ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

3567 matches · most urgent first CSVText
CVE Vulnerability Severity CVSSEPSSImpact StatusFixed by
CVE-2026-96951 Windows Shell Security Feature Bypass VulnerabilityWindows Shell Important 8.89.8%SFBNetwork ExploitedCISA KEV · due 16 OctFix has a known issueRevised 26 Oct
KB5126646KB5126651+7
CVE-2026-81963 Windows Update Stack Elevation of Privilege VulnerabilityWindows Update Stack Important 7.80.4%EoPLocal ExploitedCISA KEV · due 22 SepRevised 7 Oct
KB5122871KB5122880+2
CVE-2026-85880 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityWindows ALPC Important 7.80.4%EoPLocal ExploitedCISA KEV · due 22 SepRevised 16 Sep
KB5122876KB5122878+4
CVE-2026-124194 Microsoft Outlook Spoofing VulnerabilityMicrosoft Office Outlook Moderate 6.5—SpoofingNetwork ExploitedCISA KEV · due 24 Nov
—
CVE-2026-108398 .NET Framework Security Feature Bypass Vulnerability.NET Framework Important 8.80.8%SFBLocal DisclosedFix has a known issue
KB5126868KB5127666+14
CVE-2026-100202 Windows Message Queuing Queue Manager Remote Code Execution VulnerabilityWindows Message Queuing Queue Manager Critical 9.81.1%RCENetwork Fix has a known issue
KB5126646KB5126651+8
CVE-2026-100219 Microsoft QUIC Remote Code Execution VulnerabilityMicrosoft QUIC Critical 9.81.1%RCENetwork Fix has a known issue
KB5126646KB5126653+3
CVE-2026-105016 Microsoft QUIC Remote Code Execution VulnerabilityMicrosoft QUIC Critical 9.81.7%RCENetwork Fix has a known issue
KB5126646KB5126653+5
CVE-2026-112967 Windows Xbox Live Networking Service Remote Code Execution VulnerabilityWindows Xbox Live Networking Service Critical 9.8—RCENetwork
KB5131085KB5131087+4
CVE-2026-116928 Windows Search Remote Code Execution VulnerabilityMicrosoft Windows Search Component Critical 9.8—RCENetwork
KB5131077KB5131080+8
CVE-2026-119958 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution VulnerabilityWindows LDAP - Lightweight Directory Access Protocol Critical 9.8—RCENetwork
KB5131077KB5131080+8
CVE-2026-66302 Skype for Business Remote Code Execution VulnerabilitySkype for Business Critical 9.81.0%RCENetwork
KB5123287KB5123300+1

Advisories

MSRC guidance without a CVE of its own · 1 advisory
ADV260001
Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.
Published 13 Oct28 affected products
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 15:26 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.