Microsoft's security release of 13 October 2026
Patch Tuesday, October 2026, page 13
As of , CISA lists one of the 1,407 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-96951, Windows Shell Security Feature Bypass.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 1201 | CVE-2026-83636Windows Hyper-V Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.00 |
| 1202 | CVE-2026-83671Windows Hyper-V Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.00 |
| 1203 | CVE-2026-87714WebDAV Security Feature Bypass | Not assessed | Not on CISA's list | 6.5 Medium | 0.00 |
| 1204 | CVE-2026-96206Windows Subsystem for Linux Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.00 |
| 1205 | CVE-2026-96238.NET Security Feature Bypass | None | Not on CISA's list | 6.5 Medium | 0.00 |
| 1206 | CVE-2026-71347Windows Security Center Elevation of Privilege | None | Not on CISA's list | 6.4 Medium | 0.00 |
| 1207 | CVE-2026-88085Microsoft SQL Server Elevation of Privilege | None | Not on CISA's list | 6.4 Medium | 0.00 |
| 1208 | CVE-2026-105006HID Class Driver Elevation of Privilege | None | Not on CISA's list | 6.4 Medium | 0.00 |
| 1209 | CVE-2026-85916Azure Active Directory Information Disclosure | None | Not on CISA's list | 6.2 Medium | 0.00 |
| 1210 | CVE-2026-83500Windows BitLocker Security Feature Bypass | None | Not on CISA's list | 6.1 Medium | 0.00 |
| 1211 | CVE-2026-102851Visual Studio Code Security Feature Bypass | None | Not on CISA's list | 6.1 Medium | 0.00 |
| 1212 | CVE-2026-88132Azure Key Vault Information Disclosure | None | Not on CISA's list | 5.9 Medium | 0.00 |
| 1213 | CVE-2026-105713Microsoft Office SharePoint Spoofing | None | Not on CISA's list | 5.7 Medium | 0.00 |
| 1214 | CVE-2026-69978Microsoft Windows VMSwitch Denial of Service | None | Not on CISA's list | 5.6 Medium | 0.00 |
| 1215 | CVE-2026-70097Windows Virtualization-Based Security (VBS) Enclave Spoofing | None | Not on CISA's list | 5.6 Medium | 0.00 |
| 1216 | CVE-2026-83885Windows Virtualization-Based Security (VBS) Enclave Spoofing | None | Not on CISA's list | 5.6 Medium | 0.00 |
| 1217 | CVE-2026-96865Windows Secure Kernel Mode Information Disclosure | None | Not on CISA's list | 5.6 Medium | 0.00 |
| 1218 | CVE-2026-62687Windows Backup Engine Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1219 | CVE-2026-62879Windows SmartScreen Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1220 | CVE-2026-69644Windows iSCSI Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1221 | CVE-2026-69675Windows Network File System Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1222 | CVE-2026-69721Windows iSCSI Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1223 | CVE-2026-69905Windows AppX Deployment Service Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1224 | CVE-2026-69914Windows AppX Deployment Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1225 | CVE-2026-69919Windows Cryptographic Services Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1226 | CVE-2026-69954Windows Overlay Filter Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1227 | CVE-2026-69967Windows Overlay Filter Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1228 | CVE-2026-69971Windows Kernel-Mode Drivers Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1229 | CVE-2026-69979Windows AppX Deployment Service Security Feature Bypass | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1230 | CVE-2026-69999Windows Update Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1231 | CVE-2026-70011Windows IP Over USB Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1232 | CVE-2026-70017Windows Secure Kernel Mode Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1233 | CVE-2026-70041Windows CD-ROM Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1234 | CVE-2026-70055Windows Cryptographic Services Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1235 | CVE-2026-70057Windows Routing and Remote Access Service (RRAS) Security Feature Bypass | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1236 | CVE-2026-70071Role: DNS Server Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1237 | CVE-2026-70074Windows DNS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1238 | CVE-2026-70083Role: DNS Server Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1239 | CVE-2026-70084Windows Projected File System Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1240 | CVE-2026-70085Role: DNS Server Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1241 | CVE-2026-70087Role: DNS Server Security Feature Bypass | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1242 | CVE-2026-70090Windows Netlogon Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1243 | CVE-2026-70128HID Parser Library Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1244 | CVE-2026-70135Windows Remote POS Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1245 | CVE-2026-70137Windows Remote Access Connection Manager Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1246 | CVE-2026-70141Microsoft Windows Search Component Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1247 | CVE-2026-70173Microsoft Windows Search Component Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1248 | CVE-2026-70199Windows Kernel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1249 | CVE-2026-70201Windows DHCP Server Denial of Service | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1250 | CVE-2026-70208HTTP.sys Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1251 | CVE-2026-70211Win32k Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1252 | CVE-2026-70216Windows Mobile Device Management Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1253 | CVE-2026-70227Windows Device Association Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1254 | CVE-2026-70232Windows Kernel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1255 | CVE-2026-70234Desktop Window Manager Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1256 | CVE-2026-70235Windows Event Tracing Spoofing | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1257 | CVE-2026-70260Microsoft Trace Data Helper Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1258 | CVE-2026-70261Microsoft Trace Data Helper Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1259 | CVE-2026-70264Microsoft Defender Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1260 | CVE-2026-70270Windows Container Isolation FS Filter Driver Elevation of Privilege | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1261 | CVE-2026-70284Win32k Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1262 | CVE-2026-70288Win32k Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1263 | CVE-2026-70292Win32k Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1264 | CVE-2026-70293Win32k Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1265 | CVE-2026-70294Win32k Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1266 | CVE-2026-70295Win32k Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1267 | CVE-2026-81964Windows Update Orchestrator Service Security Feature Bypass | Not assessed | Not on CISA's list | 5.5 Medium | 0.00 |
| 1268 | CVE-2026-83507Windows Update Orchestrator Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1269 | CVE-2026-83565Windows Encrypting File System (EFS) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1270 | CVE-2026-83571Windows Audio Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1271 | CVE-2026-83657Windows Modern Device Management (MDM) Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1272 | CVE-2026-83658Windows Error Reporting Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1273 | CVE-2026-83664Windows Portable Device File System Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1274 | CVE-2026-83668Windows WLAN Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1275 | CVE-2026-83681Microsoft PowerToys Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1276 | CVE-2026-83686Microsoft Windows Search Component Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1277 | CVE-2026-83695Windows Event Logging Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1278 | CVE-2026-83705HTTP.sys Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1279 | CVE-2026-83713Windows Universal Disk Format File System Driver (UDFS) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1280 | CVE-2026-83714HTTP.sys Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1281 | CVE-2026-83719Servicing Stack Updates Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1282 | CVE-2026-83723Windows Event Logging Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1283 | CVE-2026-83733Windows Print Spooler Components Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1284 | CVE-2026-83736Windows Kernel Elevation of Privilege | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1285 | CVE-2026-83737Windows NTFS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1286 | CVE-2026-83747Windows Error Reporting Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1287 | CVE-2026-83755Win32k Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1288 | CVE-2026-83760Microsoft Bluetooth Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1289 | CVE-2026-83764Windows Clipboard User Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1290 | CVE-2026-83765Windows DWM Core Library Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1291 | CVE-2026-83773Windows MIDI Service Module Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1292 | CVE-2026-83787Windows DHCP Server Security Feature Bypass | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1293 | CVE-2026-83794Windows Portable Device MTP Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1294 | CVE-2026-83798Windows Update Stack Spoofing | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1295 | CVE-2026-83835Windows Common Log File System Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1296 | CVE-2026-83849Windows Hello Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1297 | CVE-2026-83854Windows Notification Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1298 | CVE-2026-83864Windows NTFS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1299 | CVE-2026-83870Windows Aggregated Data Platform Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1300 | CVE-2026-83875Windows Human Interface Device Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |