Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

690 matches · most urgent first CSV Text

Fixed by KB5122871Clear

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-69834	Windows ALPC Elevation of Privilege VulnerabilityWindows ALPC	Important	7.0	0.3%	EoPLocal		KB5122871 KB5122876+8
CVE-2026-69838	Windows Print Spooler Components Elevation of Privilege VulnerabilityWindows Print Spooler Components	Important	7.0	0.3%	EoPLocal		KB5122871 KB5122876+7
CVE-2026-69859	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityWindows USB Audio Class driver (usbaudio.sys)	Important	7.0	0.2%	EoPLocal		KB5122871 KB5122876+8
CVE-2026-69866	Windows Device Association Service Elevation of Privilege VulnerabilityWindows Device Association Service	Important	7.0	0.3%	EoPLocal		KB5122871 KB5122876+5
CVE-2026-69889	Windows Bluetooth Service Elevation of Privilege VulnerabilityWindows Bluetooth Service	Important	7.0	0.3%	EoPLocal		KB5122871 KB5122876+5
CVE-2026-69891	Windows Media Elevation of Privilege VulnerabilityWindows Media	Important	7.0	0.3%	EoPLocal		KB5122871 KB5122876+6
CVE-2026-69896	Windows Error Reporting Elevation of Privilege VulnerabilityWindows Error Reporting	Important	7.0	0.3%	EoPLocal	Revised 4 Nov	KB5122871 KB5124008+1
CVE-2026-69911	Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows Search Component	Important	7.0	0.3%	EoPLocal		KB5122871 KB5122876+8
CVE-2026-70067	Windows Win32k Elevation of Privilege VulnerabilityWindows Win32 Kernel Subsystem	Important	7.0	0.3%	EoPLocal		KB5122871 KB5122876+8
CVE-2026-70283	Windows Win32k Elevation of Privilege VulnerabilityWindows Win32K	Important	7.0	0.2%	EoPLocal		KB5122871 KB5122876+8
CVE-2026-70562	Windows Audio Service Elevation of Privilege VulnerabilityWindows Audio Service	Important	7.0	0.3%	EoPLocal	Revised 30 Sep	KB5122871 KB5122876+8
CVE-2026-70565	Windows AF_UNIX Socket Provider Elevation of Privilege VulnerabilityWindows AF_UNIX Socket Provider	Important	7.0	0.3%	EoPLocal		KB5122871 KB5122876+8

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products