Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
| CVE | Vulnerability | Severity | CVSS | EPSS | Impact | Status | Fixed by |
|---|---|---|---|---|---|---|---|
| CVE-2026-122194 | Microsoft Defender Remote Code Execution VulnerabilityMicrosoft Defender | Critical | 8.8 | — | RCENetwork | — | |
| CVE-2026-88075 | Configuration Manager Elevation of Privilege VulnerabilityMicrosoft Configuration Manager | Important | 8.8 | 0.8% | EoPNetwork | — | |
| CVE-2026-70049 | Microsoft Configuration Manager Elevation of Privilege VulnerabilityMicrosoft Configuration Manager | Important | 8.0 | 2.7% | EoPAdjacent | — | |
| CVE-2026-119991 | Microsoft Configuration Manager Information Disclosure VulnerabilityMicrosoft Configuration Manager | Important | 5.9 | — | Information DisclosureNetwork | — | |
| CVE-2026-105726 | Microsoft Defender Information Disclosure VulnerabilityMicrosoft Defender | Important | 5.5 | 0.4% | Information DisclosureLocal | Revised 10 Nov | — |
| CVE-2026-70264 | Microsoft Defender Information Disclosure VulnerabilityMicrosoft Defender | Important | 5.5 | 0.5% | Information DisclosureLocal | — |
Advisories
MSRC guidance without a CVE of its own · 1 advisory
Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.