Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Fixed by KB5002923Clear
| CVE | Vulnerability | Severity | CVSS | EPSS | Impact | Status | Fixed by |
|---|---|---|---|---|---|---|---|
| CVE-2026-80079 | Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Office Word | Important | 6.5 | 0.9% | Information DisclosureNetwork | KB5002923 | |
| CVE-2026-80090 | Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Office Word | Important | 6.5 | 0.9% | Information DisclosureNetwork | Revised 17 Sep | KB5002923 |
| CVE-2026-78506 | Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Office Word | Important | 5.5 | 0.5% | Information DisclosureLocal | Revised 17 Sep | KB5002923 |
| CVE-2026-83949 | Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Office Word | Important | 5.5 | 0.5% | Information DisclosureLocal | KB5002923 | |
| CVE-2026-83951 | Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Office Word | Important | 5.5 | 0.5% | Information DisclosureLocal | KB5002923 | |
| CVE-2026-72976 | Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Office Word | Important | 5.0 | 0.5% | Information DisclosureLocal | Revised 17 Sep | KB5002923 |
Advisories
MSRC guidance without a CVE of its own · 1 advisory
Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.