UEFI Secure Boot Security Feature Bypass Vulnerability

Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally...

Windows Hyper-V Security Feature Bypass Vulnerability

Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network...

Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability

Time-of-check time-of-use toctou race condition in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

Windows Remote Desktop Security Feature Bypass Vulnerability

Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network...

Windows Update Orchestrator Service Security Feature Bypass Vulnerability

Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...

Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability

Use after free in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to elevate privileges locally...

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Out-of-bounds read in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to deny service over a network...

Windows BitLocker Security Feature Bypass Vulnerability

Url redirection to untrusted site 'open redirect' in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability

Incorrect authorization in Windows Routing and Remote Access Service RRAS allows an authorized attacker to bypass a security feature locally...

Windows AppX Deployment Service Security Feature Bypass Vulnerability

Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally...

Visual Studio Code Security Feature Bypass Vulnerability

Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to perform spoofing locally...

Visual Studio Code Security Feature Bypass Vulnerability

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

Windows Security App Elevation of Privilege Vulnerability

Use after free in Windows Security App allows an authorized attacker to elevate privileges locally...

July 14, 2026—KB5099445 (Monthly Rollup)

None None...

July 14, 2026—KB5099539 (OS Builds 19045.7548 and 19044.7548)

None None...

July 14, 2026—KB5101650 (OS Builds 26200.8875 and 26100.8875)

None None...

July 14, 2026—KB5099540 (OS Build 20348.5386)

None None...

Windows SmartScreen Security Feature Bypass Vulnerability

Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...