{
    "document": {
        "category": "csaf_base",
        "csaf_version": "2.0",
        "distribution": {
            "tlp": {
                "label": "WHITE"
            }
        },
        "lang": "en",
        "notes": [
            {
                "category": "legal_disclaimer",
                "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
            }
        ],
        "publisher": {
            "category": "coordinator",
            "contact_details": "cert@ncsc.nl",
            "name": "National Cyber Security Centre",
            "namespace": "https://www.ncsc.nl/"
        },
        "title": "CVE-2026-35420",
        "tracking": {
            "current_release_date": "2026-05-13T15:27:54.429781Z",
            "generator": {
                "date": "2026-02-17T15:00:00Z",
                "engine": {
                    "name": "V.E.L.M.A",
                    "version": "1.7"
                }
            },
            "id": "CVE-2026-35420",
            "initial_release_date": "2026-05-12T07:27:50.267750Z",
            "revision_history": [
                {
                    "date": "2026-05-12T07:27:50.267750Z",
                    "number": "1",
                    "summary": "NCSC Score created."
                },
                {
                    "date": "2026-05-12T17:43:37.900885Z",
                    "number": "2",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (12).| References created (1).| CWES updated (1)."
                },
                {
                    "date": "2026-05-12T17:43:46.794387Z",
                    "number": "3",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-05-12T18:29:49.051576Z",
                    "number": "4",
                    "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (13).| Product Threats created (26).| Product Remediations created (17).| CWES updated (1).| Exploitable created."
                },
                {
                    "date": "2026-05-12T18:29:54.174405Z",
                    "number": "5",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-05-12T18:32:18.397767Z",
                    "number": "6",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (1).| CWES updated (1)."
                },
                {
                    "date": "2026-05-12T18:32:23.919705Z",
                    "number": "7",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-05-13T01:03:48.282960Z",
                    "number": "8",
                    "summary": "Source connected.| CVE status created. (valid)| News created (1)."
                },
                {
                    "date": "2026-05-13T01:03:50.374472Z",
                    "number": "9",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-05-13T05:40:22.583301Z",
                    "number": "10",
                    "summary": "Unknown change."
                },
                {
                    "date": "2026-05-13T06:50:32.824800Z",
                    "number": "11",
                    "summary": "Source connected.| CVE status created. (valid)"
                },
                {
                    "date": "2026-05-13T09:29:32.380760Z",
                    "number": "12",
                    "summary": "Source connected.| CVE status created. (valid)| Products connected (16).| References created (3)."
                },
                {
                    "date": "2026-05-13T09:29:38.377214Z",
                    "number": "13",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-05-13T15:27:36.885352Z",
                    "number": "14",
                    "summary": "Source connected.| CVE status created. (valid)| EPSS created."
                },
                {
                    "date": "2026-05-13T15:27:43.913651Z",
                    "number": "15",
                    "summary": "NCSC Score updated."
                }
            ],
            "status": "interim",
            "version": "15"
        }
    },
    "product_tree": {
        "branches": [
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/unknown",
                                "product": {
                                    "name": "vers:unknown/unknown",
                                    "product_id": "CSAFPID-6042627",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:windows_admin_center:in_azure_portal"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Microsoft Windows Admin Center"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/unknown",
                                "product": {
                                    "name": "vers:unknown/unknown",
                                    "product_id": "CSAFPID-1429705",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:microsoft:windows_server_2012:-"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Microsoft Windows Server 2012"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/unknown",
                                "product": {
                                    "name": "vers:unknown/unknown",
                                    "product_id": "CSAFPID-1429704",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:microsoft:windows_server_2012_r2:-"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Microsoft Windows Server 2012 R2"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/unknown",
                                "product": {
                                    "name": "vers:unknown/unknown",
                                    "product_id": "CSAFPID-1429709",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:microsoft:windows_server_2016:-"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Microsoft Windows Server 2016"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/unknown",
                                "product": {
                                    "name": "vers:unknown/unknown",
                                    "product_id": "CSAFPID-1429706",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:microsoft:windows_server_2019:-"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Microsoft Windows Server 2019"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/unknown",
                                "product": {
                                    "name": "vers:unknown/unknown",
                                    "product_id": "CSAFPID-1429707",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:microsoft:windows_server_2022:-"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Microsoft Windows Server 2022"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/unknown",
                                "product": {
                                    "name": "vers:unknown/unknown",
                                    "product_id": "CSAFPID-2908521",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:microsoft:windows_server_2025:-"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Microsoft Windows Server 2025"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/version 1607",
                                "product": {
                                    "name": "vers:unknown/version 1607",
                                    "product_id": "CSAFPID-1189227",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:microsoft:windows_10:version_1607"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/version 1809",
                                "product": {
                                    "name": "vers:unknown/version 1809",
                                    "product_id": "CSAFPID-1189225",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:microsoft:windows_10:version_1809"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/version 21h2",
                                "product": {
                                    "name": "vers:unknown/version 21h2",
                                    "product_id": "CSAFPID-1189232",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:microsoft:windows_10:version_21h2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/version 22h2",
                                "product": {
                                    "name": "vers:unknown/version 22h2",
                                    "product_id": "CSAFPID-1189233",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:microsoft:windows_10:version_22h2"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Windows 10"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/version 23h2",
                                "product": {
                                    "name": "vers:unknown/version 23h2",
                                    "product_id": "CSAFPID-1189228",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:microsoft:windows_11:version_23h2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/version 24h2",
                                "product": {
                                    "name": "vers:unknown/version 24h2",
                                    "product_id": "CSAFPID-1305167",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:microsoft:windows_11:version_24h2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/version 25h2",
                                "product": {
                                    "name": "vers:unknown/version 25h2",
                                    "product_id": "CSAFPID-5046795",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:microsoft:windows_11:version_25h2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/version 26h1",
                                "product": {
                                    "name": "vers:unknown/version 26h1",
                                    "product_id": "CSAFPID-5592468"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Windows 11"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/6.2.9200.26079",
                                        "product": {
                                            "name": "vers:microsoft/6.2.9200.26079",
                                            "product_id": "CSAFPID-6981477",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.26079:*:*:*:*:*:x64:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Windows Server 2012"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/6.2.9200.26079",
                                        "product": {
                                            "name": "vers:microsoft/6.2.9200.26079",
                                            "product_id": "CSAFPID-6981478",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.26079:*:*:*:*:*:x64:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Windows Server 2012 (Server Core installation)"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/6.3.9600.23181",
                                        "product": {
                                            "name": "vers:microsoft/6.3.9600.23181",
                                            "product_id": "CSAFPID-6981479",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.23181:*:*:*:*:*:x64:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Windows Server 2012 R2"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/6.3.9600.23181",
                                        "product": {
                                            "name": "vers:microsoft/6.3.9600.23181",
                                            "product_id": "CSAFPID-6981480",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.23181:*:*:*:*:*:x64:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Windows Server 2012 R2 (Server Core installation)"
                            }
                        ],
                        "category": "product_family",
                        "name": "ESU"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.2.9200.0|<6.2.9200.26079",
                                "product": {
                                    "name": "vers:unknown/6.2.9200.0|<6.2.9200.26079",
                                    "product_id": "CSAFPID-6981241"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Windows Server 2012"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.2.9200.0|<6.2.9200.26079",
                                "product": {
                                    "name": "vers:unknown/6.2.9200.0|<6.2.9200.26079",
                                    "product_id": "CSAFPID-6981242"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Windows Server 2012 (Server Core installation)"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.3.9600.0|<6.3.9600.23181",
                                "product": {
                                    "name": "vers:unknown/6.3.9600.0|<6.3.9600.23181",
                                    "product_id": "CSAFPID-6981196"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Windows Server 2012 R2"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/6.3.9600.0|<6.3.9600.23181",
                                "product": {
                                    "name": "vers:unknown/6.3.9600.0|<6.3.9600.23181",
                                    "product_id": "CSAFPID-6981197"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Windows Server 2012 R2 (Server Core installation)"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/10.0.14393.9140",
                                        "product": {
                                            "name": "vers:microsoft/10.0.14393.9140",
                                            "product_id": "CSAFPID-6981475",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.9140:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Windows Server 2016"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/10.0.14393.9140",
                                        "product": {
                                            "name": "vers:microsoft/10.0.14393.9140",
                                            "product_id": "CSAFPID-6981476",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.9140:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Windows Server 2016 (Server Core installation)"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/10.0.17763.8755",
                                        "product": {
                                            "name": "vers:microsoft/10.0.17763.8755",
                                            "product_id": "CSAFPID-6981449",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.8755:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Windows Server 2019"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/10.0.17763.8755",
                                        "product": {
                                            "name": "vers:microsoft/10.0.17763.8755",
                                            "product_id": "CSAFPID-6981452",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.8755:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Windows Server 2019 (Server Core installation)"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/10.0.20348.5139",
                                        "product": {
                                            "name": "vers:microsoft/10.0.20348.5139",
                                            "product_id": "CSAFPID-6981454",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.5139:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Windows Server 2022"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/10.0.20348.5139",
                                        "product": {
                                            "name": "vers:microsoft/10.0.20348.5139",
                                            "product_id": "CSAFPID-6981455",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.5139:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Windows Server 2022 (Server Core installation)"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/10.0.25398.2330",
                                        "product": {
                                            "name": "vers:microsoft/10.0.25398.2330",
                                            "product_id": "CSAFPID-6981467",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:o:microsoft:windows_server_23h2:10.0.25398.2330:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Windows Server 2022, 23H2 Edition (Server Core installation)"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/10.0.26100.32860",
                                        "product": {
                                            "name": "vers:microsoft/10.0.26100.32860",
                                            "product_id": "CSAFPID-6981470",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:o:microsoft:windows_server_2025:10.0.26100.32860:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Windows Server 2025"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/10.0.26100.32860",
                                        "product": {
                                            "name": "vers:microsoft/10.0.26100.32860",
                                            "product_id": "CSAFPID-6981462",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:o:microsoft:windows_server_2025:10.0.26100.32860:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Windows Server 2025 (Server Core installation)"
                            }
                        ],
                        "category": "product_family",
                        "name": "Windows"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.14393.0|<10.0.14393.9140",
                                "product": {
                                    "name": "vers:unknown/10.0.14393.0|<10.0.14393.9140",
                                    "product_id": "CSAFPID-6981198"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Windows Server 2016"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.14393.0|<10.0.14393.9140",
                                "product": {
                                    "name": "vers:unknown/10.0.14393.0|<10.0.14393.9140",
                                    "product_id": "CSAFPID-6981199"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Windows Server 2016 (Server Core installation)"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.17763.0|<10.0.17763.8755",
                                "product": {
                                    "name": "vers:unknown/10.0.17763.0|<10.0.17763.8755",
                                    "product_id": "CSAFPID-6981200"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Windows Server 2019"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.17763.0|<10.0.17763.8755",
                                "product": {
                                    "name": "vers:unknown/10.0.17763.0|<10.0.17763.8755",
                                    "product_id": "CSAFPID-6981201"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Windows Server 2019 (Server Core installation)"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.20348.0|<10.0.20348.5139",
                                "product": {
                                    "name": "vers:unknown/10.0.20348.0|<10.0.20348.5139",
                                    "product_id": "CSAFPID-6981202"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/23h2 edition",
                                "product": {
                                    "name": "vers:unknown/23h2 edition",
                                    "product_id": "CSAFPID-1189229",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/o:microsoft:windows_server_2022:23h2_edition"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Windows Server 2022"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.25398.0|<10.0.25398.2330",
                                "product": {
                                    "name": "vers:unknown/10.0.25398.0|<10.0.25398.2330",
                                    "product_id": "CSAFPID-6981203"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Windows Server 2022, 23H2 Edition (Server Core installation)"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.26100.0|<10.0.26100.32860",
                                "product": {
                                    "name": "vers:unknown/10.0.26100.0|<10.0.26100.32860",
                                    "product_id": "CSAFPID-6981204"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Windows Server 2025"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.26100.0|<10.0.26100.32860",
                                "product": {
                                    "name": "vers:unknown/10.0.26100.0|<10.0.26100.32860",
                                    "product_id": "CSAFPID-6981205"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Windows Server 2025 (Server Core installation)"
                    }
                ],
                "category": "vendor",
                "name": "Microsoft"
            }
        ]
    },
    "vulnerabilities": [
        {
            "cve": "CVE-2026-35420",
            "cwe": {
                "id": "CWE-122",
                "name": "Heap-based Buffer Overflow"
            },
            "notes": [
                {
                    "category": "description",
                    "text": "Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.",
                    "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35420.json"
                },
                {
                    "category": "description",
                    "text": "<p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p>\n",
                    "title": "microsoft - https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-May"
                },
                {
                    "category": "description",
                    "text": "Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.",
                    "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-35420"
                },
                {
                    "category": "other",
                    "text": "0.00044",
                    "title": "EPSS"
                },
                {
                    "category": "other",
                    "text": "6.6",
                    "title": "NCSC Score"
                },
                {
                    "category": "other",
                    "text": "There is product data available from source Certbundde, Is related to (a version of) product Windows, VENDOR FIX as product remediation category, Is related to (a version of) product Windows Server, There is news data available from source Bleepingcomputer",
                    "title": "NCSC Score top increasing factors"
                },
                {
                    "category": "other",
                    "text": "There is cwe data available from source Nvd",
                    "title": "NCSC Score top decreasing factors"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-6981196",
                    "CSAFPID-6981197",
                    "CSAFPID-6981198",
                    "CSAFPID-6981199",
                    "CSAFPID-6981200",
                    "CSAFPID-6981201",
                    "CSAFPID-6981202",
                    "CSAFPID-6981203",
                    "CSAFPID-6981204",
                    "CSAFPID-6981205",
                    "CSAFPID-6981241",
                    "CSAFPID-6981242",
                    "CSAFPID-6981449",
                    "CSAFPID-6981452",
                    "CSAFPID-6981454",
                    "CSAFPID-6981455",
                    "CSAFPID-6981462",
                    "CSAFPID-6981467",
                    "CSAFPID-6981470",
                    "CSAFPID-6981475",
                    "CSAFPID-6981476",
                    "CSAFPID-6981477",
                    "CSAFPID-6981478",
                    "CSAFPID-6981479",
                    "CSAFPID-6981480",
                    "CSAFPID-1189225",
                    "CSAFPID-1189227",
                    "CSAFPID-1189228",
                    "CSAFPID-1189229",
                    "CSAFPID-1189232",
                    "CSAFPID-1189233",
                    "CSAFPID-1305167",
                    "CSAFPID-1429704",
                    "CSAFPID-1429705",
                    "CSAFPID-1429706",
                    "CSAFPID-1429707",
                    "CSAFPID-1429709",
                    "CSAFPID-2908521",
                    "CSAFPID-5046795",
                    "CSAFPID-5592468",
                    "CSAFPID-6042627"
                ]
            },
            "references": [
                {
                    "category": "external",
                    "summary": "Source - nvd",
                    "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-35420"
                },
                {
                    "category": "external",
                    "summary": "Source - cveprojectv5",
                    "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/35xxx/CVE-2026-35420.json"
                },
                {
                    "category": "external",
                    "summary": "Source - microsoft",
                    "url": "https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-May"
                },
                {
                    "category": "external",
                    "summary": "Source - bleepingcomputer",
                    "url": "https://www.bleepingcomputer.com/news/microsoft/microsoft-may-2026-patch-tuesday-fixes-120-flaws-no-zero-days/"
                },
                {
                    "category": "external",
                    "summary": "Source - ncscclear",
                    "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0141"
                },
                {
                    "category": "external",
                    "summary": "Source - certbundde",
                    "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1489.json"
                },
                {
                    "category": "external",
                    "summary": "Source - first",
                    "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0"
                },
                {
                    "category": "external",
                    "summary": "News - bleepingcomputer",
                    "url": "https://www.bleepingcomputer.com/news/microsoft/microsoft-may-2026-patch-tuesday-fixes-120-flaws-no-zero-days/"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35420"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1489.json"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1489"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/"
                }
            ],
            "remediations": [
                {
                    "category": "vendor_fix",
                    "details": "5087538",
                    "product_ids": [
                        "CSAFPID-6981449",
                        "CSAFPID-6981452"
                    ],
                    "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5087538"
                },
                {
                    "category": "vendor_fix",
                    "details": "5087424",
                    "product_ids": [
                        "CSAFPID-6981454",
                        "CSAFPID-6981455"
                    ],
                    "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5087424"
                },
                {
                    "category": "vendor_fix",
                    "details": "5087545",
                    "product_ids": [
                        "CSAFPID-6981454",
                        "CSAFPID-6981455"
                    ],
                    "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5087545"
                },
                {
                    "category": "vendor_fix",
                    "details": "5087423",
                    "product_ids": [
                        "CSAFPID-6981462",
                        "CSAFPID-6981470"
                    ],
                    "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5087423"
                },
                {
                    "category": "vendor_fix",
                    "details": "5087539",
                    "product_ids": [
                        "CSAFPID-6981462",
                        "CSAFPID-6981470"
                    ],
                    "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5087539"
                },
                {
                    "category": "vendor_fix",
                    "details": "5087541",
                    "product_ids": [
                        "CSAFPID-6981467"
                    ],
                    "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5087541"
                },
                {
                    "category": "vendor_fix",
                    "details": "5087537",
                    "product_ids": [
                        "CSAFPID-6981475",
                        "CSAFPID-6981476"
                    ],
                    "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5087537"
                },
                {
                    "category": "vendor_fix",
                    "details": "5087470",
                    "product_ids": [
                        "CSAFPID-6981477",
                        "CSAFPID-6981478"
                    ],
                    "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5087470"
                },
                {
                    "category": "vendor_fix",
                    "details": "5087471",
                    "product_ids": [
                        "CSAFPID-6981479",
                        "CSAFPID-6981480"
                    ],
                    "url": "https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5087471"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
                        "baseScore": 7.8,
                        "baseSeverity": "HIGH"
                    },
                    "products": [
                        "CSAFPID-1189225",
                        "CSAFPID-1189227",
                        "CSAFPID-1189228",
                        "CSAFPID-1189229",
                        "CSAFPID-1189232",
                        "CSAFPID-1189233",
                        "CSAFPID-1305167",
                        "CSAFPID-1429704",
                        "CSAFPID-1429705",
                        "CSAFPID-1429706",
                        "CSAFPID-1429707",
                        "CSAFPID-1429709",
                        "CSAFPID-2908521",
                        "CSAFPID-5046795",
                        "CSAFPID-5592468",
                        "CSAFPID-6042627",
                        "CSAFPID-6981196",
                        "CSAFPID-6981197",
                        "CSAFPID-6981198",
                        "CSAFPID-6981199",
                        "CSAFPID-6981200",
                        "CSAFPID-6981201",
                        "CSAFPID-6981202",
                        "CSAFPID-6981203",
                        "CSAFPID-6981204",
                        "CSAFPID-6981205",
                        "CSAFPID-6981241",
                        "CSAFPID-6981242",
                        "CSAFPID-6981449",
                        "CSAFPID-6981452",
                        "CSAFPID-6981454",
                        "CSAFPID-6981455",
                        "CSAFPID-6981462",
                        "CSAFPID-6981467",
                        "CSAFPID-6981470",
                        "CSAFPID-6981475",
                        "CSAFPID-6981476",
                        "CSAFPID-6981477",
                        "CSAFPID-6981478",
                        "CSAFPID-6981479",
                        "CSAFPID-6981480"
                    ]
                }
            ],
            "threats": [
                {
                    "category": "exploit_status",
                    "details": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely",
                    "product_ids": [
                        "CSAFPID-6981449",
                        "CSAFPID-6981452",
                        "CSAFPID-6981454",
                        "CSAFPID-6981455",
                        "CSAFPID-6981462",
                        "CSAFPID-6981467",
                        "CSAFPID-6981470",
                        "CSAFPID-6981475",
                        "CSAFPID-6981476",
                        "CSAFPID-6981477",
                        "CSAFPID-6981478",
                        "CSAFPID-6981479",
                        "CSAFPID-6981480"
                    ]
                },
                {
                    "category": "impact",
                    "details": "Elevation of Privilege",
                    "product_ids": [
                        "CSAFPID-6981449",
                        "CSAFPID-6981452",
                        "CSAFPID-6981454",
                        "CSAFPID-6981455",
                        "CSAFPID-6981462",
                        "CSAFPID-6981467",
                        "CSAFPID-6981470",
                        "CSAFPID-6981475",
                        "CSAFPID-6981476",
                        "CSAFPID-6981477",
                        "CSAFPID-6981478",
                        "CSAFPID-6981479",
                        "CSAFPID-6981480"
                    ]
                },
                {
                    "category": "exploit_status",
                    "details": "exploited"
                }
            ],
            "title": "CVE-2026-35420"
        }
    ]
}