Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

24 matches · most urgent first CSV Text

Fixed by KB5002945Clear

CVE	Vulnerability	Severity	CVSS	Impact	Fixed by
CVE-2026-109497	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	7.3	SpoofingNetwork	KB5002945
CVE-2026-109504	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	7.3	SpoofingNetwork	KB5002945
CVE-2026-110045	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	7.3	SpoofingNetwork	KB5002945
CVE-2026-110065	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	7.3	SpoofingNetwork	KB5002945
CVE-2026-111300	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	7.3	SpoofingNetwork	KB5002945
CVE-2026-111303	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	7.3	SpoofingNetwork	KB5002945
CVE-2026-109495	Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft Office SharePoint	Important	6.6	EoPNetwork	KB5002945
CVE-2026-109455	Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint	Important	6.5	Information DisclosureNetwork	KB5002945
CVE-2026-110057	Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint	Important	6.5	Information DisclosureNetwork	KB5002945
CVE-2026-124210	Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft Office SharePoint	Important	6.5	Information DisclosureNetwork	KB5002945
CVE-2026-112736	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	5.3	SpoofingNetwork	KB5002945
CVE-2026-109456	Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft Office SharePoint	Important	4.6	SpoofingNetwork	KB5002945

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products