CyberWatch Newsroom Live Intel

Important CVE-2026-70179 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-70179 ASP.NET Core Elevation of Privilege Vulnerability

Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Critical CVE-2026-70174 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-70174 .NET Remote Code Execution Vulnerability

Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Important CVE-2026-70165 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-70165 .NET Elevation of Privilege Vulnerability

Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Important CVE-2026-70161 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-70161 .NET Elevation of Privilege Vulnerability

Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Moderate CVE-2026-70159 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-70159 ASP.NET Core Denial of Service Vulnerability

Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Critical CVE-2026-70096 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-70096 Windows Rich Text Edit Control Remote Code Execution Vulnerability

Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Windows

Advisory

Critical CVE-2026-70007 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-70007 .NET Framework Remote Code Execution Vulnerability

Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Moderate CVE-2026-69651 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-69651 .NET Denial of Service Vulnerability

Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Moderate CVE-2026-66822 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-66822 .NET Information Disclosure Vulnerability

Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Moderate CVE-2026-58280 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-58280 .NET Denial of Service Vulnerability

Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Critical CVE-2026-32157 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-32157 Remote Desktop Client Remote Code Execution Vulnerability

Updated product information in the Software Update table. This is an informational change only.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Windows / Microsoft 365

Advisory

Moderate CVE-2026-108455 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-108455 Microsoft Office PowerPoint Information Disclosure Vulnerability

Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Moderate CVE-2026-108454 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-108454 Microsoft Office PowerPoint Information Disclosure Vulnerability

Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Moderate CVE-2026-108453 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-108453 Microsoft Office PowerPoint Information Disclosure Vulnerability

Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-108452 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-108452 Microsoft Office SharePoint Remote Code Execution Vulnerability

Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-108451 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-108451 Microsoft Office Word Remote Code Execution Vulnerability

Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-108450 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-108450 Microsoft Office Word Remote Code Execution Vulnerability

Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-108449 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-108449 Microsoft Office Word Remote Code Execution Vulnerability

Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-108448 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-108448 Microsoft Office Outlook Remote Code Execution Vulnerability

Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-108447 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-108447 Microsoft Office Word Remote Code Execution Vulnerability

Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-108446 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-108446 Microsoft Office Excel Remote Code Execution Vulnerability

Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-108445 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-108445 Microsoft Office Word Remote Code Execution Vulnerability

Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-108444 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-108444 Microsoft Office Remote Code Execution Vulnerability

Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory

Critical CVE-2026-108443 Microsoft MSRC

2026-10-15 Microsoft MSRC

CVE-2026-108443 Microsoft Office Word Remote Code Execution Vulnerability

Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.

Fix: Deploy cumulative update via Windows Update or Microsoft Update Catalog.

Microsoft Office

Advisory