Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 275/275 feeds/APIs · 467/469 docs · 7/9 advisories · checked 01:34 UTC Customize Public modeDiscuss ChangeIntel on Discord

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Act first · September 2026

Exploited, KEV-listed, or publicly disclosed
CVE-2026-81963ImportantExploitedCISA KEV · due 22 SepEoPLocal
Windows Update Stack Elevation of Privilege Vulnerability
CVSS 7.8 KB5122871KB5122880KB5124008+1
CVSS 7.8 KB5122876KB5122878KB5122882+3
Patch next · critical, "exploitation more likely", or top 5% EPSS · needs an update154
CVSS 9.8 · EPSS 1.0% KB5122871KB5122876KB5122882+3
CVSS 8.8 · EPSS 0.8% KB5122871KB5122876KB5122878+7
CVSS 9.0 · EPSS 0.7% No KB listed
Showing 3 of 154All critical

CVEs · September 2026

22 matches in Developer Tools · most urgent first CSVText
CVE Vulnerability Severity CVSSEPSSImpact StatusFixed by
CVE-2026-57099 ASP.NET Core Denial of Service VulnerabilityASP.NET Core Important 7.51.2%DoSNetwork Revised 22 Sep
—
CVE-2026-69805 .NET Elevation of Privilege Vulnerability.NET Important 7.50.5%EoPNetwork
—
CVE-2026-78461 Visual Studio Code Security Feature Bypass VulnerabilityVisual Studio Code Important 7.41.0%SFBNetwork
—
CVE-2026-81383 Visual Studio Code Information Disclosure VulnerabilityVisual Studio Code Important 7.40.9%Information DisclosureNetwork
—
CVE-2026-69806 .NET Elevation of Privilege Vulnerability.NET Important 7.00.8%EoPLocal Revised 25 Sep
KB5126105KB5126106
CVE-2026-58649 .NET Information Disclosure Vulnerability.NET Important 6.50.4%Information DisclosureNetwork
KB5126104KB5126105+1
CVE-2026-81377 Visual Studio Code Tampering VulnerabilityVisual Studio Code Important 6.50.8%TamperingNetwork
—
CVE-2026-81381 GitHub Copilot and Visual Studio Code Information Disclosure VulnerabilityGitHub Copilot and Visual Studio Code Important 6.50.9%Information DisclosureNetwork
—
CVE-2026-69304 ASP.NET Core Denial of Service VulnerabilityASP.NET Core Important 5.90.9%DoSNetwork Revised 25 Sep
KB5126104KB5126105+1
CVE-2026-81380 GitHub Copilot and Visual Studio Code Information Disclosure VulnerabilityGitHub Copilot and Visual Studio Code Important 5.30.7%Information DisclosureNetwork
—
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 11 Nov 01:34 UTC · 275 of 275 readable · 273 fully read · documentation 467/469 current