ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 275/275 feeds/APIs · 469/469 docs · 8/9 advisories · checked 10 Nov 23:48 UTC Customize Public modeDiscuss ChangeIntel on Discord

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV
998Microsoft CVEsreleased Tue 8 Sep 132Critical105 need an update · 27 fixed service-side 2Exploited in the wild
0Publicly disclosed
2In CISA KEV
249Revised since release

Act first · September 2026

Exploited, KEV-listed, or publicly disclosed
CVE-2026-81963ImportantExploitedCISA KEV · due 22 SepEoPLocal
Windows Update Stack Elevation of Privilege Vulnerability
CVSS 7.8 KB5122871KB5122880KB5124008+1
CVSS 7.8 KB5122876KB5122878KB5122882+3
Patch next · critical, "exploitation more likely", or top 5% EPSS · needs an update154
CVSS 9.8 · EPSS 1.0% KB5122871KB5122876KB5122882+3
CVSS 8.8 · EPSS 0.8% KB5122871KB5122876KB5122878+7
CVSS 9.0 · EPSS 0.7% No KB listed
Showing 3 of 154All critical

CVEs · September 2026

19 matches in Azure · most urgent first CSVText
CVE Vulnerability Severity CVSSEPSSImpact StatusFixed by
CVE-2026-69854 Spring Cloud Azure Elevation of Privilege VulnerabilitySpring Cloud Azure Critical 9.00.7%EoPNetwork
—
CVE-2026-62874 Azure Billing Elevation of Privilege VulnerabilityAzure Billing Critical 10.00.3%EoPNetwork
Service-side fix
CVE-2026-69865 Microsoft Container Registry Elevation of Privilege VulnerabilityMicrosoft Container Registry Critical 10.00.8%EoPNetwork
Service-side fix
CVE-2026-70200 Azure Logic Apps Elevation of Privilege VulnerabilityAzure Logic Apps Critical 10.00.6%EoPNetwork
Service-side fix
CVE-2026-70352 Azure AI Language Elevation of Privilege VulnerabilityAzure AI Language Critical 10.00.9%EoPNetwork
Service-side fix
CVE-2026-83711 Microsoft Azure Active Directory B2C Elevation of Privilege VulnerabilityMicrosoft Azure Active Directory B2C Critical 10.00.8%EoPNetwork
Service-side fix
CVE-2026-83944 Azure Logic Apps Elevation of Privilege VulnerabilityAzure Logic Apps Critical 10.00.4%EoPNetwork
Service-side fix
CVE-2026-85889 Azure AI Foundry Elevation of Privilege VulnerabilityAzure AI Foundry Critical 10.00.7%EoPNetwork
Service-side fix
CVE-2026-69399 Azure Arc Elevation of Privilege VulnerabilityAzure Arc Critical 9.90.6%EoPNetwork
Service-side fix
CVE-2026-83941 Entra ID Elevation of Privilege VulnerabilityEntra ID Critical 9.90.8%EoPNetwork
Service-side fix
CVE-2026-85878 Azure Database for PostgreSQL Elevation of Privilege VulnerabilityAzure Database for PostgreSQL Critical 9.90.8%EoPNetwork
Service-side fix
CVE-2026-87701 Azure Cosmos DB Elevation of Privilege VulnerabilityAzure Cosmos DB Critical 9.60.8%EoPNetwork
Service-side fix
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 10 Nov 23:48 UTC · 275 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.