Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Fixed by KB5002920Clear
| CVE | Vulnerability | Severity | CVSS | EPSS | Impact | Status | Fixed by |
|---|---|---|---|---|---|---|---|
| CVE-2026-69678 | Microsoft Office PowerPoint Remote Code Execution VulnerabilityMicrosoft Office PowerPoint | Critical | 8.8 | 0.8% | RCENetwork | Revised 17 Sep | KB5002920 |
| CVE-2026-69767 | Microsoft Office PowerPoint Remote Code Execution VulnerabilityMicrosoft Office PowerPoint | Critical | 8.8 | 0.8% | RCENetwork | Revised 10 Nov | KB5002920 |
| CVE-2026-69797 | Microsoft Office PowerPoint Remote Code Execution VulnerabilityMicrosoft Office PowerPoint | Critical | 8.8 | 0.8% | RCENetwork | Revised 17 Sep | KB5002920 |
| CVE-2026-72975 | Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft Office PowerPoint | Important | 6.5 | 0.9% | Information DisclosureNetwork | Revised 17 Sep | KB5002920 |
| CVE-2026-72977 | Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft Office PowerPoint | Important | 6.5 | 1.0% | Information DisclosureNetwork | Revised 17 Sep | KB5002920 |
| CVE-2026-78513 | Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft Office PowerPoint | Important | 5.5 | 0.5% | Information DisclosureLocal | Revised 17 Sep | KB5002920 |
Advisories
MSRC guidance without a CVE of its own · 1 advisory
Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.