Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

614 matches · most urgent first CSV Text

Fixed by KB5122880Clear

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-73006	DirectWrite Remote Code Execution VulnerabilityMicrosoft Graphics Component	Critical	8.8	0.8%	RCENetwork	Revised 9 Oct	KB5122871 KB5122876+6
CVE-2026-73013	Windows Imaging Component Remote Code Execution VulnerabilityWindows Imaging Component	Critical	8.8	0.8%	RCENetwork	Revised 28 Oct	KB5122871 KB5122876+8
CVE-2026-73018	Graphic Fonts Remote Code Execution VulnerabilityGraphic Fonts	Critical	8.8	0.8%	RCENetwork		KB5122871 KB5122876+8
CVE-2026-73023	Windows Imaging Component Remote Code Execution VulnerabilityWindows Imaging Component	Critical	8.8	0.8%	RCENetwork		KB5122871 KB5122876+8
CVE-2026-77495	Windows Imaging Component Remote Code Execution VulnerabilityWindows Imaging Component	Critical	8.8	0.8%	RCENetwork		KB5122871 KB5122876+8
CVE-2026-77504	Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft Office Word	Critical	8.8	0.8%	RCENetwork		KB5122871 KB5122876+8
CVE-2026-80083	Windows Hyper-V Remote Code Execution VulnerabilityWindows Hyper-V	Critical	8.8	0.3%	RCELocal		KB5122871 KB5122880+3
CVE-2026-81955	Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Graphics Component	Critical	8.8	0.8%	RCENetwork	Revised 17 Sep	KB5002916 KB5122871+9
CVE-2026-69820	Windows Hello Elevation of Privilege VulnerabilityWindows Hello	Critical	8.2	0.3%	EoPLocal		KB5122878 KB5122880+2
CVE-2026-69846	Windows Secure Kernel Mode Elevation of Privilege VulnerabilityWindows Secure Kernel Mode	Critical	8.2	0.3%	EoPLocal		KB5122871 KB5122876+6
CVE-2026-69874	Windows ALPC Elevation of Privilege VulnerabilityWindows ALPC	Critical	8.2	0.3%	EoPLocal		KB5122871 KB5122876+5
CVE-2026-69906	Windows Secure Kernel Mode Elevation of Privilege VulnerabilityWindows Secure Kernel Mode	Critical	8.2	0.3%	EoPLocal		KB5122871 KB5122876+6

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products