Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

2592 matches in Windows · most urgent first CSV Text

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Fixed by
CVE-2026-113754	Windows FileCrypt Driver Information Disclosure VulnerabilityWindows FileCrypt Driver	Important	4.7	0.3%	Information DisclosureLocal	KB5131077 KB5131080+8
CVE-2026-113764	Windows Projected File System Information Disclosure VulnerabilityWindows Projected File System	Important	4.7	0.2%	Information DisclosureLocal	KB5131077 KB5131080+7
CVE-2026-113772	Windows Redirected Drive Buffering Information Disclosure VulnerabilityWindows Redirected Drive Buffering	Important	4.7	0.3%	Information DisclosureLocal	KB5131077 KB5131080+8
CVE-2026-113815	Microsoft PowerShell Security Feature Bypass VulnerabilityWindows PowerShell	Important	4.7	1.9%	SFBLocal	KB5131077 KB5131080+8
CVE-2026-119385	Windows Hyper-V Denial of Service VulnerabilityWindows Hyper-V	Important	4.7	0.3%	DoSLocal	KB5131077 KB5131080+8
CVE-2026-119836	Windows Management Services Information Disclosure VulnerabilityWindows Management Services	Important	4.7	0.4%	Information DisclosureLocal	KB5131077 KB5131080+6
CVE-2026-119838	Windows Installer Information Disclosure VulnerabilityWindows Installer	Important	4.7	0.3%	Information DisclosureLocal	KB5131077 KB5131080+8
CVE-2026-119841	Windows Graphics Kernel Information Disclosure VulnerabilityWindows Graphics Kernel	Important	4.7	0.3%	Information DisclosureLocal	KB5131077 KB5131080+7
CVE-2026-119910	Win32k Information Disclosure VulnerabilityWindows Win32K	Important	4.7	0.3%	Information DisclosureLocal	KB5131077 KB5131080+8
CVE-2026-119942	HTTP.sys Information Disclosure VulnerabilityWindows HTTP.sys	Important	4.7	0.4%	Information DisclosureLocal	KB5131077 KB5131080+8
CVE-2026-68849	Windows Bluetooth Port Driver Information Disclosure VulnerabilityWindows Bluetooth Port Driver	Important	4.7	0.3%	Information DisclosureLocal	KB5122871 KB5122878+4
CVE-2026-68891	Microsoft Standard XPS Information Disclosure VulnerabilityMicrosoft Standard XPS	Important	4.7	0.3%	Information DisclosureLocal	KB5122871 KB5122876+8

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products