ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 275/275 feeds/APIs · 466/469 docs · 7/9 advisories · checked 01:34 UTC Customize Public modeDiscuss ChangeIntel on Discord

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV
998Microsoft CVEsreleased Tue 8 Sep 132Critical105 need an update · 27 fixed service-side 2Exploited in the wild
0Publicly disclosed
2In CISA KEV
249Revised since release

Act first · September 2026

Exploited, KEV-listed, or publicly disclosed
CVE-2026-81963ImportantExploitedCISA KEV · due 22 SepEoPLocal
Windows Update Stack Elevation of Privilege Vulnerability
CVSS 7.8 KB5122871KB5122880KB5124008+1
CVSS 7.8 KB5122876KB5122878KB5122882+3
Patch next · critical, "exploitation more likely", or top 5% EPSS · needs an update154
CVSS 9.8 · EPSS 1.0% KB5122871KB5122876KB5122882+3
CVSS 8.8 · EPSS 0.8% KB5122871KB5122876KB5122878+7
CVSS 9.0 · EPSS 0.7% No KB listed
Showing 3 of 154All critical

CVEs · September 2026

998 matches · most urgent first CSVText
CVE Vulnerability Severity CVSSEPSSImpact StatusFixed by
CVE-2026-69854 Spring Cloud Azure Elevation of Privilege VulnerabilitySpring Cloud Azure Critical 9.00.7%EoPNetwork
—
CVE-2026-65772 Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityMicrosoft Dynamics 365 Critical 8.81.7%RCENetwork
—
CVE-2026-69285 Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office Critical 8.80.8%RCENetwork
KB5002916
CVE-2026-69499 Windows Imaging Component Remote Code Execution VulnerabilityWindows Imaging Component Critical 8.80.8%RCENetwork Revised 28 Oct
KB5122871KB5122876+8
CVE-2026-69518 Windows Remote Desktop Remote Code Execution VulnerabilityWindows Remote Desktop Critical 8.80.8%RCENetwork
KB5122871KB5122876+8
CVE-2026-69601 Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows Media Foundation Critical 8.80.8%RCENetwork
KB5122871KB5122876+8
CVE-2026-69603 Windows Hyper-V Remote Code Execution VulnerabilityWindows Hyper-V Critical 8.80.3%RCELocal
KB5122871KB5122876+7
CVE-2026-69632 Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office Critical 8.80.8%RCENetwork Revised 17 Sep
—
CVE-2026-69649 Raw Image Extension Remote Code Execution VulnerabilityWindows Raw Image Extension Critical 8.80.8%RCENetwork
—
CVE-2026-69676 Windows Kerberos Remote Code Execution VulnerabilityWindows Kerberos Critical 8.80.8%RCENetwork Revised 14 Oct
KB5122871KB5122876+8
CVE-2026-69678 Microsoft Office PowerPoint Remote Code Execution VulnerabilityMicrosoft Office PowerPoint Critical 8.80.8%RCENetwork Revised 17 Sep
KB5002920
CVE-2026-69712 Windows Key Distribution Center Remote Code Execution VulnerabilityWindows Key Distribution Center Critical 8.80.9%RCENetwork Revised 30 Sep
KB5122871KB5122876+4
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 11 Nov 01:34 UTC · 275 of 275 readable · 273 fully read · documentation 466/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.