Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Fixed by KB5002908Clear
| CVE | Vulnerability | Severity | CVSS | EPSS | Impact | Status | Fixed by |
|---|---|---|---|---|---|---|---|
| CVE-2026-69409 | Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | Important | 6.5 | 1.0% | Information DisclosureNetwork | Revised 10 Nov | KB5002908 |
| CVE-2026-69636 | Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | Important | 6.5 | 1.0% | Information DisclosureNetwork | Revised 24 Sep | KB5002908 |
| CVE-2026-69683 | Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | Important | 6.5 | 0.8% | Information DisclosureNetwork | KB5002908 | |
| CVE-2026-69690 | Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint | Important | 4.6 | 0.4% | SpoofingNetwork | KB5002908 | |
| CVE-2026-69615 | Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint | Important | 3.5 | 0.4% | SpoofingNetwork | KB5002908 | |
| CVE-2026-69904 | Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint | Important | 3.5 | 0.6% | Information DisclosureNetwork | KB5002908 |
Advisories
MSRC guidance without a CVE of its own · 1 advisory
Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.