3 min read
By: RedLegg Blog
*Important note: These are not the only vulnerabilities that were recently released; however, these are the vulnerabilities RedLegg has identified as critical and require immediate attention.
CRITICAL VULNERABILITIES
| Microsoft Graphics Component | CVE-2026-20822 | Critical | Windows Graphics Component Elevation of Privilege Vulnerability |
| Windows Virtualization-Based Security (VBS) Enclave | CVE-2026-20876 | Critical | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability |
| Microsoft Office Word | CVE-2026-20944 | Critical | Microsoft Word Remote Code Execution Vulnerability |
| Microsoft Office | CVE-2026-20953 | Critical | Microsoft Office Remote Code Execution Vulnerability |
| Microsoft Office Excel |
CVE-2026-20955
|
Critical | Microsoft Excel Remote Code Execution Vulnerability |
| Windows Local Security Authority Subsystem Service (LSASS) | CVE-2026-20854 | Critical | Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability |
| Microsoft Office | CVE-2026-20952 | Critical | Microsoft Office Remote Code Execution Vulnerability |
| Microsoft Office Excel | CVE-2026-20957 | Critical | Microsoft Excel Remote Code Execution Vulnerability |
