← Lark216 Home

Microsoft Update Intelligence

Administrator notices from Microsoft, summarised: what changed, and what you should do.

1Action Required 455Review Recommended
Microsoft Services 1
Product families
Microsoft 365
Clear
Needs Attention All Updates
9 results · clear filters
Advanced Filters
Informational

Microsoft Purview: Insider Risk Management- IRM alerts in XDR

IRM alerts and data will be available in Microsoft Defender XDR, allowing analysts to use KQL queries to identify risky patterns. This feature will be enabled through Microsoft Insider Risk Management settings and is generally available in February 2027.

Security · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

With this feature, IRM alerts and other supporting data will be available in the following Microsoft Defender XDR experiences: IRM alerts will be surfaced in unified alert and Incident queue in Microsoft Defender XDR. IRM alerts, Indicators and enriched events will be available in Microsoft Defender XDR advanced hunting. Analysts can leverage KQL queries to identify potentially hidden risky patterns in data security related user activity. IRM alert, Indicators and enriched events will be exposed through Graph API. This feature can be enabled through “Share data with Microsoft Defender XDR” wit…

Type
M365 Roadmap
Services
Defender
Tags
In development, General Availability, GCC, GCC High, DoD, Microsoft Purview, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Security · verify against the original
Not analysed

CVE-2026-83679: Windows Defender Firewall Service Elevation of Privilege Vulnerability

Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

Windows · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

Severity
Important · CVSS 7.8
Type
Security updates
Services
Defender
Tags
Windows Defender Firewall Service, Elevation of Privilege, 2026-Oct
Not analysed

CVE-2026-70264: Microsoft Defender Information Disclosure Vulnerability

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.

Windows · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.

Severity
Important · CVSS 5.5
Type
Security updates
Services
Defender
Tags
Microsoft Defender, Information Disclosure, 2026-Oct
Not analysed

CVE-2026-105726: Microsoft Defender Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.

Windows · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.

Severity
Important · CVSS 5.5
Type
Security updates
Services
Defender
Tags
Microsoft Defender, Information Disclosure, 2026-Oct
Not analysed

CVE-2026-70568: Windows Defender Firewall Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

Windows · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

Severity
Important · CVSS 7.0
Type
Security updates
Services
Defender
Tags
Windows Defender Firewall Service, Elevation of Privilege, 2026-Sep
Not analysed

CVE-2026-68831: Windows Defender Firewall Service Information Disclosure Vulnerability

Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.

Windows · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.

Severity
Important · CVSS 5.5
Type
Security updates
Services
Defender
Tags
Windows Defender Firewall Service, Information Disclosure, 2026-Sep
Not analysed

CVE-2026-69414: Microsoft Defender Elevation of Privilege Vulnerability

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".

Security · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".

Severity
Important · CVSS 7.8
Type
Security updates
Services
Defender
Tags
Microsoft Defender, Elevation of Privilege, 2026-Aug
Not analysed

CVE-2026-61936: Windows Defender Firewall Service Security Feature Bypass Vulnerability

Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.

Windows · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.

Severity
Important · CVSS 5.5
Type
Security updates
Services
Defender
Tags
Windows Defender Firewall Service, Security Feature Bypass, 2026-Aug
Not analysed

CVE-2026-54123: Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.

Security · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.

Severity
Important · CVSS 5.5
Type
Security updates
Services
Defender
Tags
Microsoft Defender for Endpoint, Information Disclosure, 2026-Aug