19 reportsPriority Low
Multiple Microsoft Windows vulnerabilities disclosed
Several new vulnerabilities have been disclosed in Microsoft Windows and related software, some of which could allow remote code execution. These issues may affect UK organisations using affected systems.
First report Latest
What is going on
- Multiple vulnerabilities were disclosed in Microsoft Windows and related software on 10 November 2026.
- The vulnerabilities include issues in components such as the Windows DHCP Server, Windows Performance Counters, and Microsoft SQL Server.
- Some of the vulnerabilities could allow unauthorised attackers to execute code over a network, while others may require an authorised attacker to exploit them.
- What to watch: Organisations should monitor for further details on which systems are affected and ensure they apply any available patches promptly.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority LowType VulnerabilityLead report
Windows DHCP Server Remote Code Execution Vulnerability
- Priority LowType Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability
- Priority LowType Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability
- Priority LowType Vulnerability
Windows Performance Monitor Remote Code Execution Vulnerability
- Priority LowType Vulnerability
Windows Domain Name Service Remote Code Execution Vulnerability
- Priority LowType Vulnerability
Windows Imaging Component Remote Code Execution Vulnerability
- Priority LowType Vulnerability
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
- Priority LowType Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability
- Priority LowType Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability
- Priority LowType Vulnerability
Microsoft Color Management Remote Code Execution Vulnerability
- Priority LowType Vulnerability
Windows Rich Text Edit Control Remote Code Execution Vulnerability
- Priority LowType Vulnerability
Windows Domain Name Service Remote Code Execution Vulnerability
- Priority LowType Vulnerability
Microsoft Color Management Remote Code Execution Vulnerability
- Priority LowType Vulnerability
Windows Performance Counters Remote Code Execution Vulnerability
- Priority LowType Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
- Priority LowType Vulnerability
Microsoft DirectMusic Remote Code Execution Vulnerability
- Priority LowType Vulnerability
Microsoft DirectMusic Remote Code Execution Vulnerability
- Priority LowType Vulnerability
Windows Client for NFS Remote Code Execution Vulnerability
- Priority LowType Vulnerability
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

