Microsoft's security release of 13 October 2026
Patch Tuesday, October 2026, page 7
As of , CISA lists one of the 1,407 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-96951, Windows Shell Security Feature Bypass.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 601 | CVE-2026-70108Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 602 | CVE-2026-70109Microsoft PostScript Printer Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 603 | CVE-2026-70110Microsoft PostScript Printer Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 604 | CVE-2026-70112Windows Spaceport.sys Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 605 | CVE-2026-70113Windows Client for NFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 606 | CVE-2026-70114Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 607 | CVE-2026-70117Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 608 | CVE-2026-70121Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 609 | CVE-2026-70123Microsoft Graphics Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 610 | CVE-2026-70131Microsoft Windows Media Foundation Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 611 | CVE-2026-70132Windows Portable Device File System Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 612 | CVE-2026-70138Windows OLE Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 613 | CVE-2026-70139Windows Update Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 614 | CVE-2026-70142Windows Update Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 615 | CVE-2026-70143Windows Network File System Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 616 | CVE-2026-70151Windows Direct Composition Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 617 | CVE-2026-70172Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 618 | CVE-2026-70177Microsoft Windows Search Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 619 | CVE-2026-70184Windows Backup Engine Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 620 | CVE-2026-70218Windows StateRepository API Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 621 | CVE-2026-70220Microsoft Office Word Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 622 | CVE-2026-70222Windows Shell Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 623 | CVE-2026-70225Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 624 | CVE-2026-70228Desktop Window Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 625 | CVE-2026-70233Windows Common Log File System Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 626 | CVE-2026-70238Windows Storage Spaces Controller Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 627 | CVE-2026-70245Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 628 | CVE-2026-70247HTTP.sys Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 629 | CVE-2026-70255Desktop Window Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 630 | CVE-2026-70274Windows Bind Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 631 | CVE-2026-70278Microsoft Windows Media Foundation Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 632 | CVE-2026-70285Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 633 | CVE-2026-70286Windows Graphics Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 634 | CVE-2026-70303Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 635 | CVE-2026-70566Windows Schannel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 636 | CVE-2026-73027Windows Setup Files Cleanup Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 637 | CVE-2026-78459Microsoft Internet Information Services Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 638 | CVE-2026-81969Windows Server Update Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 639 | CVE-2026-83499Windows Server Update Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 640 | CVE-2026-83506Servicing Stack Updates Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 641 | CVE-2026-83508Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 642 | CVE-2026-83513Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 643 | CVE-2026-83514Windows Partition Management Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 644 | CVE-2026-83518RPC Runtime Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 645 | CVE-2026-83567Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 646 | CVE-2026-83568Windows Kernel-Mode Drivers Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 647 | CVE-2026-83569HID Parser Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 648 | CVE-2026-83570Windows Search Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 649 | CVE-2026-83579Windows Smart Card Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 650 | CVE-2026-83583Windows Geotag Broker Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 651 | CVE-2026-83585Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 652 | CVE-2026-83586Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 653 | CVE-2026-83587Windows Core Messaging Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 654 | CVE-2026-83588Windows USB Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 655 | CVE-2026-83634Windows BitLocker Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 656 | CVE-2026-83637Windows Kernel-Mode Drivers Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 657 | CVE-2026-83638Windows USB Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 658 | CVE-2026-83639Windows Sensor Data Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 659 | CVE-2026-83640Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 660 | CVE-2026-83641Windows Media Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 661 | CVE-2026-83650Windows Media Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 662 | CVE-2026-83652Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 663 | CVE-2026-83654Windows Modern Device Management (MDM) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 664 | CVE-2026-83659Windows User Profile Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 665 | CVE-2026-83669Windows Error Reporting Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 666 | CVE-2026-83678Windows TCP/IP Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 667 | CVE-2026-83679Windows Defender Firewall Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 668 | CVE-2026-83690Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 669 | CVE-2026-83691Windows DHCP Server Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 670 | CVE-2026-83692Windows Bind Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 671 | CVE-2026-83698Windows Client-Side Caching (CSC) Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 672 | CVE-2026-83699Windows Client-Side Caching (CSC) Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 673 | CVE-2026-83700Windows Now Playing Session Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 674 | CVE-2026-83704Microsoft Windows Search Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 675 | CVE-2026-83709Windows NTLM Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 676 | CVE-2026-83712Windows NTFS Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 677 | CVE-2026-83721Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 678 | CVE-2026-83726Windows DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 679 | CVE-2026-83727Windows Overlay Filter Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 680 | CVE-2026-83732Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 681 | CVE-2026-83735Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 682 | CVE-2026-83741Internet Explorer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 683 | CVE-2026-83753Windows Camera Frame Server Monitor Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 684 | CVE-2026-83756Windows Win32 Kernel Subsystem Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 685 | CVE-2026-83757Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 686 | CVE-2026-83758Windows Error Reporting Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 687 | CVE-2026-83761Windows Win32 Kernel Subsystem Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 688 | CVE-2026-83762Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 689 | CVE-2026-83763Windows Input System Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 690 | CVE-2026-83767Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 691 | CVE-2026-83768Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 692 | CVE-2026-83769Microsoft OpenSSH for Windows Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 693 | CVE-2026-83779Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 694 | CVE-2026-83781Windows Program Compatibility Assistant Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 695 | CVE-2026-83783Windows Management Instrumentation Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 696 | CVE-2026-83791Windows Virtual Input Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 697 | CVE-2026-83792Windows Device Install Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 698 | CVE-2026-83796Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 699 | CVE-2026-83826Windows Error Reporting Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 700 | CVE-2026-83828Windows MIDI Service Module Elevation of Privileges | None | Not on CISA's list | 7.8 High | 0.00 |