Skip to content
patchdrift.
snapshot 2026-09-07

Vendors

Microsoft

Every row, flat →Check your tickets

356records157productslast change2026-09-04RSSas of the 2026-09-07 snapshot

Rows per week, last 26 weeks

338 rows in the last 26 weeks, 11 in the week to 2026-09-0711 this week

When Microsoft edits: same day → over a year

microsoft: 218 counted rows by the interval to the first recorded revision: 6 same day, 9 1 to 7 days, 102 8 to 30 days, 72 31 to 90 days, 23 91 to 365 days, 6 over a year218 counted rows as publisher

Rows, not records: one record that changed for four products is four rows and one record. 132 of the 356 records raised a stated fix version; that is the count the publisher scorecard rates.

Choose a product · 157 products

157 of 157 products

Open the full product index. Counts beside products are records and are not added across products.

Every change, newest first

lines 1 to 20 of 212 · standing on 47 of 690 rows
Every counted change to a CVE or CISA KEV record naming Microsoft, newest first. A line standing for the same change across several records or products says how many and opens to every one.
Changed on, The day the commit that carried this change was read. Where the same change spans several days, the first and the last, never a midpoint. Not dated means no commit could be located for the row.ChangeCVEProductWhat the record says now
2025-03-18 to2026-09-04Ransomware use confirmedWindowsstated at publication Unknown, now states Known
2026-09-04Ransomware use confirmedCVE-2022-37969Windowsstated at publication Unknown, now states Known
2026-08-21Ransomware use confirmedCVE-2021-43226Windowsstated at publication Unknown, now states Known
12 more rows in this change are not listed here. Open all 14 rows →
2026-09-03Product addedCVE-2026-58641Skiasharpnot named as affected at publication, now names skiasharp
2026-09-02Fix version movedCVE-2026-65675Microsoft Visual Studio Code Copilot Chat Extensionstated at publication 1.132.1, now states 1.135
2026-09-02Fix version movedVisual Studio Codestated at publication 1.132.1, now states 1.135
2026-09-02Fix version movedCVE-2026-70335Visual Studio Codestated at publication 1.132.1, now states 1.135
2026-09-02Fix version movedCVE-2026-70336Visual Studio Codestated at publication 1.132.1, now states 1.135
6 more rows in this change are not listed here. Open all 8 rows →
2026-08-16 to2026-08-28Product addedMicrosoft Hpc Pack 2019not named as affected at publication, now names microsoft hpc pack 2019
2026-08-28Product addedCVE-2026-59133Microsoft Hpc Pack 2019not named as affected at publication, now names microsoft hpc pack 2019
2026-08-16Product addedCVE-2026-59124Microsoft Hpc Pack 2019not named as affected at publication, now names microsoft hpc pack 2019
2026-08-26Added to CISA KEVCVE-2019-1068SQL Serverlisted by CISA 2026-08-26federal fix due 2026-08-29
2026-08-21Added to CISA KEVCVE-2026-69836Entra IDlisted by CISA 2026-08-21federal fix due 2026-08-24
2026-08-21Ransomware use confirmedCVE-2012-0158MSCOMCTL.OCXstated at publication Unknown, now states Known
2026-08-18Added to CISA KEVCVE-2026-33824Internet Key Exchange (IKE) Service Extensionslisted by CISA 2026-08-18federal fix due 2026-08-21
2026-08-18Added to CISA KEVCVE-2026-55040SharePointlisted by CISA 2026-08-18federal fix due 2026-08-21
2026-08-14Ransomware use confirmedInternet Explorerstated at publication Unknown, now states Known
2026-08-14Ransomware use confirmedCVE-2016-0189Internet Explorerstated at publication Unknown, now states Known
2026-08-14Ransomware use confirmedCVE-2020-0968Internet Explorerstated at publication Unknown, now states Known
2026-08-14Ransomware use confirmedCVE-2018-0802Officestated at publication Unknown, now states Known
2026-08-14Ransomware use confirmedWin32kstated at publication Unknown, now states Known
2026-08-14Ransomware use confirmedCVE-2019-0803Win32kstated at publication Unknown, now states Known
2026-08-14Ransomware use confirmedCVE-2022-21882Win32kstated at publication Unknown, now states Known
2026-08-14Ransomware use confirmedCVE-2020-0618SQL Serverstated at publication Unknown, now states Known
2026-08-14Fix version movedCVE-2026-322023 productsstated at publication 10.0.14393.9060, now states 10.0.14393.9339
2026-08-14Fix version movedCVE-2026-32202Windows 10 Version 1607stated at publication 10.0.14393.9060, now states 10.0.14393.9339
2026-08-14Fix version movedCVE-2026-32202Windows Server 2016stated at publication 10.0.14393.9060, now states 10.0.14393.9339
1 more row in this change is not listed here. Open all 3 rows →
2026-08-14Fix version movedCVE-2026-322023 productsstated at publication 10.0.17763.8644, now states 10.0.17763.9020
2026-08-14Fix version movedCVE-2026-32202Windows 10 Version 1809stated at publication 10.0.17763.8644, now states 10.0.17763.9020
2026-08-14Fix version movedCVE-2026-32202Windows Server 2019stated at publication 10.0.17763.8644, now states 10.0.17763.9020
1 more row in this change is not listed here. Open all 3 rows →
2026-08-14Fix version movedCVE-2026-32202Windows 10 Version 21h2stated at publication 10.0.19044.7184, now states 10.0.19044.7548
2026-08-14Fix version movedCVE-2026-32202Windows 10 Version 22h2stated at publication 10.0.19045.7184, now states 10.0.19045.7548
2026-08-14Fix version movedCVE-2026-32202Windows 11 Version 23h2stated at publication 10.0.22631.6936, now states 10.0.22631.7376
2026-08-14Fix version movedCVE-2026-32202Windows 11 Version 25h2stated at publication 10.0.26200.8246, now states 10.0.26200.8875

A line that names a count is the same change on that many records or products, shown once; it opens to every member. A closed line is not reached by find-in-page; the flat view (Every row, flat →) is. Only counted changes are here: a change a kind's false-positive filter refused, such as a product line being renumbered, is in no figure on this page.

Data sources and quality

One vendor, every counted kind of change: the rows where a CVE record or a CISA KEV entry naming Microsoft changed after publication. The vendor name is the record's own text, compared without regard to case, so one organisation can appear under more than one spelling and this page holds the spellings that share its web address. Rows and records are different numbers and are never added together.

Not counted: a product line being renumbered, a boundary already named in the record's own description, and the other refusal classes are filtered as false positives and are in no figure here, so this page is what survived those filters rather than everything the catalog changed for this vendor.

Not checked: a record published before 2023 cannot have its state at publication recovered and was never compared, and a CISA KEV listing added before the first mirrored commit was never seen changing, so an absence from this page is not evidence that a record held.

How every one of these figures is measured, in full →

Shipped snapshot computed 2026-09-07 from catalog commit 67b73cc1e9c6. Real findings, not live ones: records amended since are not reflected. A later fix version is evidence that the record changed, not evidence that the first fix was incomplete.