Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

651 matches · most urgent first CSV Text

Fixed by KB5122882Clear

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-68849	Windows Bluetooth Port Driver Information Disclosure VulnerabilityWindows Bluetooth Port Driver	Important	4.7	0.3%	Information DisclosureLocal		KB5122871 KB5122878+4
CVE-2026-68891	Microsoft Standard XPS Information Disclosure VulnerabilityMicrosoft Standard XPS	Important	4.7	0.3%	Information DisclosureLocal		KB5122871 KB5122876+8
CVE-2026-69316	Windows Overlay Filter Information Disclosure VulnerabilityWindows Overlay Filter	Important	4.7	0.3%	Information DisclosureLocal	Revised 4 Nov	KB5122871 KB5122876+6
CVE-2026-69483	Windows Image Acquisition Information Disclosure VulnerabilityWindows Image Acquisition	Important	4.7	0.3%	Information DisclosureLocal		KB5122871 KB5122876+8
CVE-2026-69792	Windows Win32K Security Feature Bypass VulnerabilityWindows Win32K	Important	4.7	0.2%	SFBLocal		KB5122871 KB5122876+6
CVE-2026-69853	Win32k Information Disclosure VulnerabilityWindows Win32K	Important	4.7	0.3%	Information DisclosureLocal	Revised 4 Nov	KB5122871 KB5122876+8
CVE-2026-69895	Windows Spaceport.sys Information Disclosure VulnerabilityWindows Spaceport.sys	Important	4.7	0.3%	Information DisclosureLocal		KB5122871 KB5122876+8
CVE-2026-72931	Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service VulnerabilityWindows Secure Socket Tunneling Protocol (SSTP)	Important	4.7	0.3%	DoSLocal		KB5122871 KB5122876+8
CVE-2026-69381	Windows Storage Port Driver Information Disclosure VulnerabilityWindows Storage Port Driver	Important	4.6	0.5%	Information DisclosurePhysical		KB5122871 KB5122876+8
CVE-2026-69548	Windows RNDIS Information Disclosure VulnerabilityWindows RNDIS	Important	4.6	0.5%	Information DisclosurePhysical	Revised 10 Nov	KB5122871 KB5122876+8
CVE-2026-78452	Microsoft Windows SCSI Class System File Information Disclosure VulnerabilityMicrosoft Windows SCSI Class System File	Important	4.6	0.5%	Information DisclosurePhysical		KB5122871 KB5122876+5
CVE-2026-78508	Windows CD-ROM Driver Information Disclosure VulnerabilityWindows CD-ROM Driver	Important	4.6	0.5%	Information DisclosurePhysical		KB5122871 KB5122876+8

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products