ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

2592 matches in Windows · most urgent first CSVText
CVE Vulnerability Severity CVSSEPSSImpact StatusFixed by
CVE-2026-88219 RPC Runtime Library Remote Code Execution VulnerabilityRPC Runtime Important 8.80.9%RCENetwork Fix has a known issue
KB5126646KB5126651+8
CVE-2026-88222 Microsoft WDAC OLE DB provider for SQL Remote Code Execution VulnerabilityMicrosoft WDAC OLE DB provider for SQL Important 8.8—RCENetwork
KB5131077KB5131080+8
CVE-2026-88229 Windows Media Player Remote Code Execution VulnerabilityWindows Media Player Important 8.8—RCENetwork
KB5131077KB5131080+8
CVE-2026-88249 Windows Client for NFS Remote Code Execution VulnerabilityWindows Client for NFS Important 8.8—RCENetwork
KB5131077KB5131080+8
CVE-2026-95960 Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityWindows Advanced Rasterization Platform Important 8.8—EoPLocal Fix has a known issue
KB5126646KB5126651+5
CVE-2026-95975 Windows Performance Counters Remote Code Execution VulnerabilityWindows Performance Counters Important 8.8—RCENetwork
KB5131077KB5131080+8
CVE-2026-95996 Windows Bluetooth Port Driver Elevation of Privilege VulnerabilityWindows Bluetooth Port Driver Important 8.8—EoPNetwork
KB5131077KB5131080+8
CVE-2026-96002 Windows Domain Name Service Remote Code Execution VulnerabilityRole: DNS Server Important 8.8—RCENetwork
KB5131077KB5131080+3
CVE-2026-96010 HID Parser Library Elevation of Privilege VulnerabilityHID Parser Library Important 8.8—EoPNetwork
KB5131077KB5131080+8
CVE-2026-96020 Windows Domain Name Service Remote Code Execution VulnerabilityRole: DNS Server Important 8.8—RCENetwork
KB5131077KB5131080+3
CVE-2026-96064 Windows Domain Name Service Remote Code Execution VulnerabilityRole: DNS Server Important 8.8—RCENetwork
KB5131077KB5131080+3
CVE-2026-96164 Windows Imaging Component Remote Code Execution VulnerabilityWindows Imaging Component Important 8.8—RCENetwork
KB5131077KB5131080+8

Advisories

MSRC guidance without a CVE of its own · 1 advisory
ADV260001
Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.
Published 13 Oct28 affected products
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 22:49 UTC · 273 of 275 readable · 271 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.