ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 274/275 feeds/APIs · 469/469 docs · 8/9 advisories · checked 13:09 UTC Customize Public modeDiscuss ChangeIntel on Discord

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV
998Microsoft CVEsreleased Tue 8 Sep 132Critical105 need an update · 27 fixed service-side 2Exploited in the wild
0Publicly disclosed
2In CISA KEV
249Revised since release

Act first · September 2026

Exploited, KEV-listed, or publicly disclosed
CVE-2026-81963ImportantExploitedCISA KEV · due 22 SepEoPLocal
Windows Update Stack Elevation of Privilege Vulnerability
CVSS 7.8 KB5122871KB5122880KB5124008+1
CVSS 7.8 KB5122876KB5122878KB5122882+3
Patch next · critical, "exploitation more likely", or top 5% EPSS · needs an update154
CVSS 9.8 · EPSS 1.0% KB5122871KB5122876KB5122882+3
CVSS 8.8 · EPSS 0.8% KB5122871KB5122876KB5122878+7
CVSS 9.0 · EPSS 0.7% No KB listed
Showing 3 of 154All critical

CVEs · September 2026

998 matches · most urgent first CSVText
CVE Vulnerability Severity CVSSEPSSImpact StatusFixed by
CVE-2026-69546 Windows Active Directory Domain Services Remote Code Execution VulnerabilityActive Directory Domain Services Important 8.10.7%RCENetwork
KB5122871KB5122876+8
CVE-2026-69620 Windows DHCP Server Remote Code Execution VulnerabilityWindows DHCP Server Important 8.10.7%RCENetwork Revised 14 Oct
KB5122871KB5122876+4
CVE-2026-69680 Windows DNS Spoofing VulnerabilityWindows DNS Important 8.10.3%SpoofingNetwork
KB5122871KB5122876+4
CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution VulnerabilityWindows Link Layer Topology Discovery Protocol Important 8.10.7%RCENetwork Revised 9 Oct
KB5122871KB5122876+8
CVE-2026-69782 Windows DNS Server Remote Code Execution VulnerabilityRole: DNS Server Important 8.10.5%RCENetwork
KB5122871KB5122876+4
CVE-2026-69786 Windows Text Shaping Remote Code Execution VulnerabilityWindows Text Shaping Important 8.10.7%RCENetwork
KB5122871KB5122876+8
CVE-2026-69989 Windows DNS Server Remote Code Execution VulnerabilityRole: DNS Server Important 8.10.7%RCENetwork
KB5122871KB5122876+4
CVE-2026-70342 Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityWindows Ancillary Function Driver for WinSock Important 8.10.7%EoPNetwork
KB5122871KB5122876+8
CVE-2026-70563 Windows Shell Spoofing VulnerabilityWindows Shell Important 8.10.8%SpoofingNetwork
KB5122871KB5122876+8
CVE-2026-72936 Windows SMB Client Remote Code Execution VulnerabilityWindows SMB Client Important 8.10.7%RCENetwork Revised 5 Oct
KB5122871KB5122880+3
CVE-2026-83997 Windows Message Queuing Remote Code Execution VulnerabilityWindows Message Queuing Important 8.10.7%RCENetwork
KB5122871KB5122878+4
CVE-2026-88097 Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge (Chromium-based) Important 8.10.3%EoPLocal Revised 26 Oct
—
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 11 Nov 13:09 UTC · 274 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.