Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

18 matches in Microsoft Office · most urgent first CSV Text

Fixed by KB5002916Clear

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-69285	Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office	Critical	8.8	0.8%	RCENetwork		KB5002916
CVE-2026-78505	Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office	Critical	8.8	0.8%	RCENetwork	Revised 17 Sep	KB5002916
CVE-2026-81952	Microsoft Word Remote Code Execution VulnerabilityMicrosoft Office Word	Critical	8.8	0.8%	RCENetwork	Revised 17 Sep	KB5002916
CVE-2026-81955	Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Graphics Component	Critical	8.8	0.8%	RCENetwork	Revised 17 Sep	KB5002916 KB5122871+9
CVE-2026-78510	Microsoft Outlook and Word Remote Code Execution VulnerabilityMicrosoft Office	Critical	8.4	0.4%	RCELocal	Revised 25 Sep	KB5002916
CVE-2026-69442	Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office	Important	8.8	0.8%	RCENetwork		KB5002916
CVE-2026-69764	Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft Office Word	Important	8.8	0.8%	RCENetwork		KB5002916 KB5002923
CVE-2026-78524	Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office	Important	8.8	0.8%	RCENetwork	Revised 16 Oct	KB5002916
CVE-2026-64918	Microsoft Office Spoofing VulnerabilityMicrosoft Office	Important	6.5	0.9%	SpoofingNetwork		KB5002916
CVE-2026-69626	Microsoft Office Information Disclosure VulnerabilityMicrosoft Office	Important	6.5	0.9%	Information DisclosureNetwork	Revised 17 Sep	KB5002916
CVE-2026-69734	Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Office Word	Important	6.5	0.9%	Information DisclosureNetwork	Revised 17 Sep	KB5002916
CVE-2026-69739	Microsoft Office Information Disclosure VulnerabilityMicrosoft Office	Important	6.5	0.9%	Information DisclosureNetwork	Revised 17 Sep	KB5002916

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products