Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Fixed by KB5002898Clear
| CVE | Vulnerability | Severity | CVSS | EPSS | Impact | Status | Fixed by |
|---|---|---|---|---|---|---|---|
| CVE-2026-78526 | Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft Office Word | Important | 8.8 | 0.8% | RCENetwork | Revised 21 Sep | KB5002898 |
| CVE-2026-80084 | Microsoft Office Outlook Information Disclosure VulnerabilityMicrosoft Office Outlook | Important | 6.5 | 0.9% | Information DisclosureNetwork | KB5002898 |
Advisories
MSRC guidance without a CVE of its own · 1 advisory
Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.