Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

30 matches · most urgent first CSV Text

Fixed by KB5002923Clear

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-78504	Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft Office Word	Important	8.8	0.8%	RCENetwork	Revised 17 Sep	KB5002923
CVE-2026-78511	Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft Office Word	Important	8.8	0.8%	RCENetwork	Revised 17 Sep	KB5002923
CVE-2026-78514	Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft Office Word	Important	8.8	0.8%	RCENetwork	Revised 17 Sep	KB5002923
CVE-2026-78517	Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft Office Word	Important	8.8	0.8%	RCENetwork	Revised 21 Sep	KB5002923
CVE-2026-78521	Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft Office Word	Important	8.8	0.8%	RCENetwork	Revised 17 Sep	KB5002923
CVE-2026-80080	Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft Office Word	Important	8.8	0.8%	RCENetwork	Revised 17 Sep	KB5002923
CVE-2026-80085	Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft Office Word	Important	8.8	0.8%	RCENetwork	Revised 17 Sep	KB5002923
CVE-2026-69719	Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Office Word	Important	6.5	0.9%	Information DisclosureNetwork	Revised 17 Sep	KB5002923
CVE-2026-77911	Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Office Word	Important	6.5	0.9%	Information DisclosureNetwork	Revised 10 Nov	KB5002923
CVE-2026-78502	Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Office Word	Important	6.5	0.9%	Information DisclosureNetwork	Revised 7 Oct	KB5002923
CVE-2026-78503	Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Office Word	Important	6.5	0.9%	Information DisclosureNetwork	Revised 17 Sep	KB5002923
CVE-2026-78522	Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Office Word	Important	6.5	0.9%	Information DisclosureNetwork		KB5002923

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products