ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 275/275 feeds/APIs · 469/469 docs · 8/9 advisories · checked 05:47 UTC Customize Public modeDiscuss ChangeIntel on Discord

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV
998Microsoft CVEsreleased Tue 8 Sep 132Critical105 need an update · 27 fixed service-side 2Exploited in the wild
0Publicly disclosed
2In CISA KEV
249Revised since release

Act first · September 2026

Exploited, KEV-listed, or publicly disclosed
CVE-2026-81963ImportantExploitedCISA KEV · due 22 SepEoPLocal
Windows Update Stack Elevation of Privilege Vulnerability
CVSS 7.8 KB5122871KB5122880KB5124008+1
CVSS 7.8 KB5122876KB5122878KB5122882+3
Patch next · critical, "exploitation more likely", or top 5% EPSS · needs an update154
CVSS 9.8 · EPSS 1.0% KB5122871KB5122876KB5122882+3
CVSS 8.8 · EPSS 0.8% KB5122871KB5122876KB5122878+7
CVSS 9.0 · EPSS 0.7% No KB listed
Showing 3 of 154All critical

CVEs · September 2026

85 matches in ESU · most urgent first CSVText
CVE Vulnerability Severity CVSSEPSSImpact StatusFixed by
CVE-2026-70579 Windows Mobile Broadband Information Disclosure VulnerabilityWindows Mobile Broadband Important 7.51.0%Information DisclosureNetwork
KB5122878KB5122880+2
CVE-2026-70587 Windows Remote Desktop Protocol Information Disclosure VulnerabilityWindows Remote Desktop Protocol Important 7.51.0%Information DisclosureNetwork
KB5122871KB5122876+8
CVE-2026-71330 Windows Services for NFS ONCRPC XDR Driver Information Disclosure VulnerabilityWindows Services for NFS ONCRPC XDR Driver Important 7.51.0%Information DisclosureNetwork
KB5122871KB5122876+8
CVE-2026-72932 Windows Message Queuing Queue Manager Information Disclosure VulnerabilityWindows Message Queuing Queue Manager Important 7.51.0%Information DisclosureNetwork
KB5122871KB5122876+8
CVE-2026-69267 Windows Connected User Experiences and Telemetry Information Disclosure VulnerabilityWindows Connected User Experiences and Telemetry Important 6.50.4%Information DisclosureLocal Revised 5 Oct
KB5122871KB5122876+5
CVE-2026-69297 Windows DHCP Server Information Disclosure VulnerabilityWindows DHCP Server Important 6.50.8%Information DisclosureNetwork
KB5122871KB5122876+4
CVE-2026-69395 Active Directory Certificate Services (AD CS) Information Disclosure VulnerabilityActive Directory Certificate Services (AD CS) Important 6.51.0%Information DisclosureNetwork
KB5122871KB5122876+4
CVE-2026-72942 Windows Spaceport.sys Information Disclosure VulnerabilityWindows Spaceport.sys Important 6.50.9%Information DisclosureNetwork
KB5122871KB5122876+7
CVE-2026-78453 Microsoft Windows SCSI Class System File Information Disclosure VulnerabilityMicrosoft Windows SCSI Class System File Important 6.50.9%Information DisclosureNetwork Revised 7 Oct
KB5122871KB5122876+8
CVE-2026-69382 Microsoft Exchange Server Information Disclosure VulnerabilityMicrosoft Exchange Server Important 5.90.5%Information DisclosureNetwork
KB5121608KB5121609+2
CVE-2026-69803 Windows DHCP Server Information Disclosure VulnerabilityWindows DHCP Server Important 5.90.8%Information DisclosureNetwork Revised 24 Sep
KB5122871KB5122876+4
CVE-2026-69929 Windows DHCP Server Information Disclosure VulnerabilityWindows DHCP Server Important 5.90.8%Information DisclosureNetwork
KB5122871KB5122876+4
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 11 Nov 05:47 UTC · 275 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.