Security

CVE detail from Microsoft's public MSRC CVRF API, cross-checked with CISA's Known Exploited Vulnerabilities catalog. Counts cover Microsoft-issued CVEs; republished third-party CVEs such as Chromium or Linux are hidden unless you include them.

Security Update Guide CISA KEV

CVEs · all collected releases

34 matches · most urgent first CSV Text

Fixed by KB5002927Clear

CVE	Vulnerability	Severity	CVSS	Impact	Fixed by
CVE-2026-88198	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	8.8	EoPNetwork	KB5002927
CVE-2026-88200	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	8.8	EoPNetwork	KB5002927
CVE-2026-96044	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	8.8	EoPNetwork	KB5002927
CVE-2026-70202	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	7.5	EoPNetwork	KB5002927
CVE-2026-70251	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	7.5	EoPNetwork	KB5002927
CVE-2026-88206	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	7.5	EoPNetwork	KB5002927
CVE-2026-105013	Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint	Important	7.4	RCENetwork	KB5002927
CVE-2026-88204	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	7.3	SpoofingNetwork	KB5002927
CVE-2026-70267	Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint	Important	7.2	RCENetwork	KB5002927
CVE-2026-102865	Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint	Important	6.5	Information DisclosureNetwork	KB5002927
CVE-2026-105719	Microsoft SharePoint Server Information Disclosure VulnerabilityMicrosoft Office SharePoint	Important	6.5	Information DisclosureNetwork	KB5002927
CVE-2026-70259	Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint	Important	6.5	Information DisclosureNetwork	KB5002927

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products