Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
1474Microsoft CVEsreleased Tue 13 Oct
94Critical81 need an update · 13 fixed service-side
1Exploited in the wild
1Publicly disclosed
1In CISA KEV
256Revised since release
September 2026: 998 CVEs · 132 critical · 2 exploited · 2 in CISA KEV
Act first · October 2026
Exploited, KEV-listed, or publicly disclosedPatch next · critical, "exploitation more likely", or top 5% EPSS · needs an update183
Showing 3 of 183All critical
| CVE | Vulnerability | Severity | CVSS | EPSS | Impact | Status | Fixed by |
|---|---|---|---|---|---|---|---|
| CVE-2026-88169 | Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Office Word | Important | 6.5 | 0.8% | Information DisclosureNetwork | Revised 15 Oct | — |
| CVE-2026-88172 | Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft Office Excel | Important | 6.5 | 0.9% | Information DisclosureNetwork | — | |
| CVE-2026-88175 | Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft Office Excel | Important | 6.5 | 0.8% | Information DisclosureNetwork | Revised 15 Oct | — |
| CVE-2026-88183 | Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft Office PowerPoint | Important | 6.5 | 0.9% | Information DisclosureNetwork | Revised 15 Oct | — |
| CVE-2026-88184 | Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft Office Excel | Important | 6.5 | 0.8% | Information DisclosureNetwork | Revised 15 Oct | — |
| CVE-2026-88190 | Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft Office Excel | Important | 6.5 | 0.9% | Information DisclosureNetwork | — | |
| CVE-2026-88192 | Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft Office Excel | Important | 6.5 | 0.9% | Information DisclosureNetwork | Revised 15 Oct | — |
| CVE-2026-88195 | Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft Office Excel | Important | 6.5 | 0.8% | Information DisclosureNetwork | — | |
| CVE-2026-88201 | Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft Office Excel | Important | 6.5 | 0.6% | Information DisclosureNetwork | — | |
| CVE-2026-88203 | Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft Office PowerPoint | Important | 6.5 | 0.9% | Information DisclosureNetwork | — | |
| CVE-2026-94506 | Microsoft Office Access Information Disclosure VulnerabilityMicrosoft Office Access | Important | 6.5 | 0.9% | Information DisclosureNetwork | — | |
| CVE-2026-96206 | Windows Subsystem for Linux Information Disclosure VulnerabilityWindows Subsystem for Linux | Important | 6.5 | 0.4% | Information DisclosureLocal | — |
Advisories · October 2026
MSRC guidance without a CVE of its own · 1 advisory
Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.