Critical RCEs

CVETitleExploitation statusPublicly disclosed? CVSS v3 base scoreCVE-2026-56159DHCP Server Service Remote Code Execution VulnerabilityExploitation UnlikelyNo9. 8CVE-2026-48561Microsoft Copilot Remote Code Execution VulnerabilityExploitation Less LikelyNo9. 6CVE-2026-55944Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution VulnerabilityExploitation More LikelyNo9. 8CVE-2026-55008Microsoft Exchange Server Spoofing VulnerabilityExploitation More LikelyNo9.

6CVE-2026-50522Microsoft SharePoint Remote Code Execution VulnerabilityExploitation More LikelyNo9. 8CVE-2026-58644Microsoft SharePoint Remote Code Execution VulnerabilityExploitation More LikelyNo9. 8CVE-2026-55040Microsoft SharePoint Server Security Feature Bypass VulnerabilityExploitation More LikelyNo9. 1CVE-2026-57092Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityExploitation Less LikelyNo9. 9CVE-2026-55010Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityExploitation More LikelyNo9.

8CVE-2026-54990Remote Desktop Client Remote Code Execution VulnerabilityExploitation Less LikelyNo9. 8CVE-2026-56190Remote Desktop Protocol Remote Code Execution VulnerabilityExploitation Less LikelyNo9. 8CVE-2026-42990SQL Server ODBC driver Elevation of Privilege VulnerabilityExploitation UnlikelyNo9. 8CVE-2026-50518Windows DHCP Server Remote Code Execution VulnerabilityExploitation More LikelyNo9. 8CVE-2026-49172Windows FTP Service Remote Code Execution VulnerabilityExploitation Less LikelyNo9.

8CVE-2026-50380Windows GDI+ Remote Code Execution VulnerabilityExploitation Less LikelyNo9. 6CVE-2026-49798Windows Kernel Elevation of Privilege VulnerabilityExploitation More LikelyNo9. 3CVE-2026-50447Windows Message Queuing Service (MSMQ) Remote Code Execution VulnerabilityExploitation Less LikelyNo9. 8CVE-2026-56188Windows Server Network driver Remote Code Execution VulnerabilityExploitation More LikelyNo9.