Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

690 matches · most urgent first CSV Text

Fixed by KB5122871Clear

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-69548	Windows RNDIS Information Disclosure VulnerabilityWindows RNDIS	Important	4.6	0.5%	Information DisclosurePhysical	Revised 10 Nov	KB5122871 KB5122876+8
CVE-2026-78452	Microsoft Windows SCSI Class System File Information Disclosure VulnerabilityMicrosoft Windows SCSI Class System File	Important	4.6	0.5%	Information DisclosurePhysical		KB5122871 KB5122876+5
CVE-2026-78508	Windows CD-ROM Driver Information Disclosure VulnerabilityWindows CD-ROM Driver	Important	4.6	0.5%	Information DisclosurePhysical		KB5122871 KB5122876+8
CVE-2026-69713	Windows Secure Boot Security Feature Bypass VulnerabilityWindows Secure Boot	Important	4.4	0.4%	SFBLocal		KB5122871 KB5122876+8
CVE-2026-73019	Windows URL Moniker Security Feature Bypass VulnerabilityWindows URL Moniker	Important	4.3	0.8%	SFBNetwork		KB5122871 KB5122876+8
CVE-2026-78516	Windows Storage Information Disclosure VulnerabilityWindows Storage	Important	4.3	0.5%	Information DisclosurePhysical		KB5122871 KB5122876+8

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products