 | | | [CVE-2026-34346](https://patchblox.com/security/data/cve/CVE-2026-34346.md) | Routine | Windows Ancillary Function Driver for WinSock | 5.5 | 0.0027 | | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.