Microsoft Windows SDK

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-2121926100 – < 10.0.26100.7463Inbox COM Objects (Global Memory) Remote Code Execution VulnerabilityHIGH 7.00.4 %
CVE-2025-4796226100 – < 10.0.26100.4188Windows SDK Elevation of Privilege VulnerabilityHIGH 7.81.6 %