ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

2592 matches in Windows · most urgent first CSVText
CVE Vulnerability Severity CVSSEPSSImpact StatusFixed by
CVE-2026-69784 Windows Hello Elevation of Privilege VulnerabilityWindows Hello Critical 8.80.3%EoPLocal
KB5122878KB5122880+2
CVE-2026-69860 Windows Imaging Component Remote Code Execution VulnerabilityWindows Imaging Component Critical 8.80.8%RCENetwork Revised 11 Sep
KB5122871KB5122876+8
CVE-2026-70203 Windows Media Player Remote Code Execution VulnerabilityWindows Media Player Critical 8.80.8%RCENetwork
KB5122871KB5122876+8
CVE-2026-70250 Windows DHCP Client Remote Code Execution VulnerabilityWindows DHCP Client Critical 8.80.5%RCEAdjacent Fix has a known issueRevised 28 Oct
KB5126646KB5126651+4
CVE-2026-70351 Microsoft WebP Image Extension Remote Code Execution VulnerabilityMicrosoft WebP Image Extension Critical 8.80.8%RCENetwork
—
CVE-2026-70586 Windows Paint Remote Code Execution VulnerabilityWindows Paint Critical 8.80.8%RCENetwork
KB5122871KB5122876+8
CVE-2026-72950 Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityWindows Routing and Remote Access Service (RRAS) Critical 8.80.9%RCENetwork
KB5122871KB5122876+8
CVE-2026-72959 Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityWindows Routing and Remote Access Service (RRAS) Critical 8.80.9%RCENetwork
KB5122871KB5122876+8
CVE-2026-72960 Windows Media Player Remote Code Execution VulnerabilityWindows Media Player Critical 8.80.8%RCENetwork
KB5122871KB5122876+6
CVE-2026-72986 Graphic Fonts Remote Code Execution VulnerabilityGraphic Fonts Critical 8.80.8%RCENetwork
KB5122871KB5122876+8
CVE-2026-73006 DirectWrite Remote Code Execution VulnerabilityMicrosoft Graphics Component Critical 8.80.8%RCENetwork Revised 9 Oct
KB5122871KB5122876+6
CVE-2026-73013 Windows Imaging Component Remote Code Execution VulnerabilityWindows Imaging Component Critical 8.80.8%RCENetwork Revised 28 Oct
KB5122871KB5122876+8

Advisories

MSRC guidance without a CVE of its own · 1 advisory
ADV260001
Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.
Published 13 Oct28 affected products
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 17:32 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.