Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

8 matches in Microsoft Office · most urgent first CSV Text

Fixed by KB5122880Clear

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-69499	Windows Imaging Component Remote Code Execution VulnerabilityWindows Imaging Component	Critical	8.8	0.8%	RCENetwork	Revised 28 Oct	KB5122871 KB5122876+8
CVE-2026-73013	Windows Imaging Component Remote Code Execution VulnerabilityWindows Imaging Component	Critical	8.8	0.8%	RCENetwork	Revised 28 Oct	KB5122871 KB5122876+8
CVE-2026-81955	Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Graphics Component	Critical	8.8	0.8%	RCENetwork	Revised 17 Sep	KB5002916 KB5122871+9
CVE-2026-68880	Windows Win32k Elevation of Privilege VulnerabilityWindows Win32K	Important	8.0	0.8%	EoPNetwork	Revised 10 Nov	KB5122871 KB5122876+8
CVE-2026-69576	Graphic Fonts Elevation of Privilege VulnerabilityGraphic Fonts	Important	7.8	0.3%	EoPLocal	Revised 28 Oct	KB5122871 KB5122876+8
CVE-2026-69610	Windows Win32k Elevation of Privilege VulnerabilityWindows Win32K	Important	7.0	0.3%	EoPLocal		KB5122871 KB5122876+8
CVE-2026-69609	Win32k Information Disclosure VulnerabilityWindows Win32K	Important	5.5	0.4%	Information DisclosureLocal	Revised 28 Oct	KB5122871 KB5122876+8
CVE-2026-77491	Windows GDI Information Disclosure VulnerabilityWindows GDI	Important	5.5	0.4%	Information DisclosureLocal	Revised 28 Oct	KB5122871 KB5122876+8

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products