Security

CVE detail from Microsoft's public MSRC CVRF API, cross-checked with CISA's Known Exploited Vulnerabilities catalog. Counts cover Microsoft-issued CVEs; republished third-party CVEs such as Chromium or Linux are hidden unless you include them.

Security Update Guide CISA KEV

CVEs · all collected releases

34 matches · most urgent first CSV Text

Fixed by KB5002927Clear

CVE	Vulnerability	Severity	CVSS	Impact	Fixed by
CVE-2026-97755	Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft Office Excel	Critical	8.8	RCENetwork	KB5002927 KB5002928
CVE-2026-102866	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Critical	8.1	EoPNetwork	KB5002927
CVE-2026-102860	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	8.8	EoPNetwork	KB5002927
CVE-2026-102861	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	8.8	EoPNetwork	KB5002927
CVE-2026-102862	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	8.8	EoPNetwork	KB5002927
CVE-2026-102863	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	8.8	EoPNetwork	KB5002927
CVE-2026-69943	Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint	Important	8.8	RCENetwork	KB5002927
CVE-2026-70246	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	8.8	EoPNetwork	KB5002927
CVE-2026-70266	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	8.8	EoPNetwork	KB5002927
CVE-2026-85900	Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint	Important	8.8	RCENetwork	KB5002927
CVE-2026-88155	Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint	Important	8.8	RCENetwork	KB5002927
CVE-2026-88166	Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft Office SharePoint	Important	8.8	RCENetwork	KB5002927

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products