Microsoft's security release of 13 October 2026
Patch Tuesday, October 2026, page 8
As of , CISA lists one of the 1,407 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2026-96951, Windows Shell Security Feature Bypass.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 701 | CVE-2026-83829Microsoft Windows Search Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 702 | CVE-2026-83830Windows COM+ Event System Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 703 | CVE-2026-83832Windows Spaceport.sys Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 704 | CVE-2026-83833Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 705 | CVE-2026-83836Windows Event Tracing Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 706 | CVE-2026-83837Windows Kernel-Mode Drivers Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 707 | CVE-2026-83840Windows Error Reporting Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 708 | CVE-2026-83847Microsoft Account Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 709 | CVE-2026-83848Windows COM+ Event System Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 710 | CVE-2026-83850Microsoft Windows Search Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 711 | CVE-2026-83857Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 712 | CVE-2026-83859Windows NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 713 | CVE-2026-83861Windows Remote Desktop Protocol Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 714 | CVE-2026-83863Servicing Stack Updates Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 715 | CVE-2026-83867Windows Push Notifications Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 716 | CVE-2026-83872Windows TCP/IP Local Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 717 | CVE-2026-83873Windows Shell Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 718 | CVE-2026-83876Windows Shell Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 719 | CVE-2026-83877Windows Devices Human Interface Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 720 | CVE-2026-83881Windows exFAT File System Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 721 | CVE-2026-83882Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 722 | CVE-2026-83883Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 723 | CVE-2026-83896Windows Direct Composition Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 724 | CVE-2026-83902Windows Direct Composition Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 725 | CVE-2026-83903Windows Direct Composition Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 726 | CVE-2026-83912Windows Direct Composition Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 727 | CVE-2026-83913Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 728 | CVE-2026-83918Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 729 | CVE-2026-83919Microsoft Internet Messaging API Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 730 | CVE-2026-83920Windows Search Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 731 | CVE-2026-83922Windows Direct Composition Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 732 | CVE-2026-83927Windows Registry Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 733 | CVE-2026-83931Windows Hyper-V Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 734 | CVE-2026-83932Windows Group Policy Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 735 | CVE-2026-84013Windows Telephony Server Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 736 | CVE-2026-84016Windows EAPHost Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 737 | CVE-2026-85318Servicing Stack Updates Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 738 | CVE-2026-85327Windows Print Spooler Components Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 739 | CVE-2026-85332Windows Device Association Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 740 | CVE-2026-85338Microsoft Graphics Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 741 | CVE-2026-85340Microsoft Office Click-To-Run Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 742 | CVE-2026-85341Windows USB Video Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 743 | CVE-2026-85343Windows Hyper-V Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 744 | CVE-2026-85356Windows Volume Manager Extension Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 745 | CVE-2026-85358Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 746 | CVE-2026-85366Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 747 | CVE-2026-85368Windows TCP/IP Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 748 | CVE-2026-85373Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 749 | CVE-2026-85375Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 750 | CVE-2026-85376Windows Print Spooler Components Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 751 | CVE-2026-85377Windows CD-ROM Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 752 | CVE-2026-85795Windows Text Services Framework Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 753 | CVE-2026-85796Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 754 | CVE-2026-85800Windows Error Reporting Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 755 | CVE-2026-85804Windows Win32 Kernel Subsystem Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 756 | CVE-2026-85807Windows USB Video Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 757 | CVE-2026-85820Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 758 | CVE-2026-85822Windows exFAT File System Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 759 | CVE-2026-85829Windows Wired AutoConfig Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 760 | CVE-2026-85832Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 761 | CVE-2026-85833Windows Modern Device Management (MDM) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 762 | CVE-2026-85836Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 763 | CVE-2026-85837Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 764 | CVE-2026-85842Windows Image Acquisition Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 765 | CVE-2026-85843Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 766 | CVE-2026-85848Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 767 | CVE-2026-85849Windows AppX Deployment Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 768 | CVE-2026-85850Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 769 | CVE-2026-85851Windows SmartScreen Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 770 | CVE-2026-85858Windows Win32 Kernel Subsystem Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 771 | CVE-2026-85860Windows Message Queuing Queue Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 772 | CVE-2026-85861Clipboard User Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 773 | CVE-2026-85863Clipboard User Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 774 | CVE-2026-85867Windows Remote Access Connection Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 775 | CVE-2026-85869Microsoft Windows Search Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 776 | CVE-2026-85871Windows Kernel-Mode Drivers Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 777 | CVE-2026-85872Windows Storage VSP Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 778 | CVE-2026-85874Windows Message Queuing Queue Manager Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 779 | CVE-2026-85884Windows Health and Optimized Experiences Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 780 | CVE-2026-85901Windows Graphics Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 781 | CVE-2026-85902Windows Direct Composition Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 782 | CVE-2026-85906Windows Direct Composition Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 783 | CVE-2026-85908Windows Graphics Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 784 | CVE-2026-85911Windows StateRepository API Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 785 | CVE-2026-85915Windows PCI Bus Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 786 | CVE-2026-85927Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 787 | CVE-2026-85933Windows Print Spooler Components Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 788 | CVE-2026-85945Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 789 | CVE-2026-87691Windows Management Services Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 790 | CVE-2026-87694Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 791 | CVE-2026-87695Microsoft Exchange Server Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 792 | CVE-2026-87699Winlogon Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 793 | CVE-2026-87700Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 794 | CVE-2026-87702Windows Resource Management (MRM) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 795 | CVE-2026-87706Windows Storage Spaces Controller Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 796 | CVE-2026-87707Windows Fax and Scan Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 797 | CVE-2026-87711Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 798 | CVE-2026-87712Microsoft Windows QoS Scheduler Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 799 | CVE-2026-88070Windows BitLocker Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 800 | CVE-2026-88071Windows Hyper-V Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |