← Lark216 Home

Microsoft Update Intelligence

Administrator notices from Microsoft, summarised: what changed, and what you should do.

1Action Required 455Review Recommended
Microsoft Services 1
Product families
Microsoft 365
Clear
Advanced Filters
Informational

OneDrive: Updated placement of the Create or upload button for Web

The Create or upload button in OneDrive for the web will move from the left navigation pane to the right side of the page, providing a more consistent experience with SharePoint.

Microsoft 365 / Office · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

OneDrive for the web is updating the placement of the Create or upload button to provide a more consistent file experience across OneDrive and SharePoint. The button will move from the left navigation pane to the right side of the page, bringing familiar navigation from SharePoint document libraries to OneDrive. The available options for creating files and folders or uploading content will remain unchanged. GA date: October CY2026

Type
M365 Roadmap
Services
OneDrive, SharePoint
Tags
Rolling out, General Availability, Targeted Release, Worldwide (Standard Multi-Tenant), OneDrive, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects OneDrive · verify against the original
Informational

Microsoft 365: PAYGO consumption-based meter for your extra SharePoint storage needs

Microsoft 365 introduces a PAYGO consumption-based meter for extra SharePoint storage, reducing operational overhead and integrating with Microsoft 365 Archive.

Microsoft 365 / Office · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

Use the new PAYGO consumption-based meter to pay for your extra SharePoint storage needs. This reduces the operational overhead associated with purchasing extra storage packs and more seamlessly integrates with Microsoft 365 Archive. GA date: January CY2027 Preview date: June CY2026

Type
M365 Roadmap
Services
SharePoint
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), Microsoft 365, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects SharePoint · verify against the original
Informational

SharePoint: Changes to the FAQ web part authoring experience

The SharePoint FAQ web part will switch to a standard manual authoring experience, while AI-assisted creation will move to the Copilot. Existing content will remain unchanged.

Microsoft 365 / Office · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

The SharePoint FAQ web part will provide a standard, non-AI experience for manually creating, editing, and managing FAQs. The AI-assisted FAQ creation and import will move to the Copilot in SharePoint authoring experience, where authors can use natural-language prompts and selected grounding sources to generate FAQ content that is saved to the compatible FAQ web part. Existing FAQ web parts and their content will continue to render without migration. GA date: October CY2026

Type
M365 Roadmap
Services
SharePoint
Tags
Rolling out, General Availability, Worldwide (Standard Multi-Tenant), GCC, SharePoint, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, SharePoint · verify against the original
Informational

Microsoft Copilot (Microsoft 365): Structured Document Generation with Forms

Microsoft Copilot in Microsoft 365 introduces structured document generation with forms, allowing organizations to create and manage standardized documents at scale with built-in governance and compliance.

Microsoft 365 / Office · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

Structured Document Generation with Forms enables organizations to create, manage, and generate standardized documents at scale with built-in governance and compliance in SharePoint. Business process owners can centrally build and maintain form-driven templates -- such as contracts, agreements, proposals, and HR documents -- ensuring content stays accurate and up to date. Users can then generate the right document every time by just filling out the form, without manual formatting, versioning issues, or compliance risk, simplifying high-volume, structured document workflows across the organizat…

Type
M365 Roadmap
Services
Entra ID, SharePoint
Tags
Launched, General Availability, Preview, Worldwide (Standard Multi-Tenant), SharePoint, Microsoft Copilot (Microsoft 365), Desktop, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, SharePoint · verify against the original
Informational

Microsoft Purview: Data Lifecycle Management– Hard delete capability for OneDrive and SharePoint through secure priority cleanup workflows

Microsoft Purview introduces a hard delete capability for OneDrive and SharePoint through secure priority cleanup workflows, allowing compliance admins to bypass retention policies and eDiscovery holds.

Microsoft 365 / Office · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

Data Lifecycle Management allows compliance admins to retain, review and delete content in M365 workloads. Deletion of content to adhere to compliance requirements, admins can set up Retention policies or labels. To help prevent inadvertent data loss, M365 retention labels policies and M365 retention policies do not hard delete content immediately and keeps the data in Recycle Bins for 93 days for ODSP. Hard delete itself is a very costly process as it opens Microsoft to heavy legal implications in case of any data loss incident that may occur due to a misconfigured policy or regression. Prior…

Type
M365 Roadmap
Services
OneDrive, SharePoint
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), Microsoft Purview, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Informational

Microsoft Copilot (Microsoft 365): SharePoint Site Builder

Microsoft Copilot for SharePoint Site Builder is available in preview and will be generally available in December 2026, allowing users to create new SharePoint sites with guided assistance.

Microsoft 365 / Office · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

This feature enables users to easily create new SharePoint sites with Copilot. Users can review and confirm a clear site plan before Copilot builds the site. GA date: December CY2026 Preview date: October CY2026

Type
M365 Roadmap
Services
SharePoint
Tags
In development, General Availability, Preview, Worldwide (Standard Multi-Tenant), SharePoint, Microsoft Copilot (Microsoft 365), Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, SharePoint · verify against the original
Review Recommended

Microsoft Purview compliance portal: Data Loss Prevention - Decoupling of Policy tips and Email notifications while configuring rules on Data Loss Prevention for Sharepoint and Onedriv

Admins can now configure Data Loss Prevention (DLP) policies for SharePoint and OneDrive independently, allowing for more flexible policy settings.

What you should do

Review and update DLP policies to leverage the new configuration options for better compliance and user experience. AI-suggested

Microsoft 365 / Office · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

As of today, whenever the user wants to enable email notifications the policy tips also need to be enabled and vice versa, but with this decoupling the admin can configure the following: 1) None of policy tips or email notification 2) Only policy tips 3) Only Email Notifications 4) Both Email Notifications and Policy tips GA date: August CY2026

Type
M365 Roadmap
Services
SharePoint
Tags
Launched, General Availability, GCC, GCC High, DoD, Microsoft Purview, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects SharePoint · verify against the original
Informational

OneDrive: Refreshed file browsing and filtering experience in OneDrive Web

OneDrive is updating its file browsing and filtering experience, adding multiple filters and a modern SharePoint document library layout.

Microsoft 365 / Office · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

OneDrive is making it easier to find and work with files across Microsoft 365. We're refreshing the filtering experience across OneDrive Web, updating existing filters in views like Home, Shared, People, Meetings, and Favorites to support multiple filters at once, and bringing those same filtering capabilities to folder-based experiences such as My files and shared folders. Users can also filter content by file type using both filter pills and the filter pane. We're also bringing the modern SharePoint document library experience to OneDrive Web, with an updated layout, improved navigation, and…

Type
M365 Roadmap
Services
OneDrive, SharePoint
Tags
Launched, General Availability, Targeted Release, Worldwide (Standard Multi-Tenant), OneDrive, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, OneDrive · verify against the original
Informational

Microsoft Copilot (Microsoft 365): Reference files saved in SharePoint libraries and OneDrive folders when creating a presentation with Agent Mode in PowerPoint

Copilot in PowerPoint now allows referencing files from SharePoint libraries and OneDrive folders when using Agent Mode.

Microsoft 365 / Office · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

You can now reference files saved in SharePoint libraries and OneDrive folders when creating a presentation with Copilot using Agent Mode in PowerPoint. GA date: June CY2026

Type
M365 Roadmap
Services
Microsoft 365 Apps, OneDrive, SharePoint
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), PowerPoint, Microsoft Copilot (Microsoft 365), Desktop
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Informational

Microsoft Copilot (Microsoft 365): Reference files saved in SharePoint libraries and OneDrive folders when creating a presentation with Agent Mode in PowerPoint

Copilot in PowerPoint now allows referencing files from SharePoint libraries and OneDrive folders when using Agent Mode.

Microsoft 365 / Office · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

You can now reference files saved in SharePoint libraries and OneDrive folders when creating a presentation with Copilot using Agent Mode in PowerPoint. GA date: June CY2026

Type
M365 Roadmap
Services
Microsoft 365 Apps, OneDrive, SharePoint
Tags
Launched, General Availability, Worldwide (Standard Multi-Tenant), PowerPoint, Microsoft Copilot (Microsoft 365), Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office · verify against the original
Informational

Microsoft Copilot (Microsoft 365): Review PDFs using the Copilot context menu on OneDrive iOS

Microsoft Copilot for OneDrive iOS now allows users to ask questions about selected text in PDFs, offering in-context explanations, summaries, translations, and custom questions. The feature is generally available as of October 2026.

Microsoft 365 / Office · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

Microsoft 365 Copilot makes PDF reviews faster and easier on mobile. Select text in any PDF in OneDrive iOS and tap Ask Copilot to explain, summarize, translate, or ask a custom question about the selection — the same in-context Copilot experience already generally available on desktop, now on OneDrive iOS. Updated October 20, 2026: We have decided not to move forward with this change at this time. We apologize for any inconvenience. GA date: October CY2026

Type
M365 Roadmap
Services
OneDrive, SharePoint
Tags
Cancelled, General Availability, Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD, OneDrive, SharePoint, Microsoft Copilot (Microsoft 365), iOS
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, OneDrive · verify against the original
Informational

Microsoft Purview: Archive SharePoint files under retention policies

SharePoint Online now supports archiving files based on retention policies, allowing admins to move inactive content to low-cost storage while maintaining compliance and discoverability.

Microsoft 365 / Office · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

With the introduction of file archiving support in SharePoint Online, administrators are looking to seamlessly include archiving actions within their existing data retention policies. This means that, in addition to keeping or deleting data, admins want to now leverage Purview DLM to archive files according to organizational requirements, ensuring comprehensive governance across all stages of the content lifecycle in SPO. Retention based file archiving moves inactive content to low-cost storage, lowering costs with no compromise on Compliance, keeping data discoverable and making Copilot resul…

Type
M365 Roadmap
Services
SharePoint
Tags
In development, General Availability, GCC, GCC High, DoD, Microsoft Purview, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, SharePoint · verify against the original
Informational

Microsoft Purview: Data Lifecycle Management - Retention capabilities based on files Last Accessed in OneDrive and SharePoint

Microsoft Purview now allows applying Retention labels and policies to files in OneDrive and SharePoint based on their last access date, generally available in March 2027.

Microsoft 365 / Office · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

Ability to apply Retention labels and policies to items on OneDrive and SharePoint based on when the items were last accessed by an user. GA date: March CY2027

Type
M365 Roadmap
Services
OneDrive, SharePoint
Tags
In development, General Availability, GCC, GCC High, DoD, Microsoft Purview, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects OneDrive, SharePoint · verify against the original
Informational

Microsoft Teams: SharePoint app in Teams

SharePoint links in Teams will open within the SharePoint app in Teams if available, instead of the mobile browser.

Microsoft 365 / Office · m365-roadmap Original Microsoft announcement ↗
Details

Original Microsoft text

When a user who has access to the SharePoint app in Teams clicks a SharePoint page or news link in Teams chat or channels, the link will open inside the SharePoint app in Teams (if available) instead of the mobile browser GA date: November CY2026

Type
M365 Roadmap
Services
SharePoint, Teams
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD, Microsoft Teams, SharePoint, Android, iOS
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Microsoft 365 / Office, Teams · verify against the original
Not analysed

CVE-2026-108452: Microsoft Office SharePoint Remote Code Execution Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Severity
Important · CVSS 8.8
Type
Security updates
Services
SharePoint
Tags
Microsoft Office SharePoint, Remote Code Execution, 2026-Oct
Not analysed

CVE-2026-97783: Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Severity
Important · CVSS 8.1
Type
Security updates
Services
SharePoint
Tags
Microsoft Office SharePoint, Spoofing, 2026-Oct
Not analysed

CVE-2026-97782: Microsoft Office SharePoint Tampering Vulnerability

Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.

Severity
Important · CVSS 6.8
Type
Security updates
Services
SharePoint
Tags
Microsoft Office SharePoint, Tampering, 2026-Oct
Not analysed

CVE-2026-96044: Microsoft Office SharePoint Elevation of Privilege Vulnerability

No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Severity
Important · CVSS 8.8
Type
Security updates
Services
SharePoint
Tags
Microsoft Office SharePoint, Elevation of Privilege, 2026-Oct
Not analysed

CVE-2026-88209: Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Severity
Important · CVSS 4.6
Type
Security updates
Services
SharePoint
Tags
Microsoft Office SharePoint, Spoofing, 2026-Oct
Not analysed

CVE-2026-88208: Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Severity
Important · CVSS 4.6
Type
Security updates
Services
SharePoint
Tags
Microsoft Office SharePoint, Spoofing, 2026-Oct
Not analysed

CVE-2026-88206: Microsoft Office SharePoint Elevation of Privilege Vulnerability

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Severity
Important · CVSS 7.5
Type
Security updates
Services
SharePoint
Tags
Microsoft Office SharePoint, Elevation of Privilege, 2026-Oct
Not analysed

CVE-2026-88204: Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Severity
Important · CVSS 7.3
Type
Security updates
Services
SharePoint
Tags
Microsoft Office SharePoint, Spoofing, 2026-Oct
Not analysed

CVE-2026-88200: Microsoft Office SharePoint Elevation of Privilege Vulnerability

Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Severity
Important · CVSS 8.8
Type
Security updates
Services
SharePoint
Tags
Microsoft Office SharePoint, Elevation of Privilege, 2026-Oct
Not analysed

CVE-2026-88198: Microsoft Office SharePoint Elevation of Privilege Vulnerability

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Severity
Important · CVSS 8.8
Type
Security updates
Services
SharePoint
Tags
Microsoft Office SharePoint, Elevation of Privilege, 2026-Oct
Not analysed

CVE-2026-88166: Microsoft Office SharePoint Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Microsoft 365 / Office · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Severity
Important · CVSS 8.8
Type
Security updates
Services
SharePoint
Tags
Microsoft Office SharePoint, Remote Code Execution, 2026-Oct