ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

26 matches in Server Software · most urgent first CSVText
CVE Vulnerability Severity CVSSEPSSImpact StatusFixed by
CVE-2026-118207 Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server Critical 8.8—RCENetwork
KB5133453
CVE-2026-70571 Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server Critical 8.11.4%RCENetwork
KB5128895KB5128896+2
CVE-2026-69356 Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server Important 9.30.8%SpoofingNetwork
KB5121608KB5121609+2
CVE-2026-70279 Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server Important 9.31.3%SpoofingNetwork
KB5128895KB5128896+2
CVE-2026-69641 Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server Important 9.10.9%EoPNetwork
KB5121608KB5121609+2
CVE-2026-118149 Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server Important 8.8—RCENetwork
KB5133453
CVE-2026-118150 Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server Important 8.8—EoPNetwork
KB5133453
CVE-2026-118154 Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server Important 8.8—EoPNetwork
KB5133453
CVE-2026-69355 Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server Important 8.80.9%RCENetwork
KB5121608KB5121609+2
CVE-2026-77910 Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server Important 8.80.9%EoPNetwork
KB5128895KB5128896+2
CVE-2026-96940 Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server Important 8.82.7%EoPNetwork
KB5129955KB5129956+2
CVE-2026-55007 Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server Important 8.10.7%RCENetwork
KB5121608KB5121609+1

Advisories

MSRC guidance without a CVE of its own · 1 advisory
ADV260001
Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.
Published 13 Oct28 affected products
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 15:26 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.