ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 274/275 feeds/APIs · 469/469 docs · 8/9 advisories · checked 12:06 UTC Customize Public modeDiscuss ChangeIntel on Discord

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV
998Microsoft CVEsreleased Tue 8 Sep 132Critical105 need an update · 27 fixed service-side 2Exploited in the wild
0Publicly disclosed
2In CISA KEV
249Revised since release

Act first · September 2026

Exploited, KEV-listed, or publicly disclosed
CVE-2026-81963ImportantExploitedCISA KEV · due 22 SepEoPLocal
Windows Update Stack Elevation of Privilege Vulnerability
CVSS 7.8 KB5122871KB5122880KB5124008+1
CVSS 7.8 KB5122876KB5122878KB5122882+3
Patch next · critical, "exploitation more likely", or top 5% EPSS · needs an update154
CVSS 9.8 · EPSS 1.0% KB5122871KB5122876KB5122882+3
CVSS 8.8 · EPSS 0.8% KB5122871KB5122876KB5122878+7
CVSS 9.0 · EPSS 0.7% No KB listed
Showing 3 of 154All critical

CVEs · September 2026

998 matches · most urgent first CSVText
CVE Vulnerability Severity CVSSEPSSImpact StatusFixed by
CVE-2026-77487 SQL Server Elevation of Privilege VulnerabilitySQL Server Important 8.80.8%EoPNetwork
KB5122768KB5122769+6
CVE-2026-77901 Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft Office Word Important 8.80.8%RCENetwork Revised 21 Sep
KB5002923
CVE-2026-77906 Visual Studio Remote Code Execution VulnerabilityVisual Studio Important 8.80.8%RCENetwork
—
CVE-2026-77907 Visual Studio Remote Code Execution VulnerabilityVisual Studio Important 8.80.8%RCENetwork
—
CVE-2026-77908 Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityMicrosoft Dynamics 365 Important 8.81.0%RCENetwork
KB5123731
CVE-2026-78442 Windows OLE DB Remote Code Execution VulnerabilityWindows OLE DB Important 8.80.8%RCENetwork
KB5122772KB5122773+2
CVE-2026-78456 SQL Server Remote Code Execution VulnerabilitySQL Server Important 8.80.9%RCENetwork
KB5122768KB5122771
CVE-2026-78462 Visual Studio Code Security Feature Bypass VulnerabilityVisual Studio Code Important 8.80.8%SFBNetwork
—
CVE-2026-78463 Remote Desktop Client Remote Code Execution VulnerabilityRemote Desktop Client Important 8.80.9%RCENetwork
—
CVE-2026-78504 Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft Office Word Important 8.80.8%RCENetwork Revised 17 Sep
KB5002923
CVE-2026-78507 Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft Office Word Important 8.80.8%RCENetwork Revised 17 Sep
—
CVE-2026-78511 Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft Office Word Important 8.80.8%RCENetwork Revised 17 Sep
KB5002923
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 11 Nov 12:06 UTC · 274 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.