Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 275/275 feeds/APIs · 469/469 docs · 9/9 advisories · checked 20:01 UTC Customize Public modeDiscuss ChangeIntel on Discord

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

October 2026: 1474 CVEs · 94 critical · 1 exploited · 1 in CISA KEV

Act first · November 2026

Exploited, KEV-listed, or publicly disclosed
CVE-2026-124194ModerateExploitedCISA KEV · due 24 NovSpoofingNetwork
Microsoft Outlook Spoofing Vulnerability
CVSS 6.5 No KB listed
Patch next · critical, "exploitation more likely", or top 5% EPSS · needs an update100
CVSS 8.8 KB5133453
Showing 3 of 100All critical

CVEs · November 2026

157 matches · most urgent first CSVText
CVE Vulnerability Severity CVSSImpact StatusFixed by
CVE-2026-68783 Microsoft SQL Server Information Disclosure VulnerabilitySQL Server Important 6.5Information DisclosureNetwork
KB5129299KB5132748
CVE-2026-96018 Windows AppContainer Information Disclosure VulnerabilityWindows AppContainer Important 6.5Information DisclosureLocal
KB5131077KB5131080+8
CVE-2026-109485 Microsoft 365 Agents SDK Information Disclosure VulnerabilityMicrosoft 365 Agents SDK Important 6.3Information DisclosureNetwork
—
CVE-2026-109476 ASP.NET Core Information Disclosure VulnerabilityASP.NET Core Important 6.1Information DisclosureNetwork
KB5135241KB5135242+1
CVE-2026-121669 PowerShell Information Disclosure VulnerabilityMicrosoft PowerShell Core Important 6.1Information DisclosureNetwork
—
CVE-2026-121674 PowerShell Information Disclosure VulnerabilityMicrosoft PowerShell Core Important 6.1Information DisclosureNetwork
—
CVE-2026-121675 PowerShell Information Disclosure VulnerabilityMicrosoft PowerShell Core Important 6.1Information DisclosureNetwork
—
CVE-2026-122985 Microsoft PowerShell Information Disclosure VulnerabilityMicrosoft PowerShell Important 6.1Information DisclosureNetwork
—
CVE-2026-112757 Windows Secure Kernel Mode Information Disclosure VulnerabilityWindows Secure Kernel Mode Important 6.0Information DisclosureLocal
KB5131077KB5131080+8
CVE-2026-105557 Windows DHCP Server Information Disclosure VulnerabilityWindows DHCP Server Important 5.9Information DisclosureNetwork
KB5131077KB5131080+3
CVE-2026-108425 Windows DNS Information Disclosure VulnerabilityWindows DNS Important 5.9Information DisclosureNetwork
KB5131077KB5131080+3
CVE-2026-114150 ASP.NET Core Information Disclosure VulnerabilityASP.NET Core Important 5.9Information DisclosureNetwork
—
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 10 Nov 20:01 UTC · 275 of 275 readable · 273 fully read · documentation 469/469 current