Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
| CVE | Vulnerability | Severity | CVSS | EPSS | Impact | Status | Fixed by |
|---|---|---|---|---|---|---|---|
| CVE-2026-88086 | Microsoft SQL Server Information Disclosure VulnerabilitySQL Server | Important | 5.3 | 0.4% | Information DisclosureAdjacent | KB5126934KB5126967+4 | |
| CVE-2026-116940 | Microsoft SQL Server Information Disclosure VulnerabilitySQL Server | Important | 4.9 | — | Information DisclosureNetwork | KB5129299KB5129300+6 | |
| CVE-2026-67628 | Microsoft SQL Server Information Disclosure VulnerabilitySQL Server | Important | 4.9 | 0.8% | Information DisclosureNetwork | KB5126934KB5126967+6 | |
| CVE-2026-68785 | Microsoft SQL Server Remote Code Execution VulnerabilitySQL Server | Important | 4.9 | 1.1% | RCENetwork | KB5122768KB5122769+6 | |
| CVE-2026-94520 | Microsoft SQL Server Denial of Service VulnerabilitySQL Server | Important | 4.9 | 0.8% | DoSNetwork | KB5126967KB5129299+7 | |
| CVE-2026-62903 | Microsoft.Data.SqlClient Information Disclosure VulnerabilitySQL Server | Important | — | — | Information Disclosure | — |
Advisories
MSRC guidance without a CVE of its own · 1 advisory
Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.