Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

141 matches in Developer Tools · most urgent first CSV Text

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-96229	.NET Information Disclosure Vulnerability.NET	Important	6.5	0.9%	Information DisclosureNetwork		KB5130034 KB5130035+1
CVE-2026-96238	.NET Security Feature Bypass Vulnerability.NET	Important	6.5	0.3%	SFBNetwork	Revised 15 Oct	KB5130034 KB5130035+1
CVE-2026-96303	Microsoft PowerShell Security Feature Bypass VulnerabilityMicrosoft PowerShell	Important	6.5	0.7%	SFBNetwork	Revised 22 Oct	—
CVE-2026-120783	Azure DevOps Server Elevation of Privilege VulnerabilityAzure DevOps Server	Important	6.4	—	EoPNetwork		—
CVE-2026-102851	Visual Studio Code Security Feature Bypass VulnerabilityVisual Studio Code	Important	6.1	0.3%	SFBLocal		—
CVE-2026-109476	ASP.NET Core Information Disclosure VulnerabilityASP.NET Core	Important	6.1	—	Information DisclosureNetwork	Revised 11 Nov	KB5135241 KB5135242+1
CVE-2026-121669	PowerShell Information Disclosure VulnerabilityMicrosoft PowerShell Core	Important	6.1	—	Information DisclosureNetwork		—
CVE-2026-121674	PowerShell Information Disclosure VulnerabilityMicrosoft PowerShell Core	Important	6.1	—	Information DisclosureNetwork		—
CVE-2026-121675	PowerShell Information Disclosure VulnerabilityMicrosoft PowerShell Core	Important	6.1	—	Information DisclosureNetwork		—
CVE-2026-122985	Microsoft PowerShell Information Disclosure VulnerabilityMicrosoft PowerShell	Important	6.1	—	Information DisclosureNetwork		—
CVE-2026-114150	ASP.NET Core Information Disclosure VulnerabilityASP.NET Core	Important	5.9	—	Information DisclosureNetwork	Revised 11 Nov	—
CVE-2026-66822	.NET Information Disclosure Vulnerability.NET	Important	5.9	0.8%	Information DisclosureNetwork	Revised 15 Oct	KB5130034 KB5130035+1

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products