Microsoft's security release of 13 October 2026
Patch Tuesday, October 2026, page 14
As of , CISA lists one of the 1,407 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-96951, Windows Shell Security Feature Bypass.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 1301 | CVE-2026-83884Windows Human Interface Device Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1302 | CVE-2026-83887HID Parser Library Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1303 | CVE-2026-83892Windows Human Interface Device Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1304 | CVE-2026-83893Windows Clipboard User Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1305 | CVE-2026-83898HID Parser Library Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1306 | CVE-2026-83904HID Parser Library Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1307 | CVE-2026-83907Windows Hello Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1308 | CVE-2026-83933Windows Update Orchestrator Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1309 | CVE-2026-84011Windows SMB Client Security Feature Bypass | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1310 | CVE-2026-85320Windows Print Spooler Components Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1311 | CVE-2026-85336Windows Device Association Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1312 | CVE-2026-85374Windows Installer Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1313 | CVE-2026-85793Windows Sysmain Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1314 | CVE-2026-85794Windows Routing and Remote Access Service (RRAS) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1315 | CVE-2026-85812Windows Bind Filter Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1316 | CVE-2026-85815Windows Device Association Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1317 | CVE-2026-85830Windows Installer Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1318 | CVE-2026-85831Windows Biometric Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1319 | CVE-2026-85835Servicing Stack Updates Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1320 | CVE-2026-85852Windows Management Instrumentation Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1321 | CVE-2026-85857Windows Kernel-Mode Drivers Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1322 | CVE-2026-85865Windows DHCP Server Security Feature Bypass | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1323 | CVE-2026-85909Windows Universal Disk Format File System Driver (UDFS) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1324 | CVE-2026-85910Windows StateRepository API Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1325 | CVE-2026-85935Windows USB Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1326 | CVE-2026-85938Windows Broadcast DVR User Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1327 | CVE-2026-87698Windows Remote Access Service Infrastructure Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1328 | CVE-2026-87709Windows Host Guardian Service Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1329 | CVE-2026-88140Windows Key Storage Provider Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1330 | CVE-2026-88158Microsoft Digest Authentication Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1331 | CVE-2026-88162Windows Encrypting File System (EFS) Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1332 | CVE-2026-95904Windows Event Logging Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1333 | CVE-2026-96183Windows Health and Optimized Experiences Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1334 | CVE-2026-96247Windows Kernel-Mode Drivers Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1335 | CVE-2026-96311Windows Network List Service Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1336 | CVE-2026-96314Windows Audio Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1337 | CVE-2026-96315Windows Overlay Filter Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1338 | CVE-2026-96316Windows Routing and Remote Access Service (RRAS) Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1339 | CVE-2026-96321Remote Desktop Display Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1340 | CVE-2026-96846WebDAV Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1341 | CVE-2026-96848Windows Win32 Kernel Subsystem Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1342 | CVE-2026-96849Windows Kernel-Mode Drivers Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1343 | CVE-2026-96850Windows Modern Device Management (MDM) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1344 | CVE-2026-96851Windows Management Instrumentation Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1345 | CVE-2026-96854Windows Device Association Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1346 | CVE-2026-96855Windows Modern Device Management (MDM) Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1347 | CVE-2026-96857Windows Projected File System Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1348 | CVE-2026-96858Windows Security Account Manager Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1349 | CVE-2026-96859Windows Imaging Component Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1350 | CVE-2026-96860Windows USB Print Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1351 | CVE-2026-96910Microsoft Windows Search Component Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1352 | CVE-2026-96921Windows Message Queuing Queue Manager Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1353 | CVE-2026-96925Windows NTFS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1354 | CVE-2026-96926Role: DNS Server Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1355 | CVE-2026-96927Windows NTFS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1356 | CVE-2026-96930Windows Universal Disk Format File System Driver (UDFS) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1357 | CVE-2026-96935Windows NTFS Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1358 | CVE-2026-96944Windows Storage Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1359 | CVE-2026-96948Windows Client Side Caching driver (csc.sys) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1360 | CVE-2026-97005Microsoft Office PowerPoint Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1361 | CVE-2026-97790Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1362 | CVE-2026-102187Windows Kernel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1363 | CVE-2026-103560Role: DNS Server Tampering | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1364 | CVE-2026-103567Windows Broadcast DVR User Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1365 | CVE-2026-105726Microsoft Defender Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1366 | CVE-2026-105731Microsoft Office Graphics Component Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1367 | CVE-2026-108462Windows Kernel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.00 |
| 1368 | CVE-2026-85939Windows Kernel Security Feature Bypass | Not assessed | Not on CISA's list | 5.3 Medium | 0.00 |
| 1369 | CVE-2026-88084Microsoft SQL Server Denial of Service | None | Not on CISA's list | 5.3 Medium | 0.00 |
| 1370 | CVE-2026-88086Microsoft SQL Server Information Disclosure | None | Not on CISA's list | 5.3 Medium | 0.00 |
| 1371 | CVE-2026-96234.NET Information Disclosure | None | Not on CISA's list | 5.3 Medium | 0.00 |
| 1372 | CVE-2026-83646Active Directory Federation Services (AD FS) Spoofing | Not assessed | Not on CISA's list | 4.8 Medium | 0.00 |
| 1373 | CVE-2026-69506Windows Key Storage Provider Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1374 | CVE-2026-69969Windows AppX Deployment Service Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1375 | CVE-2026-69974Desktop Window Manager Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1376 | CVE-2026-70063Windows Kernel Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1377 | CVE-2026-70077Windows Kernel Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1378 | CVE-2026-70195Windows Ancillary Function Driver for WinSock Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1379 | CVE-2026-83504Windows SmartScreen Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1380 | CVE-2026-83582Windows Graphics Kernel Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1381 | CVE-2026-83656Windows Modern Device Management (MDM) Tampering | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1382 | CVE-2026-83672Windows Installer Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1383 | CVE-2026-83697Windows Modern Device Management (MDM) Tampering | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1384 | CVE-2026-83774Windows Win32 Kernel Subsystem Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1385 | CVE-2026-83786Windows NTFS Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1386 | CVE-2026-83865Windows Internet (wininet.dll) Tampering | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1387 | CVE-2026-83897Windows Win32 Kernel Subsystem Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1388 | CVE-2026-83905Windows Shell Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1389 | CVE-2026-83909Windows Win32 Kernel Subsystem Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1390 | CVE-2026-83925Windows Kernel Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1391 | CVE-2026-84009Windows Projected File System Tampering | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1392 | CVE-2026-85866Windows ALPC Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1393 | CVE-2026-96853Windows Win32 Kernel Subsystem Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1394 | CVE-2026-102186Windows Network File System Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.00 |
| 1395 | CVE-2026-83788Windows rndismp6.sys Information Disclosure | None | Not on CISA's list | 4.6 Medium | 0.00 |
| 1396 | CVE-2026-88208Microsoft Office SharePoint Spoofing | None | Not on CISA's list | 4.6 Medium | 0.00 |
| 1397 | CVE-2026-88209Microsoft Office SharePoint Spoofing | None | Not on CISA's list | 4.6 Medium | 0.00 |
| 1398 | CVE-2026-88226Windows Storage Port Driver Information Disclosure | None | Not on CISA's list | 4.6 Medium | 0.00 |
| 1399 | CVE-2026-102859Microsoft Office SharePoint Spoofing | None | Not on CISA's list | 4.6 Medium | 0.00 |
| 1400 | CVE-2026-102864Microsoft Office SharePoint Spoofing | None | Not on CISA's list | 4.6 Medium | 0.00 |