Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 262/275 feeds/APIs · 469/469 docs · 9/9 advisories · checked 19:25 UTC Customize Public modeDiscuss ChangeIntel on Discord

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

October 2026: 1474 CVEs · 94 critical · 1 exploited · 1 in CISA KEV

Act first · November 2026

Exploited, KEV-listed, or publicly disclosed
CVSS 6.5 No KB listed
Patch next · critical, "exploitation more likely", or top 5% EPSS · needs an update100
CVSS 8.8 KB5133453
Showing 3 of 100All critical

CVEs · November 2026

157 matches · most urgent first CSVText
CVE Vulnerability Severity CVSSImpact StatusFixed by
CVE-2026-105579 Windows DNS Information Disclosure VulnerabilityWindows DNS Important 7.5Information DisclosureNetwork
KB5131077KB5131080+3
CVE-2026-113823 Azure CycleCloud Information Disclosure VulnerabilityAzure CycleCloud Important 7.5Information DisclosureNetwork
—
CVE-2026-116943 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 7.5Information DisclosureNetwork
KB5129299KB5129300+6
CVE-2026-83684 Windows iSCSI Target Service Information Disclosure VulnerabilityWindows iSCSI Target Service Important 7.5Information DisclosureNetwork
KB5131077KB5131080+3
CVE-2026-96972 Windows DNS Server Information Disclosure VulnerabilityWindows DNS Important 7.5Information DisclosureNetwork
KB5131077KB5131080+3
CVE-2026-102230 Visual Studio Code Information Disclosure VulnerabilityVisual Studio Code Important 7.4Information DisclosureNetwork
—
CVE-2026-120792 Aspire Information Disclosure VulnerabilityAspire Important 7.3Information DisclosureLocal
—
CVE-2026-108417 Windows Remote Desktop Client Information Disclosure VulnerabilityRemote Desktop Client Important 6.5Information DisclosureNetwork
KB5131077KB5131080+8
CVE-2026-108418 Windows Remote Desktop Client Information Disclosure VulnerabilityRemote Desktop Client Important 6.5Information DisclosureNetwork
KB5131077KB5131080+8
CVE-2026-108419 Windows Remote Desktop Client Information Disclosure VulnerabilityRemote Desktop Client Important 6.5Information DisclosureNetwork
KB5131077KB5131080+8
CVE-2026-108424 Windows GDI Information Disclosure VulnerabilityWindows GDI Important 6.5Information DisclosureNetwork
KB5131077KB5131080+8
CVE-2026-109455 Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint Important 6.5Information DisclosureNetwork
KB5002945
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 10 Nov 19:25 UTC · 262 of 275 readable · 261 fully read · documentation 469/469 current