ChangeIntelIT change radar
Public mode

No tenant, Graph, or device access. Every item links to its source. What this means

Some sources or documents need attention: 254/255 feeds/APIs · 0/409 docs · checked 13:56 UTC Customize Public modeDiscuss ChangeIntel on Discord
KB5126836

Security update fixing 649 CVEs

Support article Update Catalog CVEs in Security CVE list for a ticket
0Windows versions
649CVEs fixed · 23 critical
1Exploited or in CISA KEV
YesRestart required (per MSRC)

Windows release health lists no known issues from this update or the one it builds on, and none it resolves.

Security fixes

649 Microsoft CVEs · most urgent first
CVE Vulnerability Severity CVSSImpact Status
CVE-2026-96951 Windows Shell Security Feature Bypass VulnerabilityWindows Shell Important 8.8SFBNetwork ExploitedCISA KEV · due 16 Oct
CVE-2026-100202 Windows Message Queuing Queue Manager Remote Code Execution VulnerabilityWindows Message Queuing Queue Manager Critical 9.8RCENetwork
CVE-2026-70147 Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityMicrosoft PostScript Printer Driver Critical 9.8RCENetwork
CVE-2026-70153 Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityMicrosoft PostScript Printer Driver Critical 9.8RCENetwork
CVE-2026-96934 Windows DHCP Server Remote Code Execution VulnerabilityWindows DHCP Server Critical 9.8RCENetwork
CVE-2026-97814 Windows Text Shaping Remote Code Execution VulnerabilityWindows Text Shaping Critical 9.8RCENetwork
CVE-2026-100220 Windows Media Video Decoder Remote Code Execution VulnerabilityWindows Media Video Decoder Critical 8.8RCENetwork
CVE-2026-102225 Windows Text Shaping Remote Code Execution VulnerabilityWindows Text Shaping Critical 8.8RCENetwork
CVE-2026-108467 Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityMicrosoft PostScript Printer Driver Critical 8.8RCENetwork
CVE-2026-70250 Windows DHCP Client Remote Code Execution VulnerabilityWindows DHCP Client Critical 8.8RCEAdjacent
Showing the 10 most urgent of 649All 649 CVEs

What changed

First observed 14 Oct 2026

No field changes in the recorded history.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 14 Oct 13:56 UTC · 254 of 255 readable · 253 fully read · documentation 0/409 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.