Microsoft has released monthly security update for their products:
| Vulnerable Product | Risk Level | Impacts | Notes |
| Apps |  Medium Risk | Elevation of Privilege
Spoofing
Security Restriction Bypass
Remote Code Execution
Information Disclosure | |
| Azure | Medium Risk | Information Disclosure
Remote Code Execution
Spoofing
Elevation of Privilege | |
| Browser | Medium Risk | Information Disclosure | |
| Developer Tools | Medium Risk | Elevation of Privilege
Data Manipulation
Security Restriction Bypass
Denial of Service
Information Disclosure | |
| Extended Security Updates (ESU) | Medium Risk | Elevation of Privilege
Spoofing
Information Disclosure
Remote Code Execution
Denial of Service
Security Restriction Bypass
Data Manipulation | |
| Microsoft Dynamics | Medium Risk | Elevation of Privilege | |
| Microsoft Office | Medium Risk | Spoofing
Remote Code Execution
Information Disclosure
Security Restriction Bypass
Elevation of Privilege | |
| Server Software | Medium Risk | Spoofing
Information Disclosure
Elevation of Privilege
Remote Code Execution | Proof of Concept exploit code is publicly available for CVE-2026-45585. This vulnerability allows local attacker to bypass Microsoft BitLocker encryption to access data. This vulnerability is also known as "YellowKey". |
| Windows | Medium Risk | Elevation of Privilege
Information Disclosure
Denial of Service
Remote Code Execution
Spoofing
Security Restriction Bypass
Data Manipulation | Proof of Concept exploit code is publicly available for CVE-2026-45585. This vulnerability allows local attacker to bypass Microsoft BitLocker encryption to access data. This vulnerability is also known as "YellowKey". |
Number of 'Extremely High Risk' product(s): 0
Number of 'High Risk' product(s): 0
Number of 'Medium Risk' product(s): 9
Number of 'Low Risk' product(s): 0
Evaluation of overall 'Risk Level': Medium Risk
