Microsoft's security release of 13 October 2026
Patch Tuesday, October 2026, page 10
As of , CISA lists one of the 1,407 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-96951, Windows Shell Security Feature Bypass.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 901 | CVE-2026-70183ASP.NET Core Elevation of Privilege | None | Not on CISA's list | 7.5 High | 0.00 |
| 902 | CVE-2026-83739Windows Bluetooth Service Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.00 |
| 903 | CVE-2026-85811Network Policy Server (NPS) Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.00 |
| 904 | CVE-2026-87696Microsoft Exchange Server Elevation of Privilege | None | Not on CISA's list | 7.5 High | 0.00 |
| 905 | CVE-2026-87713Windows Bluetooth Port Driver Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.00 |
| 906 | CVE-2026-88083Microsoft SQL Server Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.00 |
| 907 | CVE-2026-88207Microsoft Office PowerPoint Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.00 |
| 908 | CVE-2026-105009Windows Server Update Service Elevation of Privilege | None | Not on CISA's list | 7.5 High | 0.00 |
| 909 | CVE-2026-87705Windows Hyper-V Security Feature Bypass | None | Not on CISA's list | 7.4 High | 0.00 |
| 910 | CVE-2026-70161.NET Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.00 |
| 911 | CVE-2026-70190.NET Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.00 |
| 912 | CVE-2026-96188Microsoft PowerToys Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.00 |
| 913 | CVE-2026-100207Azure CycleCloud Remote Code Execution | None | Not on CISA's list | 7.3 High | 0.00 |
| 914 | CVE-2026-105732SysInternals Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.00 |
| 915 | CVE-2026-108399Windows Hyper-V Elevation of Privilege | None | Not on CISA's list | 7.2 High | 0.00 |
| 916 | CVE-2026-70126Windows Bluetooth Port Driver Remote Code Execution | None | Not on CISA's list | 7.1 High | 0.00 |
| 917 | CVE-2026-83715Windows Error Reporting Tampering | None | Not on CISA's list | 7.1 High | 0.00 |
| 918 | CVE-2026-85856Internet Connection Sharing (ICS) Remote Code Execution | None | Not on CISA's list | 7.1 High | 0.00 |
| 919 | CVE-2026-100205SysInternals Elevation of Privilege | None | Not on CISA's list | 7.1 High | 0.00 |
| 920 | CVE-2026-105729SysInternals Elevation of Privilege | None | Not on CISA's list | 7.1 High | 0.00 |
| 921 | CVE-2026-62840Linux Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 922 | CVE-2026-69387Windows Error Reporting Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 923 | CVE-2026-69596Windows Program Compatibility Assistant Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 924 | CVE-2026-69736Windows Credential Manager Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 925 | CVE-2026-69743Windows Program Compatibility Assistant Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 926 | CVE-2026-69763Windows Storage Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 927 | CVE-2026-69766Windows Storage Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 928 | CVE-2026-69795Windows Clipboard Server Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 929 | CVE-2026-69840Windows Certificates Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 930 | CVE-2026-69856Windows Storage Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 931 | CVE-2026-69915Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 932 | CVE-2026-69931Windows Storage Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 933 | CVE-2026-69935Windows Storage Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 934 | CVE-2026-69964Kernel Streaming Service Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 935 | CVE-2026-69970Kernel Streaming Service Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 936 | CVE-2026-69977Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 937 | CVE-2026-70021Windows Direct Composition Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 938 | CVE-2026-70026Windows Secure Kernel Mode Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 939 | CVE-2026-70045Windows Work Folders Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 940 | CVE-2026-70056Windows Update Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 941 | CVE-2026-70066Windows DHCP Server Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 942 | CVE-2026-70067Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 943 | CVE-2026-70076Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 944 | CVE-2026-70086Microsoft Windows Search Component Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 945 | CVE-2026-70115Microsoft Windows Search Component Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 946 | CVE-2026-70118Windows Audio Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 947 | CVE-2026-70134Windows Event Tracing Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 948 | CVE-2026-70136Microsoft Windows Search Component Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 949 | CVE-2026-70140Windows Audio Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 950 | CVE-2026-70144Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 951 | CVE-2026-70150Microsoft Windows Search Component Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 952 | CVE-2026-70156Microsoft Windows Search Component Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 953 | CVE-2026-70160Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 954 | CVE-2026-70164Windows TCP/IP Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 955 | CVE-2026-70168Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 956 | CVE-2026-70169Windows Connected Devices Platform Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 957 | CVE-2026-70176Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 958 | CVE-2026-70198Windows Push Notifications Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 959 | CVE-2026-70205Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 960 | CVE-2026-70209Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 961 | CVE-2026-70212Windows Security Center Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 962 | CVE-2026-70223Windows Console Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 963 | CVE-2026-70230Windows Audio Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 964 | CVE-2026-70236Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 965 | CVE-2026-70237Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 966 | CVE-2026-70241Windows Kerberos Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 967 | CVE-2026-70243Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 968 | CVE-2026-70249Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 969 | CVE-2026-70252Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability | None | Not on CISA's list | 7.0 High | 0.00 |
| 970 | CVE-2026-70253Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 971 | CVE-2026-70271Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 972 | CVE-2026-70272Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 973 | CVE-2026-70273Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 974 | CVE-2026-70276Microsoft Office Click-To-Run Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 975 | CVE-2026-72934Windows Program Compatibility Assistant Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 976 | CVE-2026-72955Windows Application Compatibility Cache Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 977 | CVE-2026-72968Windows Program Compatibility Assistant Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 978 | CVE-2026-72969Windows Program Compatibility Assistant Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 979 | CVE-2026-81971Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 980 | CVE-2026-83505Windows Setup Files Cleanup Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 981 | CVE-2026-83509Windows Setup Files Cleanup Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 982 | CVE-2026-83510Windows Setup Files Cleanup Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 983 | CVE-2026-83564Windows Search Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 984 | CVE-2026-83566Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 985 | CVE-2026-83574Windows Search Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 986 | CVE-2026-83575Windows Search Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 987 | CVE-2026-83580Windows Client-Side Caching (CSC) Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 988 | CVE-2026-83584Windows Smart Card Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 989 | CVE-2026-83644Windows Audio Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 990 | CVE-2026-83666Active Directory Certificate Services (AD CS) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 991 | CVE-2026-83675Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 992 | CVE-2026-83676Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 993 | CVE-2026-83680Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 994 | CVE-2026-83682Windows TCP/IP Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 995 | CVE-2026-83687Windows Connected User Experiences and Telemetry Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 996 | CVE-2026-83689Windows Error Reporting Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 997 | CVE-2026-83694Windows Volume Manager Extension Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 998 | CVE-2026-83696Windows Cloud Files Mini Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 999 | CVE-2026-83701Windows Now Playing Session Manager Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1000 | CVE-2026-83702Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |