Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

651 matches · most urgent first CSV Text

Fixed by KB5122882Clear

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-68890	Microsoft Standard XPS Elevation of Privilege VulnerabilityMicrosoft Standard XPS	Important	7.8	0.3%	EoPLocal		KB5122871 KB5122876+8
CVE-2026-68892	Microsoft Standard XPS Elevation of Privilege VulnerabilityMicrosoft Standard XPS	Important	7.8	0.3%	EoPLocal		KB5122871 KB5122876+8
CVE-2026-68896	Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows Search Component	Important	7.8	0.4%	EoPLocal		KB5122871 KB5122880+3
CVE-2026-69265	Windows NTFS Elevation of Privilege VulnerabilityWindows NTFS	Important	7.8	0.3%	EoPLocal	Revised 6 Oct	KB5122871 KB5122876+8
CVE-2026-69269	Microsoft Standard XPS Elevation of Privilege VulnerabilityMicrosoft Standard XPS	Important	7.8	0.3%	EoPLocal		KB5122871 KB5122876+8
CVE-2026-69270	Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityWindows USB Audio Class driver (usbaudio.sys)	Important	7.8	0.3%	EoPLocal	Revised 8 Oct	KB5122871 KB5122876+8
CVE-2026-69277	Microsoft Local Security Authority (LSA) Server Elevation of Privilege VulnerabilityMicrosoft Local Security Authority Server (lsasrv)	Important	7.8	0.3%	EoPLocal	Revised 10 Nov	KB5122871 KB5122876+8
CVE-2026-69283	Windows CD-ROM Driver Elevation of Privilege VulnerabilityWindows CD-ROM Driver	Important	7.8	0.3%	EoPLocal	Revised 16 Oct	KB5122871 KB5122876+8
CVE-2026-69284	Windows DCOM Server Elevation of Privilege VulnerabilityWindows DCOM Server	Important	7.8	0.3%	EoPLocal	Revised 27 Oct	KB5122871 KB5122876+8
CVE-2026-69289	Windows Setup Files Cleanup Elevation of Privilege VulnerabilityWindows Setup Files Cleanup	Important	7.8	0.4%	EoPLocal		KB5122871 KB5122876+8
CVE-2026-69290	Windows Storage Spaces Controller Elevation of Privilege VulnerabilityWindows Storage Spaces Controller	Important	7.8	0.3%	EoPLocal		KB5122871 KB5122876+8
CVE-2026-69293	Windows Biometric Service Elevation of Privilege VulnerabilityWindows Biometric Service	Important	7.8	0.3%	EoPLocal		KB5122871 KB5122876+6

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products