Weekly briefing Week 2026-W42
Weekly briefing Week 42 · 12 Oct – 18 Oct 2026 UTC · assess the changes, then plan the next dates.
← Week 41 Last 7 days Week 43 →
Briefing All changes Upcoming dates Source inventory Coverage
All dated changes in this period2989 source records · 557 groups
16 Oct 2026
Roadmap Power Platform 17 source records
Roadmap entry · 17 entries
Show the other 14 entries 16 Oct 2026
Roadmap SharePoint / Teams
Roadmap entry · Microsoft 365 Roadmap
16 Oct 2026
Roadmap Viva 3 source records
Roadmap entry · 3 entries
Microsoft Viva: Engage Community feed improvements Date moved earlier
General availability: December CY2026 → October CY2026
16 Oct 2026
Security Microsoft Security Blog
Security news · Microsoft Security Blog
15 Oct 2026
Security Atlassian Jira and Confluence
Atlassian · exploited, added to CISA KEV
CVE-2026-21589
Assessment context CISA lists it as exploited
15 Oct 2026
Known issues Azure
Revised by Microsoft · Azure public incident reviews
Assessment context Changed after ChangeIntel first saw it
15 Oct 2026
Known issues Cloudflare 10 source records
Service incident · 10 entries
Cloudflare: Network Performance Issues in Eastern North America Service incident
North America · Network · lasted 50 min
Assessment context The provider called it an outage
Cloudflare: Network Performance Issues in London Service incident
Europe · Durable Objects, R2, RealtimeKit · lasted 13 min
Assessment context The provider called it an outage
Cloudflare: Cloudflare Workers AI Issues Service incident
Workers AI · lasted 146 min
Show the other 7 entries Cloudflare: DNS Update Delays Service incident
DNS Updates · lasted 166 min
Cloudflare: Increased Errors for Durable Objects Service incident
AI Search, Artifacts, Containers · lasted 143 min
Cloudflare: Increased HTTP 502 Errors Service incident
CDN/Cache, Network · lasted 592 min
15 Oct 2026
Known issues GitLab 2 source records
Service incident · 2 entries
GitLab.com: Error loading GitLab.com and customers.gitlab.com Service incident
Website, API, GitLab Customers Portal · observed for at least 259 min
Assessment context The provider called it an outage
GitLab.com: CI/CD Job Delays on GitLab.com Service incident
CI/CD, CI/CD - Hosted runners on Linux, CI/CD - Hosted runners on Windows · observed for at least 213 min
15 Oct 2026
Known issues Outlook
Status: INVESTIGATING → FIXED · Classic Outlook known issues
Assessment context Changed after ChangeIntel first saw it
15 Oct 2026
Updates and guidance Amazon Web Services: 26 lists changed
IP ranges changed
26 lists changed: 25 cover more addresses, 1 covers the same addresses (prefixes rewritten); 6 were published twice or more that day, each read by its latest change.
Assessment context 26 lists changed: 25 cover more addresses, 1 covers the same addresses (prefixes rewritten); 6 were published twice or more that day, each read by its latest change.
15 Oct 2026
Updates and guidance Azure 48 source records
Azure service tags published · 48 entries
Publication 422: 44 tags changed Azure service tags published
44 tags changed: 22 cover more addresses, 22 no longer cover some addresses. Observed publication 421 → 422.
Assessment context 44 tags changed: 22 cover more addresses, 22 no longer cover some addresses. Observed publication 421 → 422.
AzureCloud Azure service tag changed
Changed tag: 540 IPv4 addresses and 5 IPv6 ranges no longer covered (977 prefixes added, 22 removed). Observed publication 421 → 422.
Assessment context Changed tag: 540 IPv4 addresses and 5 IPv6 ranges no longer covered (977 prefixes added, 22 removed). Observed publication 421 → 422.
AzureCloud.australiaeast Azure service tag changed
Changed tag: 32,768 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
Assessment context Changed tag: 32,768 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
Show the other 45 entries AzureCloud.centralindia Azure service tag changed
Changed tag: 98 IPv4 addresses newly covered (3 prefixes added, 7 removed; 7 of the removed still covered by wider prefixes). Observed publication 421 → 422.
Assessment context Changed tag: 98 IPv4 addresses newly covered (3 prefixes added, 7 removed; 7 of the removed still covered by wider prefixes). Observed publication 421 → 422.
AzureCloud.centraluseuap Azure service tag changed
Changed tag: 12 IPv4 addresses and 3 IPv6 ranges newly covered, 2 IPv6 ranges no longer covered (137 prefixes added, 3 removed; 2 of the removed still covered by wider prefixes). Observed publication 421 → 422.
Assessment context Changed tag: 12 IPv4 addresses and 3 IPv6 ranges newly covered, 2 IPv6 ranges no longer covered (137 prefixes added, 3 removed; 2 of the removed still covered by wider prefixes). Observed publication 421 → 422.
AzureCloud.eastasia Azure service tag changed
Changed tag: 3 IPv6 ranges no longer covered (134 prefixes added, 1 removed). Observed publication 421 → 422.
Assessment context Changed tag: 3 IPv6 ranges no longer covered (134 prefixes added, 1 removed). Observed publication 421 → 422.
AzureCloud.eastus2 Azure service tag changed
Changed tag: 32,784 IPv4 addresses and 1 IPv6 range newly covered (6 prefixes added, 4 removed; 4 of the removed still covered by wider prefixes). Observed publication 421 → 422.
Assessment context Changed tag: 32,784 IPv4 addresses and 1 IPv6 range newly covered (6 prefixes added, 4 removed; 4 of the removed still covered by wider prefixes). Observed publication 421 → 422.
AzureCloud.eastus3 Azure service tag changed
Changed tag: 88 IPv4 addresses and 4 IPv6 ranges newly covered (8 prefixes added, 6 removed; 6 of the removed still covered by wider prefixes). Observed publication 421 → 422.
Assessment context Changed tag: 88 IPv4 addresses and 4 IPv6 ranges newly covered (8 prefixes added, 6 removed; 6 of the removed still covered by wider prefixes). Observed publication 421 → 422.
AzureCloud.indonesiacentral Azure service tag changed
Changed tag: 8 IPv4 addresses no longer covered (12 prefixes added, 1 removed). Observed publication 421 → 422.
Assessment context Changed tag: 8 IPv4 addresses no longer covered (12 prefixes added, 1 removed). Observed publication 421 → 422.
AzureCloud.israelcentral Azure service tag changed
Changed tag: 44 IPv4 addresses and 4 IPv6 ranges newly covered, 8 IPv4 addresses no longer covered (29 prefixes added, 7 removed; 6 of the removed still covered by wider prefixes). Observed publication 421 → 422.
Assessment context Changed tag: 44 IPv4 addresses and 4 IPv6 ranges newly covered, 8 IPv4 addresses no longer covered (29 prefixes added, 7 removed; 6 of the removed still covered by wider prefixes). Observed publication 421 → 422.
AzureCloud.italynorth Azure service tag changed
Changed tag: 32 IPv4 addresses no longer covered (53 prefixes added, 2 removed). Observed publication 421 → 422.
Assessment context Changed tag: 32 IPv4 addresses no longer covered (53 prefixes added, 2 removed). Observed publication 421 → 422.
AzureCloud.japaneast Azure service tag changed
Changed tag: 157 IPv4 addresses no longer covered (112 prefixes added, 6 removed). Observed publication 421 → 422.
Assessment context Changed tag: 157 IPv4 addresses no longer covered (112 prefixes added, 6 removed). Observed publication 421 → 422.
AzureCloud.mexicocentral Azure service tag changed
Changed tag: 8 IPv4 addresses no longer covered (30 prefixes added, 2 removed). Observed publication 421 → 422.
Assessment context Changed tag: 8 IPv4 addresses no longer covered (30 prefixes added, 2 removed). Observed publication 421 → 422.
AzureCloud.northcentralus Azure service tag changed
Changed tag: 32,768 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
Assessment context Changed tag: 32,768 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
AzureCloud.norwaye Azure service tag changed
Changed tag: 12 IPv4 addresses no longer covered (35 prefixes added, 2 removed). Observed publication 421 → 422.
Assessment context Changed tag: 12 IPv4 addresses no longer covered (35 prefixes added, 2 removed). Observed publication 421 → 422.
AzureCloud.norwayw Azure service tag changed
Changed tag: 8 IPv4 addresses no longer covered (25 prefixes added, 1 removed). Observed publication 421 → 422.
Assessment context Changed tag: 8 IPv4 addresses no longer covered (25 prefixes added, 1 removed). Observed publication 421 → 422.
AzureCloud.polandcentral Azure service tag changed
Changed tag: 8 IPv4 addresses no longer covered (27 prefixes added, 1 removed). Observed publication 421 → 422.
Assessment context Changed tag: 8 IPv4 addresses no longer covered (27 prefixes added, 1 removed). Observed publication 421 → 422.
AzureCloud.southafricanorth Azure service tag changed
Changed tag: 23 IPv4 addresses no longer covered (63 prefixes added, 2 removed). Observed publication 421 → 422.
Assessment context Changed tag: 23 IPv4 addresses no longer covered (63 prefixes added, 2 removed). Observed publication 421 → 422.
AzureCloud.southafricawest Azure service tag changed
Changed tag: 6 IPv4 addresses no longer covered (14 prefixes added, 1 removed). Observed publication 421 → 422.
Assessment context Changed tag: 6 IPv4 addresses no longer covered (14 prefixes added, 1 removed). Observed publication 421 → 422.
AzureCloud.southcentralus Azure service tag changed
Changed tag: 32,768 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
Assessment context Changed tag: 32,768 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
AzureCloud.southcentralus2 Azure service tag changed
Changed tag: 256 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
Assessment context Changed tag: 256 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
AzureCloud.southeastus Azure service tag changed
Changed tag: 2 IPv4 addresses and 1 IPv6 range newly covered (2 prefixes added, 4 removed; 4 of the removed still covered by wider prefixes). Observed publication 421 → 422.
Assessment context Changed tag: 2 IPv4 addresses and 1 IPv6 range newly covered (2 prefixes added, 4 removed; 4 of the removed still covered by wider prefixes). Observed publication 421 → 422.
AzureCloud.southindia Azure service tag changed
Changed tag: 6 IPv4 addresses no longer covered (16 prefixes added, 1 removed). Observed publication 421 → 422.
Assessment context Changed tag: 6 IPv4 addresses no longer covered (16 prefixes added, 1 removed). Observed publication 421 → 422.
AzureCloud.southwestus Azure service tag changed
Changed tag: 256 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
Assessment context Changed tag: 256 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
AzureCloud.spaincentral Azure service tag changed
Changed tag: 4 IPv4 addresses and 2 IPv6 ranges newly covered, 8 IPv4 addresses no longer covered (19 prefixes added, 8 removed; 7 of the removed still covered by wider prefixes). Observed publication 421 → 422.
Assessment context Changed tag: 4 IPv4 addresses and 2 IPv6 ranges newly covered, 8 IPv4 addresses no longer covered (19 prefixes added, 8 removed; 7 of the removed still covered by wider prefixes). Observed publication 421 → 422.
AzureCloud.swedencentral Azure service tag changed
Changed tag: 32,768 IPv4 addresses newly covered (1 prefix added, 1 removed; 1 of the removed still covered by wider prefixes). Observed publication 421 → 422.
Assessment context Changed tag: 32,768 IPv4 addresses newly covered (1 prefix added, 1 removed; 1 of the removed still covered by wider prefixes). Observed publication 421 → 422.
AzureCloud.switzerlandn Azure service tag changed
Changed tag: 10 IPv4 addresses no longer covered (34 prefixes added, 2 removed). Observed publication 421 → 422.
Assessment context Changed tag: 10 IPv4 addresses no longer covered (34 prefixes added, 2 removed). Observed publication 421 → 422.
AzureCloud.switzerlandw Azure service tag changed
Changed tag: 6 IPv4 addresses no longer covered (18 prefixes added, 1 removed). Observed publication 421 → 422.
Assessment context Changed tag: 6 IPv4 addresses no longer covered (18 prefixes added, 1 removed). Observed publication 421 → 422.
AzureCloud.taiwannorth Azure service tag changed
Changed tag: 6 IPv4 addresses no longer covered (13 prefixes added, 1 removed). Observed publication 421 → 422.
Assessment context Changed tag: 6 IPv4 addresses no longer covered (13 prefixes added, 1 removed). Observed publication 421 → 422.
AzureCloud.taiwannorthwest Azure service tag changed
Changed tag: 8 IPv4 addresses no longer covered (22 prefixes added, 1 removed). Observed publication 421 → 422.
Assessment context Changed tag: 8 IPv4 addresses no longer covered (22 prefixes added, 1 removed). Observed publication 421 → 422.
AzureCloud.uaecentral Azure service tag changed
Changed tag: 30 IPv4 addresses no longer covered (33 prefixes added, 1 removed). Observed publication 421 → 422.
Assessment context Changed tag: 30 IPv4 addresses no longer covered (33 prefixes added, 1 removed). Observed publication 421 → 422.
AzureCloud.uaenorth Azure service tag changed
Changed tag: 108 IPv4 addresses no longer covered (53 prefixes added, 3 removed). Observed publication 421 → 422.
Assessment context Changed tag: 108 IPv4 addresses no longer covered (53 prefixes added, 3 removed). Observed publication 421 → 422.
AzureCloud.westeurope Azure service tag changed
Changed tag: 32,768 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
Assessment context Changed tag: 32,768 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
AzureCloud.westindia Azure service tag changed
Changed tag: 24 IPv4 addresses no longer covered (24 prefixes added, 1 removed). Observed publication 421 → 422.
Assessment context Changed tag: 24 IPv4 addresses no longer covered (24 prefixes added, 1 removed). Observed publication 421 → 422.
AzureCloud.westus Azure service tag changed
Changed tag: 512 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
Assessment context Changed tag: 512 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
AzureCloud.westus2 Azure service tag changed
Changed tag: 70 IPv4 addresses newly covered (3 prefixes added, 0 removed). Observed publication 421 → 422.
Assessment context Changed tag: 70 IPv4 addresses newly covered (3 prefixes added, 0 removed). Observed publication 421 → 422.
AzureCloud.westus3 Azure service tag changed
Changed tag: 32,768 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
Assessment context Changed tag: 32,768 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
AzureMonitor Azure service tag changed
Changed tag: 256 IPv4 addresses and 1 IPv6 range newly covered (4 prefixes added, 0 removed). Observed publication 421 → 422.
Assessment context Changed tag: 256 IPv4 addresses and 1 IPv6 range newly covered (4 prefixes added, 0 removed). Observed publication 421 → 422.
AzureMonitor.Core Azure service tag changed
Changed tag: 192 IPv4 addresses and 1 IPv6 range newly covered (3 prefixes added, 0 removed). Observed publication 421 → 422.
Assessment context Changed tag: 192 IPv4 addresses and 1 IPv6 range newly covered (3 prefixes added, 0 removed). Observed publication 421 → 422.
AzureMonitor.EastUS2 Azure service tag changed
Changed tag: 128 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
Assessment context Changed tag: 128 IPv4 addresses newly covered (1 prefix added, 0 removed). Observed publication 421 → 422.
AzureResourceManager Azure service tag changed
Changed tag: 6 IPv4 addresses and 3 IPv6 ranges newly covered (6 prefixes added, 0 removed). Observed publication 421 → 422.
Assessment context Changed tag: 6 IPv4 addresses and 3 IPv6 ranges newly covered (6 prefixes added, 0 removed). Observed publication 421 → 422.
AzureResourceManager.CentralUSEUAP Azure service tag changed
Changed tag: 2 IPv4 addresses and 1 IPv6 range newly covered (2 prefixes added, 0 removed). Observed publication 421 → 422.
Assessment context Changed tag: 2 IPv4 addresses and 1 IPv6 range newly covered (2 prefixes added, 0 removed). Observed publication 421 → 422.
AzureResourceManager.EastUS2EUAP Azure service tag changed
Changed tag: 2 IPv4 addresses and 1 IPv6 range newly covered (2 prefixes added, 0 removed). Observed publication 421 → 422.
Assessment context Changed tag: 2 IPv4 addresses and 1 IPv6 range newly covered (2 prefixes added, 0 removed). Observed publication 421 → 422.
AzureResourceManager.SouthCentralUS Azure service tag changed
Changed tag: 2 IPv4 addresses and 1 IPv6 range newly covered (2 prefixes added, 0 removed). Observed publication 421 → 422.
Assessment context Changed tag: 2 IPv4 addresses and 1 IPv6 range newly covered (2 prefixes added, 0 removed). Observed publication 421 → 422.
AzureSentinel Azure service tag changed
Changed tag: 32 IPv4 addresses newly covered (4 prefixes added, 0 removed). Observed publication 421 → 422.
Assessment context Changed tag: 32 IPv4 addresses newly covered (4 prefixes added, 0 removed). Observed publication 421 → 422.
15 Oct 2026
Updates and guidance Okta: 25 lists changed
IP ranges changed
25 lists changed: 25 no longer cover some addresses.
Assessment context 25 lists changed: 25 no longer cover some addresses.
15 Oct 2026
Message Center Purview
Message Center · Plan for change
Microsoft Purview
Assessment context Microsoft marks it a major change
15 Oct 2026
Message Center Teams 8 source records
Message Center · Plan for change · 8 entries
MC1269864: (Updated) Microsoft Teams: New chat sections for muted and meeting chats Message Center · Plan for change
Microsoft Teams
Assessment context Microsoft marks it a major change
Show the other 5 entries MC1479514: (Updated) Microsoft Teams: Improved file sharing experience in external chats Message Center · Plan for change
Microsoft Teams
Assessment context Microsoft marks it a major change
MC1506734: (Updated) Microsoft Teams: Video sharing from OneDrive in Teams events Message Center · Plan for change
Microsoft Teams
Assessment context Microsoft marks it a major change
15 Oct 2026
Roadmap Microsoft 365 Apps 2 source records
Now rolling out · 2 entries
Excel: Excel canvas Now rolling out
Status: InDevelopment → RollingOut
Assessment context The feature started reaching tenants
Excel: Excel canvas Roadmap entry · Microsoft 365 Roadmap
15 Oct 2026
Roadmap Microsoft 365 Copilot 2 source records
Cancelled · 2 entries
Microsoft Copilot (Microsoft 365): Expanded Agent Support in Copilot Notebooks Cancelled
Status: InDevelopment → Cancelled
Assessment context Microsoft cancelled the feature
Microsoft Copilot (Microsoft 365): Export Copilot metrics in the Copilot Dashboard Date moved later
General availability: October CY2026 → November CY2026
Assessment context Target moved from October CY2026 to November CY2026
15 Oct 2026
Roadmap Purview
Now rolling out
Status: InDevelopment → RollingOut
Assessment context The feature started reaching tenants
15 Oct 2026
Roadmap Teams 12 source records
Date moved later · 12 entries
Microsoft Teams: Express face enrollment Date moved later
General availability: November CY2026 → December CY2026
Assessment context Target moved from November CY2026 to December CY2026
Microsoft Teams: Facilitator detects and answers questions Date moved later
General availability: November CY2026 → December CY2026
Assessment context Target moved from November CY2026 to December CY2026
Microsoft Teams: Improved organization for muted and meeting chats Now rolling out
Status: InDevelopment → RollingOut
Assessment context The feature started reaching tenants
Show the other 9 entries Microsoft Teams: IntelliFrame people labels in Teams Rooms on Windows Date moved later
General availability: November CY2026 → January CY2027
Assessment context Target moved from November CY2026 to January CY2027
Microsoft Teams: Pop out calls into a new browser window Now rolling out
Status: InDevelopment → RollingOut
Assessment context The feature started reaching tenants
15 Oct 2026
Roadmap Viva
Date moved later
General availability: October CY2026 → December CY2026
Assessment context Target moved from October CY2026 to December CY2026
15 Oct 2026
Security ASP.NET Core Denial of Service Vulnerability
Published vulnerability
CVE-2026-109468
Assessment context Microsoft states that customer action is required
15 Oct 2026
Security Fortinet 2 source records
Revised by Microsoft · 2 entries
FortiClient: Heap overflow in kernel driver due to missing size validation Revised by Microsoft · Fortinet PSIRT advisories
Assessment context Changed after ChangeIntel first saw it
FortiManager: HTML injection in WebUI Revised by Microsoft · Fortinet PSIRT advisories
Assessment context Changed after ChangeIntel first saw it
15 Oct 2026
Security Microsoft 365 Apps / SharePoint
Published vulnerability
CVE-2026-108452
Assessment context Microsoft states that customer action is required
15 Oct 2026
Security Microsoft 365 Apps 29 source records
Published vulnerability · 29 entries
Microsoft Office Excel Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108446
Assessment context Microsoft states that customer action is required
Microsoft Office Outlook Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108448
Assessment context Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Office PowerPoint Information Disclosure Vulnerability Published vulnerability
CVE-2026-108453
Assessment context Microsoft states that customer action is required
Show the other 26 entries Microsoft Office PowerPoint Information Disclosure Vulnerability Published vulnerability
CVE-2026-108454
Assessment context Microsoft states that customer action is required
Microsoft Office PowerPoint Information Disclosure Vulnerability Published vulnerability
CVE-2026-108455
Assessment context Microsoft states that customer action is required
Microsoft Office Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108444
Assessment context Microsoft states that customer action is required
Microsoft Office Word Information Disclosure Vulnerability Published vulnerability
CVE-2026-108434
Assessment context Microsoft states that customer action is required
Microsoft Office Word Information Disclosure Vulnerability Published vulnerability
CVE-2026-108435
Assessment context Microsoft states that customer action is required
Microsoft Office Word Information Disclosure Vulnerability Published vulnerability
CVE-2026-108436
Assessment context Microsoft states that customer action is required
Microsoft Office Word Information Disclosure Vulnerability Published vulnerability
CVE-2026-108438
Assessment context Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108426
Assessment context Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108427
Assessment context Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108428
Assessment context Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108429
Assessment context Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108430
Assessment context Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108431
Assessment context Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108432
Assessment context Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108437
Assessment context Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108439
Assessment context Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108440
Assessment context Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108441
Assessment context Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108442
Assessment context Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108443
Assessment context Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108445
Assessment context Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108447
Assessment context Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108449
Assessment context Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108450
Assessment context Microsoft states that customer action is required
Microsoft Office Word Remote Code Execution Vulnerability Published vulnerability
CVE-2026-108451
Assessment context Microsoft states that customer action is required
Microsoft Office Word Security Feature Bypass Vulnerability Published vulnerability
CVE-2026-108433
Assessment context Microsoft states that customer action is required
15 Oct 2026
Security Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability
Published vulnerability
CVE-2026-109461
Assessment context Microsoft states that customer action is required
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.