Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

37 matches in Other · most urgent first CSV Text

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-96222	Active Directory Federation Services (AD FS) Spoofing VulnerabilityActive Directory Federation Services (AD FS)	Critical	7.4	0.6%	SpoofingNetwork	Fix has a known issueRevised 16 Oct	KB5126646 KB5126651+21
CVE-2026-62840	Linux Kernel Elevation of Privilege VulnerabilityLinux Kernel	Critical	—	0.2%	EoP		—
CVE-2026-118740	Aspire Security Feature Bypass VulnerabilityAspire	Important	9.1	—	SFBNetwork	Revised 11 Nov	—
CVE-2026-114146	ASP.NET Core Elevation of Privilege VulnerabilityASP.NET Core	Important	9.0	—	EoPNetwork	Revised 11 Nov	KB5135241 KB5135242+1
CVE-2026-102870	ASP.NET Core Remote Code Execution VulnerabilityASP.NET Core	Important	8.8	0.9%	RCENetwork	Revised 25 Oct	KB5133966
CVE-2026-96230	ASP.NET Core Remote Code Execution VulnerabilityASP.NET Core	Important	8.8	0.9%	RCENetwork		—
CVE-2026-118741	ASP.NET Core Elevation of Privilege VulnerabilityASP.NET Core	Important	8.1	—	EoPNetwork	Revised 11 Nov	—
CVE-2026-70175	ASP.NET Core Elevation of Privilege VulnerabilityASP.NET Core	Important	8.1	0.7%	EoPNetwork		KB5130034 KB5130035+4
CVE-2026-88094	Azure Storage Library Elevation of Privilege VulnerabilityAzure Storage Library	Important	8.1	0.8%	EoPNetwork	Revised 26 Oct	—
CVE-2026-102204	Windows Subsystem for Linux Elevation of Privilege VulnerabilityWindows Subsystem for Linux	Important	7.8	0.4%	EoPLocal	Revised 20 Oct	—
CVE-2026-105544	.NET Elevation of Privilege Vulnerability.NET	Important	7.5	—	EoPLocal	Revised 11 Nov	KB5135241 KB5135242+1
CVE-2026-109468	ASP.NET Core Denial of Service VulnerabilityASP.NET Core	Important	7.5	1.0%	DoSNetwork	Revised 16 Oct	—

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products