Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

2592 matches in Windows · most urgent first CSV Text

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-83909	Windows Win32 Kernel Subsystem Information Disclosure VulnerabilityWindows Win32 Kernel Subsystem	Important	4.7	0.4%	Information DisclosureLocal	Fix has a known issue	KB5126646 KB5126651+8
CVE-2026-83925	Windows Kernel Information Disclosure VulnerabilityWindows Kernel	Important	4.7	0.7%	Information DisclosureLocal	Fix has a known issue	KB5126646 KB5126651+7
CVE-2026-84009	Windows Projected File System Tampering VulnerabilityWindows Projected File System	Important	4.7	0.2%	TamperingLocal	Fix has a known issue	KB5126646 KB5126651+5
CVE-2026-85866	Windows ALPC Information Disclosure VulnerabilityWindows ALPC	Important	4.7	0.4%	Information DisclosureLocal	Fix has a known issue	KB5126646 KB5126651+5
CVE-2026-96048	Windows Graphics Kernel Information Disclosure VulnerabilityWindows Graphics Kernel	Important	4.7	0.2%	Information DisclosureLocal		KB5131077 KB5131080+8
CVE-2026-96093	Windows Internet (wininet.dll) Information Disclosure VulnerabilityWindows Internet (wininet.dll)	Important	4.7	0.3%	Information DisclosureLocal		KB5131077 KB5131080+8
CVE-2026-96144	Windows Graphics Kernel Information Disclosure VulnerabilityWindows Graphics Kernel	Important	4.7	0.3%	Information DisclosureLocal	Revised 13 Nov	KB5131077 KB5131080+8
CVE-2026-96853	Windows Win32 Kernel Subsystem Information Disclosure VulnerabilityWindows Win32 Kernel Subsystem	Important	4.7	0.2%	Information DisclosureLocal	Fix has a known issue	KB5126646 KB5126651+8
CVE-2026-69381	Windows Storage Port Driver Information Disclosure VulnerabilityWindows Storage Port Driver	Important	4.6	0.5%	Information DisclosurePhysical		KB5122871 KB5122876+8
CVE-2026-69548	Windows RNDIS Information Disclosure VulnerabilityWindows RNDIS	Important	4.6	0.5%	Information DisclosurePhysical	Revised 10 Nov	KB5122871 KB5122876+8
CVE-2026-78452	Microsoft Windows SCSI Class System File Information Disclosure VulnerabilityMicrosoft Windows SCSI Class System File	Important	4.6	0.5%	Information DisclosurePhysical		KB5122871 KB5122876+5
CVE-2026-78508	Windows CD-ROM Driver Information Disclosure VulnerabilityWindows CD-ROM Driver	Important	4.6	0.5%	Information DisclosurePhysical		KB5122871 KB5122876+8

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products