← Lark216 Home

Microsoft Update Intelligence

Administrator notices from Microsoft, summarised: what changed, and what you should do.

Latest Weekly DigestOct 19 – Oct 25, 20264 service updates · 1 security advisory →
0Action Required 270Review Recommended

Last updated Oct 30, 2026 12:10 AM EDT

Microsoft Services 1
Product families
Microsoft 365
Clear
Needs Attention All Updates
4 results · clear filters
Advanced Filters
Review RecommendedPublicly disclosed

Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder

Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder. Microsoft rates it Critical; not reported as exploited; publicly disclosed; exploitability assessment: Exploitation More Likely. Microsoft publishes a customer-installable fix (KB5133964, KB5133965, KB5133966 and others listed in the advisory and release notes). Microsoft documents a mitigation or workaround.

Severity Critical Exploited No Disclosed Yes Affects .NET 10.0 installed on Linux, .NET 10.0 installed on Mac OS (+20 more) Fix KB5133964, KB5133965, KB5133966 and others listed in the advisory

What you should do

If you run the affected products, install Microsoft's update (KB5133964, KB5133965, KB5133966 and others listed in the advisory and release notes); the advisory lists the exact build per product. If you run the affected products, review Microsoft's documented mitigation: Brotli decompression is not enabled by default in an out-of-the-box .NET or ASP.NET Core install. Applications must manually opt in to ASP.NET Core request decompression or HttpClient response… from Microsoft's advisory data

Why: Microsoft lists a customer-installable fix and reports it as publicly disclosed, so it matters if you run the affected products.

Developer Tools · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Out-of-bounds write in .NET allows an unauthorized attacker to elevate privileges over a network.

Severity
Critical · CVSS 8.1
Type
Security updates
Tags
.NET, Elevation of Privilege, 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: No · Publicly disclosed: Yes · Exploitation More Likely · Remediation: update and mitigation
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (Critical) is Microsoft's rating and is not treated as proof that action is needed.
Review RecommendedPublicly disclosed

CVE-2026-92707: MessagePack-CSharp Denial of Service Vulnerability

MessagePack-CSharp Denial of Service Vulnerability. Microsoft rates it Moderate; not reported as exploited; publicly disclosed; exploitability assessment: Exploitation Less Likely. Microsoft publishes a customer-installable fix (see the release notes linked in the advisory).

Severity Moderate Exploited No Disclosed Yes Affects MessagePack 2.5.303, MessagePack 3.1.9 (+14 more) Fix see release notes

What you should do

If you run the affected products, install Microsoft's update (see the release notes linked in the advisory); the advisory lists the exact build per product. from Microsoft's advisory data

Why: Microsoft lists a customer-installable fix and reports it as publicly disclosed, so it matters if you run the affected products.

Developer Tools · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Improperly controlled sequential memory allocation in .NET allows an unauthorized attacker to deny service over a network.

Severity
Moderate · CVSS 5.3
Type
Security updates
Tags
.NET, Denial of Service, 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: No · Publicly disclosed: Yes · Exploitation Less Likely · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (Moderate) is Microsoft's rating and is not treated as proof that action is needed.
Review RecommendedPublicly disclosed

CVE-2026-108398: .NET Framework Security Feature Bypass Vulnerability

.NET Framework Security Feature Bypass Vulnerability. Microsoft rates it Important; not reported as exploited; publicly disclosed; exploitability assessment: Exploitation Less Likely. Microsoft publishes a customer-installable fix (KB5126868, KB5127666, KB5127685 and others listed in the advisory).

Severity Important Exploited No Disclosed Yes Affects Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 version 1607, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (+22 more) Fix KB5126868, KB5127666, KB5127685 and others listed in the advisory

What you should do

If you run the affected products, install Microsoft's update (KB5126868, KB5127666, KB5127685 and others listed in the advisory); the advisory lists the exact build per product. from Microsoft's advisory data

Why: Microsoft lists a customer-installable fix and reports it as publicly disclosed, so it matters if you run the affected products.

Developer Tools · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.

Severity
Important · CVSS 8.8
Type
Security updates
Tags
.NET Framework, Security Feature Bypass, 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: No · Publicly disclosed: Yes · Exploitation Less Likely · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (Important) is Microsoft's rating and is not treated as proof that action is needed.
Review Recommended

CVE-2026-70337: Microsoft PowerShell Remote Code Execution Vulnerability

Microsoft PowerShell Remote Code Execution Vulnerability. Microsoft gives no severity rating; not reported as exploited; not publicly disclosed; exploitability assessment: Exploitation Less Likely. Microsoft marks customer action as required but lists no specific update or mitigation in the advisory data.

Severity not rated Exploited No Disclosed No Affects not listed Fix none listed

What you should do

Open the advisory to see which of your products are affected; Microsoft lists no specific update here. from Microsoft's advisory data

Why: Microsoft marks customer action as required but lists no specific update, so check whether your products are affected.

Developer Tools · msrc Original Microsoft announcement ↗
Details

Original Microsoft text

Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.

Type
Security updates
Tags
Microsoft PowerShell Core, 2026-Aug
Microsoft advisory data
Customer action required: Yes · Exploited: No · Publicly disclosed: No · Exploitation Less Likely · Remediation: none listed
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.