Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

18 matches · most urgent first CSV Text

Fixed by KB5002908Clear

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-123390	Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint	Important	8.8	—	RCENetwork		KB5002908
CVE-2026-123391	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	8.8	—	EoPNetwork		KB5002908
CVE-2026-69268	Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint	Important	8.8	0.8%	RCENetwork		KB5002908
CVE-2026-69273	Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint	Important	8.8	0.8%	RCENetwork		KB5002908
CVE-2026-69282	Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint	Important	8.8	0.8%	RCENetwork	Revised 24 Sep	KB5002908
CVE-2026-69464	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	8.8	0.9%	EoPNetwork		KB5002908
CVE-2026-69465	Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint	Important	8.8	0.8%	RCENetwork	Revised 10 Nov	KB5002908
CVE-2026-69716	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	8.8	1.0%	EoPNetwork		KB5002908
CVE-2026-69724	Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint	Important	8.8	0.8%	RCENetwork	Revised 17 Sep	KB5002908
CVE-2026-69804	Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint	Important	7.5	0.5%	RCENetwork		KB5002908
CVE-2026-69402	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	7.3	0.4%	SpoofingNetwork		KB5002908
CVE-2026-69417	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	7.3	0.4%	SpoofingNetwork		KB5002908

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products