Microsoft's security release of 13 October 2026
Patch Tuesday, October 2026, page 11
As of , CISA lists one of the 1,407 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-96951, Windows Shell Security Feature Bypass.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 1001 | CVE-2026-83707Windows Event Tracing Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1002 | CVE-2026-83708Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1003 | CVE-2026-83710Windows Device Association Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1004 | CVE-2026-83717Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1005 | CVE-2026-83718Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1006 | CVE-2026-83720Windows Kerberos Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1007 | CVE-2026-83722Microsoft Local Security Authority (LSA) Server Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1008 | CVE-2026-83724Windows Management Instrumentation Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1009 | CVE-2026-83738Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1010 | CVE-2026-83740Windows Hello Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1011 | CVE-2026-83749Windows Overlay Filter Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1012 | CVE-2026-83750Windows Error Reporting Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1013 | CVE-2026-83751Windows MIDI Service Module Elevation of Privileges | None | Not on CISA's list | 7.0 High | 0.00 |
| 1014 | CVE-2026-83752Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1015 | CVE-2026-83775Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1016 | CVE-2026-83785Windows COM+ Event System Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1017 | CVE-2026-83790Windows Hello Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1018 | CVE-2026-83793Windows Update Orchestrator Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1019 | CVE-2026-83827Windows Bluetooth Port Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1020 | CVE-2026-83834Windows Kernel-Mode Drivers Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1021 | CVE-2026-83839Windows Hyper-V Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1022 | CVE-2026-83841Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1023 | CVE-2026-83842Windows TCP/IP Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1024 | CVE-2026-83846Connected Devices Platform Service (Cdpsvc) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1025 | CVE-2026-83852Windows Bind Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1026 | CVE-2026-83853Windows Hello Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1027 | CVE-2026-83866Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1028 | CVE-2026-83868Microsoft Bluetooth Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1029 | CVE-2026-83871Microsoft OpenSSH for Windows Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1030 | CVE-2026-83879Windows Overlay Filter Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1031 | CVE-2026-83886Windows Update Orchestrator Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1032 | CVE-2026-83899Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1033 | CVE-2026-83900Windows Bind Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1034 | CVE-2026-83901Windows Win32 Kernel Subsystem Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1035 | CVE-2026-83908RPC Runtime Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1036 | CVE-2026-83911Windows Storage Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1037 | CVE-2026-83915Windows Diagnostic Policy Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1038 | CVE-2026-83916Windows Error Reporting Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.00 |
| 1039 | CVE-2026-83917Windows ALPC Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1040 | CVE-2026-83921Windows Search Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1041 | CVE-2026-83924Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1042 | CVE-2026-83930Windows Update Orchestrator Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1043 | CVE-2026-84014Windows Device Association Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1044 | CVE-2026-84018Windows Print Spooler Components Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1045 | CVE-2026-84019Windows Advanced Rasterization Platform Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1046 | CVE-2026-84020Windows Routing and Remote Access Service (RRAS) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1047 | CVE-2026-85328Windows Projected File System Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1048 | CVE-2026-85329Microsoft Account Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1049 | CVE-2026-85342Windows Device Association Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1050 | CVE-2026-85352Windows Device Association Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1051 | CVE-2026-85354Windows Error Reporting Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1052 | CVE-2026-85355Windows Common Log File System Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1053 | CVE-2026-85357Windows Phone Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1054 | CVE-2026-85361Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1055 | CVE-2026-85362Windows Management Instrumentation Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1056 | CVE-2026-85364Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1057 | CVE-2026-85365Servicing Stack Updates Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1058 | CVE-2026-85367Windows Cash Drawer Protocol Provider Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1059 | CVE-2026-85370WebDAV Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1060 | CVE-2026-85372Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1061 | CVE-2026-85791Windows Encrypting File System (EFS) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1062 | CVE-2026-85802Windows Win32 Kernel Subsystem Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1063 | CVE-2026-85803Windows Camera Frame Server Monitor Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1064 | CVE-2026-85810Windows Telephony Server Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1065 | CVE-2026-85823Windows Composite Image File System Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1066 | CVE-2026-85824Windows Composite Image File System Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1067 | CVE-2026-85825Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1068 | CVE-2026-85826Windows Fast FAT Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1069 | CVE-2026-85827WebDAV Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1070 | CVE-2026-85828WebDAV Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1071 | CVE-2026-85834Windows TCP/IP Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1072 | CVE-2026-85846Web Account Manager Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1073 | CVE-2026-85853Windows DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1074 | CVE-2026-85854Windows DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1075 | CVE-2026-85855Windows DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1076 | CVE-2026-85868Windows Common Log File System Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1077 | CVE-2026-85870Windows Common Log File System Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1078 | CVE-2026-85876Microsoft SQL Server Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1079 | CVE-2026-85879Windows Subsystem for Linux Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1080 | CVE-2026-85904Windows Device Association Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1081 | CVE-2026-85912Clipboard User Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1082 | CVE-2026-85914Windows Embedded Mode Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1083 | CVE-2026-85918Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1084 | CVE-2026-85919Microsoft SQL Server Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1085 | CVE-2026-85920Windows BitLocker Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1086 | CVE-2026-85930Windows Image Acquisition Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1087 | CVE-2026-85934Windows AppX Deployment Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1088 | CVE-2026-85941Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1089 | CVE-2026-85943Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1090 | CVE-2026-87693Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1091 | CVE-2026-87704Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1092 | CVE-2026-87708Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1093 | CVE-2026-87710Microsoft Local Security Authority (LSA) Server Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1094 | CVE-2026-87715Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1095 | CVE-2026-88076Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1096 | CVE-2026-88079Windows MIDI Service Module Elevation of Privileges | None | Not on CISA's list | 7.0 High | 0.00 |
| 1097 | CVE-2026-88082Microsoft SQL Server Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1098 | CVE-2026-88088Microsoft SQL Server Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1099 | CVE-2026-88096Windows DCOM Server Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1100 | CVE-2026-88098Windows Security Support Provider Interface Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |