Security

CVE detail from Microsoft's public MSRC CVRF API, cross-checked with CISA's Known Exploited Vulnerabilities catalog. Counts cover Microsoft-issued CVEs; republished third-party CVEs such as Chromium or Linux are hidden unless you include them.

Security Update Guide CISA KEV

CVEs · all collected releases

34 matches · most urgent first CSV Text

Fixed by KB5002927Clear

CVE	Vulnerability	Severity	CVSS	Impact	Fixed by
CVE-2026-70298	Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint	Important	6.5	Information DisclosureNetwork	KB5002927
CVE-2026-85932	Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint	Important	6.5	Information DisclosureNetwork	KB5002927
CVE-2026-105713	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	5.7	SpoofingAdjacent	KB5002927
CVE-2026-70217	Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint	Important	4.9	Information DisclosureNetwork	KB5002927
CVE-2026-102859	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	4.6	SpoofingNetwork	KB5002927
CVE-2026-102864	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	4.6	SpoofingNetwork	KB5002927
CVE-2026-88208	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	4.6	SpoofingNetwork	KB5002927
CVE-2026-88209	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	4.6	SpoofingNetwork	KB5002927
CVE-2026-105720	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	4.3	EoPNetwork	KB5002927
CVE-2026-88163	Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint	Unrated	8.8	NAVNetwork	KB5002927

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products