M365 Change Tracker

← All changes · security · CVE-2026-70096

CVE-2026-70096ImportantMonitor

Windows Rich Text Edit Control Remote Code Execution Vulnerability

Severity Important  ·  Urgency Monitor

Why it matters: Important severity (CVSS 9.8)

Remote Code Execution · Important · CVSS 9.8. Affects: Windows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems, Microsoft 365 Apps, Microsoft Office LTSC, Windows 10 Version, Windows Server.

CVSS 9.8EPSS 1.1%Security update published 2026-11-10Applies to Cloud + on-premisesKB5127648NVD

Affected: Windows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems, Microsoft 365 Apps, Microsoft Office LTSC, Windows 10 Version, Windows Server

Related changes

Change history

2026-10-13 · First captured by tracker

View at Microsoft →