Microsoft's security release of 13 October 2026
Patch Tuesday, October 2026, page 6
As of , CISA lists one of the 1,407 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-96951, Windows Shell Security Feature Bypass.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 501 | CVE-2026-88099Windows Failover Cluster Denial of Service | None | Not on CISA's list | 5.9 Medium | 0.01 |
| 502 | CVE-2026-96300RPC Endpoint Mapper Service Denial of Service | None | Not on CISA's list | 5.9 Medium | 0.01 |
| 503 | CVE-2026-85816Windows Wi-Fi Driver Information Disclosure | None | Not on CISA's list | 5.7 Medium | 0.01 |
| 504 | CVE-2026-70044Microsoft Windows Media Foundation Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 505 | CVE-2026-70214Microsoft Office Excel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 506 | CVE-2026-70277Windows Fast FAT File System Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 507 | CVE-2026-96218Windows Update Stack Tampering | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 508 | CVE-2026-97014Microsoft Office Excel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 509 | CVE-2026-97744Microsoft Office PowerPoint Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 510 | CVE-2026-69640Windows Key Distribution Center Security Feature Bypass | None | Not on CISA's list | 5.3 Medium | 0.01 |
| 511 | CVE-2026-70025Windows Netlogon Denial of Service | None | Not on CISA's list | 5.3 Medium | 0.01 |
| 512 | CVE-2026-102198Windows Remote Desktop Protocol Information Disclosure | None | Not on CISA's list | 5.3 Medium | 0.01 |
| 513 | CVE-2026-108466Windows Kernel Denial of Service | None | Not on CISA's list | 5.3 Medium | 0.01 |
| 514 | CVE-2026-67628Microsoft SQL Server Information Disclosure | None | Not on CISA's list | 4.9 Medium | 0.01 |
| 515 | CVE-2026-70217Microsoft Office SharePoint Information Disclosure | None | Not on CISA's list | 4.9 Medium | 0.01 |
| 516 | CVE-2026-94520Microsoft SQL Server Denial of Service | None | Not on CISA's list | 4.9 Medium | 0.01 |
| 517 | CVE-2026-96252Active Directory Federation Services (AD FS) Spoofing | None | Not on CISA's list | 9.1 Critical | 0.00 |
| 518 | CVE-2026-85818Windows Schannel Spoofing | None | Not on CISA's list | 9.0 Critical | 0.00 |
| 519 | CVE-2026-69918Windows Core Messaging Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 520 | CVE-2026-69945Windows AppX Deployment Extensions Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 521 | CVE-2026-70098Visual Studio Code Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.00 |
| 522 | CVE-2026-70185Microsoft PowerShell Security Feature Bypass | None | Not on CISA's list | 8.8 High | 0.00 |
| 523 | CVE-2026-70250Windows DHCP Client Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.00 |
| 524 | CVE-2026-70299Windows Bind Filter Driver Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 525 | CVE-2026-70580Windows Credential Guard Spoofing | Not assessed | Not on CISA's list | 8.8 High | 0.00 |
| 526 | CVE-2026-83716Windows Hyper-V Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.00 |
| 527 | CVE-2026-83728Windows Hyper-V Spoofing | None | Not on CISA's list | 8.8 High | 0.00 |
| 528 | CVE-2026-85905Windows UI Immersive Server API Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 529 | CVE-2026-88073Windows Graphics Kernel Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 530 | CVE-2026-94512SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.00 |
| 531 | CVE-2026-96913Windows Kernel Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 532 | CVE-2026-96914Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 533 | CVE-2026-96917Windows PCI Bus Driver Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 534 | CVE-2026-96957.NET Security Feature Bypass | None | Not on CISA's list | 8.8 High | 0.00 |
| 535 | CVE-2026-102214Windows Hyper-V Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.00 |
| 536 | CVE-2026-105733Windows Hyper-V Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.00 |
| 537 | CVE-2026-108398.NET Framework Security Feature Bypass | None | Not on CISA's list | 8.8 High | 0.00 |
| 538 | CVE-2026-108471Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 539 | CVE-2026-67625Microsoft SQL Server Remote Code Execution | None | Not on CISA's list | 8.5 High | 0.00 |
| 540 | CVE-2026-68883Microsoft SQL Server Elevation of Privilege | None | Not on CISA's list | 8.5 High | 0.00 |
| 541 | CVE-2026-85886Microsoft SQL Server Remote Code Execution | None | Not on CISA's list | 8.5 High | 0.00 |
| 542 | CVE-2026-83845Windows Internet (wininet.dll) Spoofing | None | Not on CISA's list | 8.4 High | 0.00 |
| 543 | CVE-2026-85369Windows Hyper-V Elevation of Privilege | None | Not on CISA's list | 8.2 High | 0.00 |
| 544 | CVE-2026-85925Azure Key Vault Client SDK Elevation of Privilege | None | Not on CISA's list | 8.2 High | 0.00 |
| 545 | CVE-2026-69830Windows DHCP Server Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.00 |
| 546 | CVE-2026-88174Windows Deployment Services Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.00 |
| 547 | CVE-2026-70213Microsoft Power Apps Remote Code Execution | None | Not on CISA's list | 8.0 High | 0.00 |
| 548 | CVE-2026-83838Windows Bluetooth A2DP driver Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.00 |
| 549 | CVE-2026-88121Windows Background Intelligent Transfer Service (BITS) Remote Code Execution | None | Not on CISA's list | 8.0 High | 0.00 |
| 550 | CVE-2026-96844Microsoft Bluetooth Driver Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.00 |
| 551 | CVE-2026-96956SQL Server Elevation of Privilege | None | Not on CISA's list | 8.0 High | 0.00 |
| 552 | CVE-2026-49785UEFI Secure Boot Security Feature Bypass | None | Not on CISA's list | 7.8 High | 0.00 |
| 553 | CVE-2026-61931Windows Perception Simulation Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 554 | CVE-2026-68836Windows kernel32.dll Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 555 | CVE-2026-69354Windows Error Reporting Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 556 | CVE-2026-69471Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 557 | CVE-2026-69633Windows Update Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 558 | CVE-2026-69650Windows Key Distribution Center Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 559 | CVE-2026-69673Windows Update Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 560 | CVE-2026-69733Windows Update Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 561 | CVE-2026-69783Windows Update Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 562 | CVE-2026-69798Windows Wired AutoConfig Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 563 | CVE-2026-69850Windows Certificates Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 564 | CVE-2026-69867SQLite Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 565 | CVE-2026-69880Desktop Window Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 566 | CVE-2026-69882Windows Update Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 567 | CVE-2026-69884Windows GDI Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 568 | CVE-2026-69898Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 569 | CVE-2026-69909Microsoft COM for Windows Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 570 | CVE-2026-69916Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 571 | CVE-2026-69923Windows AI Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 572 | CVE-2026-69926Desktop Window Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 573 | CVE-2026-69934Windows Spaceport.sys Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 574 | CVE-2026-69942Windows Overlay Filter Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 575 | CVE-2026-69949Windows Client for NFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 576 | CVE-2026-69950Windows Overlay Filter Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 577 | CVE-2026-69952Windows Overlay Filter Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 578 | CVE-2026-69953Windows Overlay Filter Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 579 | CVE-2026-69957Windows Overlay Filter Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 580 | CVE-2026-69959Windows Overlay Filter Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 581 | CVE-2026-69963Kernel Streaming Service Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 582 | CVE-2026-69966Kernel Streaming Service Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 583 | CVE-2026-70008Windows IP Over USB Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 584 | CVE-2026-70010Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 585 | CVE-2026-70015Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 586 | CVE-2026-70023Windows Hyper-V Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 587 | CVE-2026-70027Windows Subsystem for Linux Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 588 | CVE-2026-70048Windows Resilient File System (ReFS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 589 | CVE-2026-70051Windows SmartScreen Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 590 | CVE-2026-70052Microsoft PowerShell Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 591 | CVE-2026-70054Windows NetBIOS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 592 | CVE-2026-70059Windows OLE Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 593 | CVE-2026-70060Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 594 | CVE-2026-70064Windows Kerberos Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 595 | CVE-2026-70092Microsoft PostScript Printer Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 596 | CVE-2026-70093Windows Rich Text Edit Control Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 597 | CVE-2026-70102Windows Spaceport.sys Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 598 | CVE-2026-70103Windows Error Reporting Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 599 | CVE-2026-70104Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 600 | CVE-2026-70106Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |