Read the docs
Microsoft update

KB5075971

Monthly Rollup

View on Microsoft →

Fixed in

Fixes 13 records

Priority CRITICAL 97KEV

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.15852 Published 2026-02-10 Fixed in 10.0.14393.8868, 10.0.17763.8389 +11 CWE-693
Priority CRITICAL 97KEV

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.61238 Published 2026-02-10 Fixed in 10.0.14393.8868, 10.0.17763.8389 +11 CWE-693
Priority CRITICAL 93KEV

Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04335 Published 2026-02-10 Fixed in 10.0.14393.8868, 10.0.17763.8389 +11 CWE-269
TI-2026-16875 CVE-2026-20846 · GHSA-23hw-462m-2wh4

GDI+ Denial of Service Vulnerability

Priority MEDIUM 42

Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01409 Published 2026-02-10 Fixed in 16.0.19822.20000, 10.0.14393.8868 +12 CWE-126
Priority MEDIUM 41

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02518 Published 2026-02-10 Fixed in 10.0.14393.8868, 10.0.17763.8389 +11 CWE-362
Priority LOW 36

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00439 Published 2026-02-10 Fixed in 10.0.14393.8868, 10.0.17763.8389 +10 CWE-122
Priority LOW 36

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00439 Published 2026-02-10 Fixed in 10.0.14393.8868, 10.0.17763.8389 +10 CWE-122
Priority LOW 35

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00729 Published 2026-02-10 Fixed in 10.0.14393.8868, 10.0.17763.8389 +7 CWE-416
Priority LOW 34

Use after free in Mailslot File System allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0079 Published 2026-02-10 Fixed in 10.0.14393.8868, 10.0.17763.8389 +11 CWE-416
Priority LOW 33

Improper authentication in Windows Storage allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00444 Published 2026-02-10 Fixed in 10.0.14393.8868, 10.0.17763.8389 +11 CWE-287