Patch Tuesday October 2026

Microsoft’s October 2026 security update release: 1475 CVEs, 1 exploited in the wild, 94 rated critical. Severity, CVSS and affected product families from the MSRC Security Update Guide.

← September 2026 November 2026 What's new in October 2026 MSRC release notes

1475CVEs, Microsoft CNA

1Exploited in the wild

94Critical

1Publicly disclosed

Exploited in the wild

Patch these first

CVE	Vulnerability	Severity	CVSS	Impact
CVE-2026-96951	Windows Shell Security Feature Bypass Vulnerability Windows	Important	8.8	Security Feature Bypass

Publicly disclosed

Details known before the fix

CVE	Vulnerability	Severity	CVSS	Impact
CVE-2026-108398	.NET Framework Security Feature Bypass Vulnerability Windows	Important	8.8	Security Feature Bypass

Critical

Highest CVSS first

CVE	Vulnerability	Severity	CVSS	Impact
CVE-2026-110063	VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability Azure	Critical	10	Elevation of Privilege
CVE-2026-83938	Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability Azure	Critical	10	Elevation of Privilege
CVE-2026-97785	AAD App Proxy Elevation of Privilege Vulnerability	Critical	10	Elevation of Privilege
CVE-2026-96207	Microsoft Partner Center Elevation of Privilege Vulnerability	Critical	10	Elevation of Privilege
CVE-2026-94510	Microsoft Bookings Elevation of Privilege Vulnerability	Critical	9.9	Elevation of Privilege
CVE-2026-100202	Windows Message Queuing Queue Manager Remote Code Execution Vulnerability Windows	Critical	9.8	Remote Code Execution
CVE-2026-100219	Microsoft QUIC Remote Code Execution Vulnerability Windows	Critical	9.8	Remote Code Execution
CVE-2026-105016	Microsoft QUIC Remote Code Execution Vulnerability Windows	Critical	9.8	Remote Code Execution
CVE-2026-70147	Microsoft PostScript Printer Driver Remote Code Execution Vulnerability Windows	Critical	9.8	Remote Code Execution
CVE-2026-70153	Microsoft PostScript Printer Driver Remote Code Execution Vulnerability Windows	Critical	9.8	Remote Code Execution
CVE-2026-70242	Microsoft Office Outlook Remote Code Execution Vulnerability Office	Critical	9.8	Remote Code Execution
CVE-2026-70291	Microsoft Office Outlook Remote Code Execution Vulnerability Office	Critical	9.8	Remote Code Execution
CVE-2026-70300	Microsoft Office Word Remote Code Execution Vulnerability Office	Critical	9.8	Remote Code Execution
CVE-2026-88156	Microsoft Office Outlook Remote Code Execution Vulnerability Office	Critical	9.8	Remote Code Execution
CVE-2026-88178	Microsoft Office PowerPoint Remote Code Execution Vulnerability Office	Critical	9.8	Remote Code Execution
CVE-2026-96934	Windows DHCP Server Remote Code Execution Vulnerability Windows	Critical	9.8	Remote Code Execution
CVE-2026-97016	Microsoft Office Outlook Remote Code Execution Vulnerability Office	Critical	9.8	Remote Code Execution
CVE-2026-97749	Microsoft Office Outlook Remote Code Execution Vulnerability Office	Critical	9.8	Remote Code Execution
CVE-2026-97814	Windows Text Shaping Remote Code Execution Vulnerability Windows	Critical	9.8	Remote Code Execution
CVE-2026-77900	Azure App Service Remote Code Execution Vulnerability Azure	Critical	9.8	Remote Code Execution
CVE-2026-88131	Microsoft Dataverse Remote Code Execution Vulnerability	Critical	9.8	Remote Code Execution
CVE-2026-69435	Azure SRE Agent Elevation of Privilege Vulnerability Azure	Critical	9.6	Elevation of Privilege
CVE-2026-105014	Azure Pipelines Remote Code Execution Vulnerability Azure	Critical	9.1	Remote Code Execution
CVE-2026-96202	Windows Raw Image Extension Remote Code Execution Vulnerability Windows	Critical	8.8	Remote Code Execution
CVE-2026-108439	Microsoft Office Word Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-108440	Microsoft Office Word Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-100209	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-100210	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-100211	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-100220	Windows Media Video Decoder Remote Code Execution Vulnerability Windows	Critical	8.8	Remote Code Execution
CVE-2026-102214	Windows Hyper-V Remote Code Execution Vulnerability Windows	Critical	8.8	Remote Code Execution
CVE-2026-102225	Windows Text Shaping Remote Code Execution Vulnerability Windows	Critical	8.8	Remote Code Execution
CVE-2026-102855	Microsoft Office Visio Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-102856	Microsoft Office Visio Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-102857	Microsoft Office Visio Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-105718	Microsoft Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-105733	Windows Hyper-V Remote Code Execution Vulnerability Windows	Critical	8.8	Remote Code Execution
CVE-2026-108400	HEVC Video Extensions Remote Code Execution Vulnerability Windows	Critical	8.8	Remote Code Execution
CVE-2026-108467	Microsoft PostScript Printer Driver Remote Code Execution Vulnerability Windows	Critical	8.8	Remote Code Execution
CVE-2026-108471	Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Windows	Critical	8.8	Elevation of Privilege
CVE-2026-70215	Microsoft Office PowerPoint Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-70250	Windows DHCP Client Remote Code Execution Vulnerability Windows	Critical	8.8	Remote Code Execution
CVE-2026-83934	Windows GDI+ Remote Code Execution Vulnerability Windows	Critical	8.8	Remote Code Execution
CVE-2026-88073	Windows Graphics Kernel Elevation of Privilege Vulnerability Windows	Critical	8.8	Elevation of Privilege
CVE-2026-88144	Microsoft Office PowerPoint Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-96913	Windows Kernel Elevation of Privilege Vulnerability Windows	Critical	8.8	Elevation of Privilege
CVE-2026-96914	Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Windows	Critical	8.8	Elevation of Privilege
CVE-2026-96943	Windows Raw Image Extension Remote Code Execution Vulnerability Windows	Critical	8.8	Remote Code Execution
CVE-2026-96952	Microsoft Windows Media Foundation Remote Code Execution Vulnerability Windows	Critical	8.8	Remote Code Execution
CVE-2026-97739	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-97741	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-97742	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-97745	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-97753	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-97755	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-97756	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-97758	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-97759	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-97761	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-97765	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-97767	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-97776	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-97778	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-97780	Microsoft Office Excel Remote Code Execution Vulnerability Office	Critical	8.8	Remote Code Execution
CVE-2026-83943	Azure API Center Information Disclosure Vulnerability Azure	Critical	8.7	Information Disclosure
CVE-2026-102866	Microsoft Office SharePoint Elevation of Privilege Vulnerability SharePoint	Critical	8.1	Elevation of Privilege
CVE-2026-108457	Microsoft Windows PDF Remote Code Execution Vulnerability Windows	Critical	8.1	Remote Code Execution
CVE-2026-108460	Windows Message Queuing Remote Code Execution Vulnerability Windows	Critical	8.1	Remote Code Execution
CVE-2026-69802	Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability Windows	Critical	8.1	Remote Code Execution
CVE-2026-70187	Windows Remote Desktop Services Remote Code Execution Vulnerability Windows	Critical	8.1	Remote Code Execution
CVE-2026-70229	Windows Active Directory Domain Services Remote Code Execution Vulnerability Windows	Critical	8.1	Remote Code Execution
CVE-2026-70269	Microsoft Office Word Remote Code Execution Vulnerability Office	Critical	8.1	Remote Code Execution
CVE-2026-70571	Microsoft Exchange Server Remote Code Execution Vulnerability Exchange Server	Critical	8.1	Remote Code Execution
CVE-2026-88117	Windows DHCP Server Remote Code Execution Vulnerability Windows	Critical	8.1	Remote Code Execution
CVE-2026-88119	Windows DHCP Server Remote Code Execution Vulnerability Windows	Critical	8.1	Remote Code Execution
CVE-2026-88120	Windows DHCP Server Remote Code Execution Vulnerability Windows	Critical	8.1	Remote Code Execution
CVE-2026-88171	Windows DHCP Server Remote Code Execution Vulnerability Windows	Critical	8.1	Remote Code Execution
CVE-2026-88174	Windows Deployment Services Remote Code Execution Vulnerability Windows	Critical	8.1	Remote Code Execution
CVE-2026-88185	Microsoft Office Word Remote Code Execution Vulnerability Office	Critical	8.1	Remote Code Execution
CVE-2026-100215	Microsoft Graphics Component Remote Code Execution Vulnerability Windows	Critical	7.8	Remote Code Execution
CVE-2026-108130	Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Windows	Critical	7.8	Elevation of Privilege
CVE-2026-88074	Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Windows	Critical	7.8	Elevation of Privilege
CVE-2026-108456	Azure AI Foundry Elevation of Privilege Vulnerability Azure	Critical	7.7	Elevation of Privilege
CVE-2026-83947	Azure Event Grid Spoofing Vulnerability Azure	Critical	7.7	Spoofing
CVE-2026-96185	Microsoft Exchange Online Remote Code Execution Vulnerability	Critical	7.5	Remote Code Execution
CVE-2026-108448	Microsoft Office Outlook Remote Code Execution Vulnerability Office	Critical	7.5	Remote Code Execution
CVE-2026-108131	Active Directory Federation Services (AD FS) Spoofing Vulnerability Windows	Critical	7.5	Spoofing
CVE-2026-69789	Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Windows	Critical	7.5	Remote Code Execution
CVE-2026-88207	Microsoft Office PowerPoint Remote Code Execution Vulnerability Office	Critical	7.5	Remote Code Execution
CVE-2026-96222	Active Directory Federation Services (AD FS) Spoofing Vulnerability Windows	Critical	7.4	Spoofing
CVE-2026-108399	Windows Hyper-V Elevation of Privilege Vulnerability Windows	Critical	7.2	Elevation of Privilege
CVE-2026-102211	Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Windows	Critical	7	Elevation of Privilege
CVE-2026-83917	Windows ALPC Elevation of Privilege Vulnerability Windows	Critical	7	Elevation of Privilege
CVE-2026-62840	Linux Kernel Elevation of Privilege Vulnerability	Critical	—	Elevation of Privilege

By impact

Denial of Service	72
Elevation of Privilege	688
Information Disclosure	262
Not a Vulnerability	1
Remote Code Execution	349
Security Feature Bypass	43
Spoofing	31
Tampering	29

By product family

.NET	34
Azure	12
Edge	18
Exchange Server	7
Office	164
Other	25
SQL Server	22
SharePoint	37
Windows	1156

Counts include CVEs where Microsoft is the assigning CNA. Third-party CVEs (for example Chromium in Edge) are excluded. Severity, CVSS and exploitation status are Microsoft's published values. See the full advisory list to search every CVE.

Security operations

Endpoint and identity

Cloud, apps and data

Track changes