Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

CVEs · all collected releases

2290 matches in ESU · most urgent first CSVText
CVE Vulnerability Severity CVSSEPSSImpact StatusFixed by
CVE-2026-96951 Windows Shell Security Feature Bypass VulnerabilityWindows Shell Important 8.89.8%SFBNetwork ExploitedCISA KEV · due 16 OctFix has a known issueRevised 26 Oct
KB5126646KB5126651+7
CVE-2026-85880 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityWindows ALPC Important 7.80.4%EoPLocal ExploitedCISA KEV · due 22 SepRevised 16 Sep
KB5122876KB5122878+4
CVE-2026-100202 Windows Message Queuing Queue Manager Remote Code Execution VulnerabilityWindows Message Queuing Queue Manager Critical 9.81.1%RCENetwork Fix has a known issue
KB5126646KB5126651+8
CVE-2026-112967 Windows Xbox Live Networking Service Remote Code Execution VulnerabilityWindows Xbox Live Networking Service Critical 9.8—RCENetwork
KB5131085KB5131087+4
CVE-2026-116928 Windows Search Remote Code Execution VulnerabilityMicrosoft Windows Search Component Critical 9.8—RCENetwork
KB5131077KB5131080+8
CVE-2026-119958 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution VulnerabilityWindows LDAP - Lightweight Directory Access Protocol Critical 9.8—RCENetwork
KB5131077KB5131080+8
CVE-2026-69579 Windows Message Queuing Remote Code Execution VulnerabilityWindows Message Queuing Critical 9.81.0%RCENetwork
KB5122871KB5122876+8
CVE-2026-69590 Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityWindows Routing and Remote Access Service (RRAS) Critical 9.81.0%RCENetwork Revised 24 Sep
KB5122871KB5122876+8
CVE-2026-69595 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution VulnerabilityWindows Services for NFS ONCRPC XDR Driver Critical 9.81.0%RCENetwork
KB5122871KB5122876+4
CVE-2026-69730 Windows DNS Server Remote Code Execution VulnerabilityWindows DNS Critical 9.81.0%RCENetwork
KB5122871KB5122876+4
CVE-2026-69769 Windows HTTP Print Provider Remote Code Execution VulnerabilityWindows HTTP Print Provider Critical 9.81.0%RCENetwork
KB5122871KB5122876+8
CVE-2026-69829 Windows Shell Remote Code Execution VulnerabilityWindows Shell Critical 9.81.0%RCENetwork
KB5122871KB5122876+8

Advisories

MSRC guidance without a CVE of its own · 1 advisory
Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.
Published 13 Oct28 affected products
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 15:26 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current