Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

141 matches in Developer Tools · most urgent first CSV Text

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-69304	ASP.NET Core Denial of Service VulnerabilityASP.NET Core	Important	5.9	0.9%	DoSNetwork	Revised 25 Sep	KB5126104 KB5126105+1
CVE-2026-70162	.NET Denial of Service Vulnerability.NET	Important	5.9	0.9%	DoSNetwork	Revised 16 Oct	—
CVE-2026-70196	ASP.NET Core Denial of Service VulnerabilityASP.NET Core	Important	5.9	0.9%	DoSNetwork		KB5130034 KB5130035+1
CVE-2026-85790	Microsoft QUIC Information Disclosure VulnerabilityMicrosoft QUIC	Important	5.9	0.8%	Information DisclosureNetwork	Fix has a known issueRevised 16 Oct	KB5126646 KB5126653+3
CVE-2026-120796	.NET Denial of Service Vulnerability.NET	Important	5.3	—	DoSNetwork	Revised 11 Nov	—
CVE-2026-81380	GitHub Copilot and Visual Studio Code Information Disclosure VulnerabilityGitHub Copilot and Visual Studio Code	Important	5.3	0.7%	Information DisclosureNetwork		—
CVE-2026-96234	.NET Information Disclosure Vulnerability.NET	Important	5.3	0.3%	Information DisclosureNetwork	Revised 30 Oct	KB5130034 KB5130035+1
CVE-2026-114148	ASP.NET Core Elevation of Privilege VulnerabilityASP.NET Core	Important	—	0.4%	EoP		KB5133964 KB5133965+1
CVE-2026-105014	Azure Pipelines Remote Code Execution VulnerabilityAzure Pipelines	Critical	9.1	0.7%	RCENetwork		Service-side fix

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products