Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

30 matches · most urgent first CSV Text

Fixed by KB5002904Clear

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-81947	Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office Excel	Important	7.8	0.5%	RCELocal	Revised 17 Sep	KB5002904 KB5002910+1
CVE-2026-81954	Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office Excel	Important	7.8	0.5%	RCELocal	Revised 10 Nov	KB5002904 KB5002914
CVE-2026-81956	Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office Excel	Important	7.8	0.5%	RCELocal	Revised 17 Sep	KB5002904 KB5002910+1
CVE-2026-81957	Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office Excel	Important	7.8	0.5%	RCELocal	Revised 10 Nov	KB5002904 KB5002914
CVE-2026-81960	Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office Excel	Important	7.8	0.5%	RCELocal	Revised 17 Sep	KB5002904 KB5002914
CVE-2026-81389	Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office Excel	Important	7.0	0.4%	RCELocal	Revised 17 Sep	KB5002904 KB5002914
CVE-2026-81387	Microsoft Excel Information Disclosure VulnerabilityMicrosoft Office Excel	Important	5.5	0.6%	Information DisclosureLocal	Revised 17 Sep	KB5002904 KB5002914
CVE-2026-81390	Microsoft Excel Information Disclosure VulnerabilityMicrosoft Office Excel	Important	5.5	0.5%	Information DisclosureLocal	Revised 17 Sep	KB5002904 KB5002910+1
CVE-2026-81391	Microsoft Excel Information Disclosure VulnerabilityMicrosoft Office Excel	Important	5.5	0.5%	Information DisclosureLocal	Revised 17 Sep	KB5002904 KB5002914
CVE-2026-81392	Microsoft Excel Information Disclosure VulnerabilityMicrosoft Office Excel	Important	5.5	0.5%	Information DisclosureLocal	Revised 17 Sep	KB5002904 KB5002914
CVE-2026-81393	Microsoft Excel Information Disclosure VulnerabilityMicrosoft Office Excel	Important	5.5	0.5%	Information DisclosureLocal	Revised 17 Sep	KB5002904 KB5002914
CVE-2026-81394	Microsoft Excel Information Disclosure VulnerabilityMicrosoft Office Excel	Important	5.5	0.6%	Information DisclosureLocal	Revised 10 Nov	KB5002904 KB5002914

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products