Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

0Publicly disclosed

1In CISA KEV

0Revised since release

October 2026: 1474 CVEs · 94 critical · 1 exploited · 1 in CISA KEV

Act first · November 2026

Exploited, KEV-listed, or publicly disclosed

CVE-2026-124194ModerateExploitedCISA KEV · due 24 NovSpoofingNetwork

CVSS 6.5 No KB listed

Patch next · critical, "exploitation more likely", or top 5% EPSS · needs an update100

CVE-2026-118146CriticalRCENetworkExploitation More Likely

CVSS 8.8 KB5131077 KB5131080 KB5131085+7

CVE-2026-118207CriticalRCENetworkExploitation More Likely

CVSS 8.8 KB5133453

CVE-2026-113862CriticalRCENetworkExploitation More Likely

CVSS 8.1 KB5131077 KB5131080 KB5131085+7

Showing 3 of 100All critical

Elevation of Privilege 536

Remote Code Execution 296

Information Disclosure 157

Denial of Service 46

Security Feature Bypass 27

Windows 745

ESU 658

Microsoft Office 204

SQL Server 54

Developer Tools 50

23 matches in Azure · most urgent first CSV Text

CVE	Vulnerability	Severity	CVSS	Impact	Fixed by
CVE-2026-119990	Azure OpenAI Elevation of Privilege VulnerabilityAzure OpenAI	Critical	9.8	EoPNetwork	—
CVE-2026-114160	Azure Managed Grafana Elevation of Privilege VulnerabilityAzure Managed Grafana	Critical	—	EoP	—
CVE-2026-114162	Microsoft Graph Elevation of Privilege VulnerabilityMicrosoft Graph	Important	9.1	EoPNetwork	—
CVE-2026-118742	Azure Front Door Elevation of Privilege VulnerabilityAzure Front Door (AFD)	Important	8.6	EoPNetwork	—
CVE-2026-102224	Azure CycleCloud Elevation of Privilege VulnerabilityAzure CycleCloud	Important	8.4	EoPNetwork	—
CVE-2026-119989	Azure Pipelines Remote Code Execution VulnerabilityAzure Pipelines	Important	8.2	RCENetwork	—
CVE-2026-109457	Azure CLI Remote Code Execution VulnerabilityAzure CLI	Important	8.0	RCENetwork	—
CVE-2026-114161	Azure CycleCloud Elevation of Privilege VulnerabilityAzure CycleCloud	Important	7.8	EoPLocal	—
CVE-2026-113823	Azure CycleCloud Information Disclosure VulnerabilityAzure CycleCloud	Important	7.5	Information DisclosureNetwork	—
CVE-2026-105734	Azure Local Elevation of Privilege VulnerabilityAzure Local	Important	7.0	EoPLocal	—
CVE-2026-118288	Microsoft Azure File Sync Elevation of Privilege VulnerabilityAzure File Sync	Important	7.0	EoPLocal	—
CVE-2026-108469	Microsoft Authentication Library for JavaScript Spoofing VulnerabilityMicrosoft Authentication Library for JavaScript	Important	6.8	SpoofingNetwork	—