Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

2592 matches in Windows · most urgent first CSV Text

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-96975	Role: DNS Server Denial of Service VulnerabilityRole: DNS Server	Important	5.9	0.8%	DoSNetwork		KB5131077 KB5131080+3
CVE-2026-68874	Windows Program Compatibility Assistant Service Information Disclosure VulnerabilityWindows Program Compatibility Assistant Service	Important	5.7	0.9%	Information DisclosureNetwork		KB5122871 KB5122876+8
CVE-2026-69317	Windows Remote Desktop Client Information Disclosure VulnerabilityRemote Desktop Client	Important	5.7	0.9%	Information DisclosureNetwork		KB5122871 KB5122876+8
CVE-2026-69349	Windows Management Instrumentation Information Disclosure VulnerabilityWindows Management Instrumentation	Important	5.7	0.9%	Information DisclosureNetwork		KB5122871 KB5122876+8
CVE-2026-69372	Windows Network File System Denial of Service VulnerabilityWindows Network File System	Important	5.7	0.9%	DoSNetwork		KB5122871 KB5122876+4
CVE-2026-69393	Windows Spaceport.sys Information Disclosure VulnerabilityWindows Spaceport.sys	Important	5.7	0.9%	Information DisclosureNetwork		KB5122871 KB5122876+6
CVE-2026-69405	Windows DHCP Server Denial of Service VulnerabilityWindows DHCP Server	Important	5.7	0.6%	DoSAdjacent	Revised 11 Sep	KB5122871 KB5122876+4
CVE-2026-69416	Windows DHCP Server Denial of Service VulnerabilityWindows DHCP Server	Important	5.7	0.6%	DoSAdjacent	Revised 15 Sep	KB5122871 KB5122876+4
CVE-2026-69507	Microsoft Windows Search Component Information Disclosure VulnerabilityMicrosoft Windows Search Component	Important	5.7	0.9%	Information DisclosureNetwork		KB5122871 KB5122880+3
CVE-2026-69552	Windows Print Spooler Components Information Disclosure VulnerabilityWindows Print Spooler Components	Important	5.7	0.9%	Information DisclosureNetwork		KB5122871 KB5122876+8
CVE-2026-69569	Windows Print Spooler Components Denial of Service VulnerabilityWindows Print Spooler Components	Important	5.7	0.9%	DoSNetwork		KB5122871 KB5122876+8
CVE-2026-69572	Windows SMB Client Information Disclosure VulnerabilityWindows SMB Client	Important	5.7	0.9%	Information DisclosureNetwork	Revised 22 Sep	KB5122871 KB5122876+8

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products