ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 262/275 feeds/APIs · 469/469 docs · 9/9 advisories · checked 19:25 UTC Customize Public modeDiscuss ChangeIntel on Discord
KB5133453

Security update fixing 9 CVEs

Support article Update Catalog CVEs in Security CVE list for a ticket
9CVEs fixed · 1 critical
0Exploited or in CISA KEV
YesRestart required (per MSRC)

No known issues affecting this update, or resolved by it, were identified in the collected Windows release health data.

Security fixes

9 Microsoft CVEs · most urgent first
CVE Vulnerability Severity CVSSImpact Status
CVE-2026-118207 Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server Critical 8.8RCENetwork
CVE-2026-118149 Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server Important 8.8RCENetwork
CVE-2026-118150 Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server Important 8.8EoPNetwork
CVE-2026-118154 Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server Important 8.8EoPNetwork
CVE-2026-118153 Microsoft Exchange Server Denial of Service VulnerabilityMicrosoft Exchange Server Important 7.5DoSNetwork
CVE-2026-118151 Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server Important 7.2EoPNetwork
CVE-2026-118157 Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server Important 7.2EoPNetwork
CVE-2026-118208 Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server Important 7.1SpoofingNetwork
CVE-2026-118152 Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server Important 6.5SpoofingNetwork
Page history

Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.

Cite this version
Field-level log (0)

Up to 100 recent field edits are shown; older edits may be outside retention.

No retained field changes for this selection.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 10 Nov 19:25 UTC · 262 of 275 readable · 261 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.