Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

2592 matches in Windows · most urgent first CSV Text

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-119992	Windows HTTP.sys Elevation of Privilege VulnerabilityWindows HTTP.sys	Important	7.0	0.3%	EoPLocal		KB5131077 KB5131080+8
CVE-2026-121670	Windows Overlay Filter Elevation of Privilege VulnerabilityWindows Overlay Filter	Important	7.0	0.2%	EoPLocal		KB5131077 KB5131080+8
CVE-2026-121671	Windows Audio Service Elevation of Privilege VulnerabilityWindows Audio Service	Important	7.0	0.3%	EoPLocal		KB5131077 KB5131080+6
CVE-2026-122170	Windows Win32k Elevation of Privilege VulnerabilityWindows Win32K	Important	7.0	0.2%	EoPLocal		KB5131077 KB5131080+8
CVE-2026-122174	Windows Task Scheduler Elevation of Privilege VulnerabilityWindows Task Scheduler	Important	7.0	0.3%	EoPLocal		KB5131077 KB5131080+8
CVE-2026-122175	Windows Autopilot Elevation of Privilege VulnerabilityWindows Autopilot	Important	7.0	0.3%	EoPLocal		KB5132059
CVE-2026-122179	Windows Internet Connection Sharing (ICS) Elevation of Privilege VulnerabilityWindows Internet Connection Sharing (ICS)	Important	7.0	0.3%	EoPLocal		KB5131077 KB5131080+8
CVE-2026-122182	Windows Maps Elevation of Privilege VulnerabilityWindows Maps	Important	7.0	0.3%	EoPLocal		KB5131077 KB5131080+8
CVE-2026-123389	Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege VulnerabilityQuality Windows Audio/Video Experience (QWAVE) service	Important	7.0	0.3%	EoPLocal		KB5131077 KB5131080+8
CVE-2026-124224	PowerShell Elevation of Privilege VulnerabilityWindows PowerShell	Important	7.0	0.2%	EoPLocal		KB5131077 KB5131085+8
CVE-2026-50349	Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityWindows Ancillary Function Driver for WinSock	Important	7.0	0.2%	EoPLocal		KB5122871 KB5122876+8
CVE-2026-62694	Windows Installer Elevation of Privilege VulnerabilityWindows Installer	Important	7.0	0.3%	EoPLocal	Revised 10 Nov	KB5122871 KB5122876+8

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products