Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
998Microsoft CVEsreleased Tue 8 Sep
132Critical105 need an update · 27 fixed service-side
2Exploited in the wild
0Publicly disclosed
2In CISA KEV
249Revised since release
Act first · September 2026
Exploited, KEV-listed, or publicly disclosedPatch next · critical, "exploitation more likely", or top 5% EPSS · needs an update154
Showing 3 of 154All critical
| CVE | Vulnerability | Severity | CVSS | EPSS | Impact | Status | Fixed by |
|---|---|---|---|---|---|---|---|
| CVE-2026-69562 | Microsoft SQL Server Information Disclosure VulnerabilitySQL Server | Important | 6.5 | 0.9% | Information DisclosureNetwork | KB5122772KB5122773+2 | |
| CVE-2026-69626 | Microsoft Office Information Disclosure VulnerabilityMicrosoft Office | Important | 6.5 | 0.9% | Information DisclosureNetwork | Revised 17 Sep | KB5002916 |
| CVE-2026-69636 | Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | Important | 6.5 | 1.0% | Information DisclosureNetwork | Revised 24 Sep | KB5002908 |
| CVE-2026-69683 | Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | Important | 6.5 | 0.8% | Information DisclosureNetwork | KB5002908 | |
| CVE-2026-69719 | Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Office Word | Important | 6.5 | 0.9% | Information DisclosureNetwork | Revised 17 Sep | KB5002923 |
| CVE-2026-69734 | Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Office Word | Important | 6.5 | 0.9% | Information DisclosureNetwork | Revised 17 Sep | KB5002916 |
| CVE-2026-69739 | Microsoft Office Information Disclosure VulnerabilityMicrosoft Office | Important | 6.5 | 0.9% | Information DisclosureNetwork | Revised 17 Sep | KB5002916 |
| CVE-2026-70019 | Windows Compressed Folder Information Disclosure VulnerabilityWindows Compressed Folder | Important | 6.5 | 1.0% | Information DisclosureNetwork | KB5122871KB5122880+2 | |
| CVE-2026-72938 | Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft Office PowerPoint | Important | 6.5 | 0.9% | Information DisclosureNetwork | Revised 17 Sep | — |
| CVE-2026-72942 | Windows Spaceport.sys Information Disclosure VulnerabilityWindows Spaceport.sys | Important | 6.5 | 0.9% | Information DisclosureNetwork | KB5122871KB5122876+7 | |
| CVE-2026-72956 | Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft Office PowerPoint | Important | 6.5 | 0.9% | Information DisclosureNetwork | — | |
| CVE-2026-72974 | Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft Office Excel | Important | 6.5 | 0.9% | Information DisclosureNetwork | Revised 10 Nov | KB5002916 |