ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 274/275 feeds/APIs · 469/469 docs · 8/9 advisories · checked 12:06 UTC Customize Public modeDiscuss ChangeIntel on Discord

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV
998Microsoft CVEsreleased Tue 8 Sep 132Critical105 need an update · 27 fixed service-side 2Exploited in the wild
0Publicly disclosed
2In CISA KEV
249Revised since release

Act first · September 2026

Exploited, KEV-listed, or publicly disclosed
CVE-2026-81963ImportantExploitedCISA KEV · due 22 SepEoPLocal
Windows Update Stack Elevation of Privilege Vulnerability
CVSS 7.8 KB5122871KB5122880KB5124008+1
CVSS 7.8 KB5122876KB5122878KB5122882+3
Patch next · critical, "exploitation more likely", or top 5% EPSS · needs an update154
CVSS 9.8 · EPSS 1.0% KB5122871KB5122876KB5122882+3
CVSS 8.8 · EPSS 0.8% KB5122871KB5122876KB5122878+7
CVSS 9.0 · EPSS 0.7% No KB listed
Showing 3 of 154All critical

CVEs · September 2026

650 matches in ESU · most urgent first CSVText
CVE Vulnerability Severity CVSSEPSSImpact StatusFixed by
CVE-2026-70585 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution VulnerabilityWindows Services for NFS ONCRPC XDR Driver Critical 7.00.3%RCELocal
KB5122871KB5122876+4
CVE-2026-72980 Windows Hello Security Feature Bypass VulnerabilityWindows Hello Critical 4.40.6%SFBLocal
KB5122871KB5122876+6
CVE-2026-68839 Windows USB Mass Storage Class Driver Remote Code Execution VulnerabilityWindows USB Mass Storage Class Driver Important 9.81.0%RCENetwork Revised 10 Nov
KB5122871KB5122876+8
CVE-2026-69276 Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution VulnerabilityMicrosoft UxTheme Library (uxtheme.dll) Important 9.81.0%RCENetwork
KB5122871KB5122876+8
CVE-2026-69408 Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows Media Foundation Important 9.81.0%RCENetwork
KB5122871KB5122876+8
CVE-2026-69431 Telnet Client Remote Code Execution VulnerabilityTelnet Client Important 9.81.0%RCENetwork
KB5122871KB5122876+8
CVE-2026-69463 Windows NTFS Remote Code Execution VulnerabilityWindows NTFS Important 9.81.0%RCENetwork
KB5122871KB5122876+8
CVE-2026-69491 Microsoft DirectMusic Remote Code Execution VulnerabilityWindows Microsoft DirectMusic Important 9.81.0%RCENetwork
KB5122871KB5122876+8
CVE-2026-69493 Windows Event Logging Service Remote Code Execution VulnerabilityWindows Event Logging Service Important 9.81.0%RCENetwork
KB5122871KB5122876+8
CVE-2026-69496 Windows Compressed Folder Remote Code Execution VulnerabilityWindows Compressed Folder Important 9.81.0%RCENetwork
KB5122871KB5122876+8
CVE-2026-69525 Remote Desktop Services Remote Code Execution VulnerabilityWindows Remote Desktop Services Important 9.81.0%RCENetwork
KB5122871KB5122876+8
CVE-2026-69586 Microsoft Windows PDF Remote Code Execution VulnerabilityMicrosoft Windows PDF Important 9.81.0%RCENetwork Revised 30 Sep
KB5122871KB5122876+6
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 11 Nov 12:06 UTC · 274 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.