Microsoft's security release of 13 October 2026
Patch Tuesday, October 2026, page 12
As of , CISA lists one of the 1,407 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-96951, Windows Shell Security Feature Bypass.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 1101 | CVE-2026-88103Windows Broadcast DVR User Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1102 | CVE-2026-88106Windows Cloud Files Mini Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1103 | CVE-2026-88107Windows Cloud Files Mini Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1104 | CVE-2026-88110Windows Graphics Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1105 | CVE-2026-88113Windows Broadcast DVR User Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1106 | CVE-2026-88124Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1107 | CVE-2026-88127Windows SMB Server Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1108 | CVE-2026-88139Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1109 | CVE-2026-88141Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1110 | CVE-2026-88146Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1111 | CVE-2026-88149Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1112 | CVE-2026-88160Microsoft Windows Search Component Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1113 | CVE-2026-88161Windows Local Security Authority (LSA) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1114 | CVE-2026-95943Connected Devices Platform Service (Cdpsvc) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1115 | CVE-2026-96209Windows Network File System Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1116 | CVE-2026-96215Windows Autopilot Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1117 | CVE-2026-96216Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1118 | CVE-2026-96250Windows USB Print Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1119 | CVE-2026-96253Windows USB Print Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1120 | CVE-2026-96254Windows USB Print Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1121 | CVE-2026-96301Windows USB Print Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1122 | CVE-2026-96302Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1123 | CVE-2026-96304Windows USB Print Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1124 | CVE-2026-96305Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1125 | CVE-2026-96307Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1126 | CVE-2026-96310Windows USB Print Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1127 | CVE-2026-96313Windows Push Notifications Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1128 | CVE-2026-96319Windows USB Print Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1129 | CVE-2026-96322Windows Remote Desktop Protocol Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1130 | CVE-2026-96323Windows Update Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1131 | CVE-2026-96852Windows TCP/IP Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1132 | CVE-2026-96868Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1133 | CVE-2026-96919Windows Broadcast DVR User Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1134 | CVE-2026-96923Windows Workstation Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1135 | CVE-2026-96932Windows Embedded Mode Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1136 | CVE-2026-96937Microsoft Windows Search Component Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1137 | CVE-2026-96939Servicing Stack Updates Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1138 | CVE-2026-96949Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1139 | CVE-2026-97774Microsoft Office Click-To-Run Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1140 | CVE-2026-97787Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1141 | CVE-2026-97793Windows Setup and Deployment Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1142 | CVE-2026-97808Windows Broadcast DVR User Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1143 | CVE-2026-97810Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1144 | CVE-2026-97812Windows Update Orchestrator Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1145 | CVE-2026-100200Windows Update Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1146 | CVE-2026-100201Windows Client License Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1147 | CVE-2026-100203Windows Update Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1148 | CVE-2026-100216Windows Storage Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1149 | CVE-2026-100225Windows Storage Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1150 | CVE-2026-102189Windows Storage Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1151 | CVE-2026-102191Windows Storage Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1152 | CVE-2026-102193Windows Broadcast DVR User Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1153 | CVE-2026-102194Windows Graphics Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1154 | CVE-2026-102195Windows Broadcast DVR User Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1155 | CVE-2026-102197Windows Broadcast DVR User Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1156 | CVE-2026-102207Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1157 | CVE-2026-102208Windows Win32 Kernel Subsystem Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1158 | CVE-2026-102209Microsoft Graphics Component Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1159 | CVE-2026-102211Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1160 | CVE-2026-102232Visual Studio Code Security Feature Bypass | None | Not on CISA's list | 7.0 High | 0.00 |
| 1161 | CVE-2026-103554Windows Broadcast DVR User Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1162 | CVE-2026-103555Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1163 | CVE-2026-103565Windows Broadcast DVR User Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1164 | CVE-2026-105722Windows Broadcast DVR User Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1165 | CVE-2026-105725Windows Security App Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1166 | CVE-2026-108132Windows Kerberos Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1167 | CVE-2026-108134Windows Autopilot Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1168 | CVE-2026-108135Windows Backup Engine Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1169 | CVE-2026-108396Windows Modern Device Management (MDM) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1170 | CVE-2026-108461Windows Broadcast DVR User Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1171 | CVE-2026-108464Software Protection Platform (SPP) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1172 | CVE-2026-108465Windows Update Delivery Optimization Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1173 | CVE-2026-108468Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1174 | CVE-2026-109453Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 1175 | CVE-2026-59116Windows Remote Desktop Security Feature Bypass | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 1176 | CVE-2026-69947Windows Overlay Filter Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 1177 | CVE-2026-69958Windows Overlay Filter Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 1178 | CVE-2026-83573Windows Kernel-Mode Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 1179 | CVE-2026-83776Windows Bluetooth Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 1180 | CVE-2026-83895Windows Win32 Kernel Subsystem Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 1181 | CVE-2026-85323Network Device Enrollment Service (NDES) Spoofing | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 1182 | CVE-2026-96863Windows Storage Port Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 1183 | CVE-2026-102188Windows Storage Port Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 1184 | CVE-2026-102206Windows Portable Device MTP Driver Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 1185 | CVE-2026-103578Windows Kernel Elevation of Privilege | None | Not on CISA's list | 6.8 Medium | 0.00 |
| 1186 | CVE-2026-69902Windows NTFS Remote Code Execution | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 1187 | CVE-2026-70165.NET Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 1188 | CVE-2026-70189Microsoft SQL Server Remote Code Execution | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 1189 | CVE-2026-83706Windows NTFS Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 1190 | CVE-2026-85333Windows Performance Monitor Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 1191 | CVE-2026-88089Microsoft SQL Server Remote Code Execution | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 1192 | CVE-2026-88143Windows Storage Spaces Controller Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 1193 | CVE-2026-96938Windows Distributed File System (DFS) Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 1194 | CVE-2026-69635Windows Installer Elevation of Privilege | None | Not on CISA's list | 6.6 Medium | 0.00 |
| 1195 | CVE-2026-83945Microsoft SQL Server Remote Code Execution | None | Not on CISA's list | 6.6 Medium | 0.00 |
| 1196 | CVE-2026-69877Azure DevOps Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.00 |
| 1197 | CVE-2026-70122Windows Broadcast DVR User Service Elevation of Privilege | None | Not on CISA's list | 6.5 Medium | 0.00 |
| 1198 | CVE-2026-70148Windows Broadcast DVR User Service Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.00 |
| 1199 | CVE-2026-70194.NET Framework Security Feature Bypass | None | Not on CISA's list | 6.5 Medium | 0.00 |
| 1200 | CVE-2026-70248Windows Hyper-V Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.00 |