ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

12 matches in Apps · most urgent first CSVText
CVE Vulnerability Severity CVSSEPSSImpact StatusFixed by
CVE-2026-80097 Microsoft Authenticator Elevation of Privilege VulnerabilityMicrosoft Authenticator Important 8.60.5%EoPLocal Revised 15 Sep
—
CVE-2026-70213 Microsoft Power Apps Remote Code Execution VulnerabilityMicrosoft Power Apps Important 8.00.4%RCENetwork Revised 16 Oct
—
CVE-2026-58611 Xbox Gaming Services Elevation of Privilege VulnerabilityXBox Gaming Services Important 7.80.3%EoPLocal
—
CVE-2026-96188 Microsoft PowerToys Elevation of Privilege VulnerabilityMicrosoft PowerToys Important 7.30.4%EoPLocal
—
CVE-2026-118288 Microsoft Azure File Sync Elevation of Privilege VulnerabilityAzure File Sync Important 7.0—EoPLocal
—
CVE-2026-83844 Windows Paint Remote Code Execution VulnerabilityWindows Paint Important 7.00.4%RCELocal Revised 7 Nov
—
CVE-2026-83681 Microsoft PowerToys Tampering VulnerabilityMicrosoft PowerToys Important 5.50.4%TamperingLocal Revised 10 Nov
—
CVE-2026-105494 Azure NFS mount helper (aznfs) Elevation of Privilege VulnerabilityAzure NFS mount helper (aznfs) Important ——EoP
—
CVE-2026-85885 Microsoft 365 Copilot Elevation of Privilege VulnerabilityM365 Copilot Critical 9.90.7%EoPNetwork
Service-side fix
CVE-2026-94510 Microsoft Bookings Elevation of Privilege VulnerabilityMicrosoft Bookings Critical 9.90.6%EoPNetwork
Service-side fix
CVE-2026-78501 Microsoft 365 Copilot Business Chat Information Disclosure VulnerabilityMicrosoft 365 Copilot's Business Chat Critical 8.60.5%Information DisclosureNetwork Revised 13 Oct
Service-side fix
CVE-2026-85887 M365 Copilot Information Disclosure VulnerabilityM365 Copilot Critical 7.70.8%Information DisclosureNetwork
Service-side fix

Advisories

MSRC guidance without a CVE of its own · 1 advisory
ADV260001
Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.
Published 13 Oct28 affected products
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 15:26 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.