Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
998Microsoft CVEsreleased Tue 8 Sep
132Critical105 need an update · 27 fixed service-side
2Exploited in the wild
0Publicly disclosed
2In CISA KEV
249Revised since release
Act first · September 2026
Exploited, KEV-listed, or publicly disclosedPatch next · critical, "exploitation more likely", or top 5% EPSS · needs an update154
Showing 3 of 154All critical
| CVE | Vulnerability | Severity | CVSS | EPSS | Impact | Status | Fixed by |
|---|---|---|---|---|---|---|---|
| CVE-2026-78508 | Windows CD-ROM Driver Information Disclosure VulnerabilityWindows CD-ROM Driver | Important | 4.6 | 0.5% | Information DisclosurePhysical | KB5122871KB5122876+8 | |
| CVE-2026-78455 | Xbox Information Disclosure VulnerabilityXbox | Important | 4.3 | 0.5% | Information DisclosurePhysical | KB5122876KB5122878+4 | |
| CVE-2026-78516 | Windows Storage Information Disclosure VulnerabilityWindows Storage | Important | 4.3 | 0.5% | Information DisclosurePhysical | KB5122871KB5122876+8 | |
| CVE-2026-69904 | Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | Important | 3.5 | 0.6% | Information DisclosureNetwork | KB5002908 | |
| CVE-2026-68791 | Azure Machine Learning Information Disclosure VulnerabilityAzure Machine Learning | Critical | 8.6 | 0.5% | Information DisclosureNetwork | Service-side fix | |
| CVE-2026-78501 | Microsoft 365 Copilot Business Chat Information Disclosure VulnerabilityMicrosoft 365 Copilot's Business Chat | Critical | 8.6 | 0.5% | Information DisclosureNetwork | Revised 13 Oct | Service-side fix |
| CVE-2026-85887 | M365 Copilot Information Disclosure VulnerabilityM365 Copilot | Critical | 7.7 | 0.8% | Information DisclosureNetwork | Service-side fix | |
| CVE-2026-62906 | Microsoft Discovery Studio Information Disclosure VulnerabilityMicrosoft Discovery Studio | Critical | 7.4 | 0.9% | Information DisclosureNetwork | Service-side fix | |
| CVE-2026-55946 | Microsoft Copilot Information Disclosure VulnerabilityMicrosoft Copilot | Critical | 6.1 | 0.4% | Information DisclosureNetwork | Revised 27 Oct | Service-side fix |