cve.bz

Microsoft Patch Tuesday, October 2026: the CVEs

Filter

Microsoft Patch Tuesday October 2026: the CVEs Microsoft published on 13 October 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Sep 2026, Aug 2026, Jul 2026, Jun 2026, May 2026, Apr 2026, Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025, Oct 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 8.0CVE-2026-96956EPSS 0.6%

    Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  2. 4.9CVE-2026-94520EPSS 0.8%

    Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

  3. 8.8CVE-2026-94512EPSS 0.7%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  4. 6.7CVE-2026-88089EPSS 0.3%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

  5. 7.0CVE-2026-88088EPSS 0.2%

    Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.

  6. 5.3CVE-2026-88086EPSS 0.4%

    Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.

  7. 6.4CVE-2026-88085EPSS 0.2%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

  8. 5.3CVE-2026-88084EPSS 0.7%

    Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.

  9. 7.5CVE-2026-88083EPSS 0.5%

    Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  10. 7.0CVE-2026-88082EPSS 0.2%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

  11. 7.7CVE-2026-88081EPSS 0.8%

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  12. 7.0CVE-2026-85919EPSS 0.2%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

  13. 7.7CVE-2026-85888EPSS 0.8%

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  14. 8.5CVE-2026-85886EPSS 0.4%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  15. 7.0CVE-2026-85876EPSS 0.2%

    Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

  16. 6.6CVE-2026-83945EPSS 0.5%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  17. 6.7CVE-2026-70189EPSS 0.3%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

  18. 8.5CVE-2026-68883EPSS 0.6%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

  19. 4.9CVE-2026-67628EPSS 0.8%

    Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

  20. 6.5CVE-2026-67626EPSS 0.9%

    Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.

  21. 8.5CVE-2026-67625EPSS 0.6%

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

  22. 8.8CVE-2026-65674EPSS 1.6%

    Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

  23. 7.0CVE-2026-62840EPSS 0.2%

    Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally.

  24. 8.8CVE-2026-70098EPSS 0.6%

    Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  25. 8.8CVE-2026-102855EPSS 0.8%

    Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

  26. 9.6CVE-2026-102238EPSS 0.8%

    Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  27. 8.8CVE-2026-102235EPSS 0.7%

    Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

  28. 7.5CVE-2026-102234EPSS 0.8%

    Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

  29. 6.5CVE-2026-97844EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  30. 6.5CVE-2026-97843EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  31. 6.5CVE-2026-97842EPSS 0.8%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  32. 6.5CVE-2026-97841EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  33. 6.5CVE-2026-97840EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  34. 6.5CVE-2026-97839EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  35. 6.5CVE-2026-97838EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  36. 6.5CVE-2026-97837EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  37. 6.5CVE-2026-97836EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  38. 6.5CVE-2026-97835EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  39. 6.5CVE-2026-97834EPSS 0.8%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  40. 6.5CVE-2026-97833EPSS 0.8%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  41. 6.5CVE-2026-97832EPSS 0.8%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  42. 6.5CVE-2026-97831EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  43. 7.5CVE-2026-97830EPSS 1.1%

    Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

  44. 6.5CVE-2026-97829EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  45. 6.5CVE-2026-97828EPSS 0.9%

    Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.

  46. 6.5CVE-2026-97827EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  47. 6.5CVE-2026-97826EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  48. 6.5CVE-2026-97825EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  49. 6.5CVE-2026-97824EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  50. 6.5CVE-2026-97823EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  51. 6.5CVE-2026-97822EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  52. 6.5CVE-2026-97821EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  53. 6.5CVE-2026-97820EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  54. 6.5CVE-2026-97819EPSS 1.1%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  55. 6.5CVE-2026-97817EPSS 1.1%

    Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.

  56. 9.8CVE-2026-97816EPSS 1.0%

    Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

  57. 9.8CVE-2026-97815EPSS 0.9%

    Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

  58. 9.8CVE-2026-97814EPSS 1.1%

    Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

  59. 6.5CVE-2026-97813EPSS 1.1%

    Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.

  60. 7.0CVE-2026-97812EPSS 0.3%

    Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

  61. 7.8CVE-2026-97811EPSS 0.3%

    Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

  62. 7.0CVE-2026-97810EPSS 0.3%

    Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

  63. 7.8CVE-2026-97809EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  64. 7.0CVE-2026-97808EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  65. 7.8CVE-2026-97807EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  66. 7.8CVE-2026-97806EPSS 0.4%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  67. 9.8CVE-2026-97805EPSS 1.1%

    Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

  68. 7.8CVE-2026-97804EPSS 0.3%

    Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

  69. 7.8CVE-2026-97803EPSS 0.4%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  70. 7.5CVE-2026-97801EPSS 0.7%

    Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

  71. 7.8CVE-2026-97800EPSS 0.3%

    Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.

  72. 7.8CVE-2026-97799EPSS 0.4%

    Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  73. 7.8CVE-2026-97798EPSS 0.5%

    Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  74. 7.8CVE-2026-97794EPSS 0.3%

    Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

  75. 7.0CVE-2026-97793EPSS 0.2%

    Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.

  76. 7.8CVE-2026-97792EPSS 0.3%

    Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

  77. 5.5CVE-2026-97790EPSS 0.4%

    Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

  78. 7.5CVE-2026-97789EPSS 0.6%

    Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  79. 7.5CVE-2026-97788EPSS 0.9%

    Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

  80. 7.0CVE-2026-97787EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

  81. 6.1CVE-2026-97783EPSS 0.5%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

  82. 6.8CVE-2026-97782EPSS 0.5%

    Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.

  83. 8.8CVE-2026-97781EPSS 0.9%

    Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.

  84. 8.8CVE-2026-97780EPSS 0.8%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  85. 6.5CVE-2026-97779EPSS 1.0%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  86. 8.8CVE-2026-97778EPSS 0.6%

    Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  87. 8.8CVE-2026-97777EPSS 0.8%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  88. 8.8CVE-2026-97776EPSS 0.8%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  89. 8.8CVE-2026-97775EPSS 0.8%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  90. 7.0CVE-2026-97774EPSS 0.2%

    Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

  91. 8.8CVE-2026-97773EPSS 0.8%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  92. 8.8CVE-2026-97772EPSS 0.8%

    Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  93. 8.8CVE-2026-97771EPSS 0.7%

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  94. 8.8CVE-2026-97770EPSS 0.7%

    Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  95. 8.8CVE-2026-97769EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  96. 8.8CVE-2026-97768EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  97. 8.8CVE-2026-97767EPSS 0.6%

    Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  98. 8.8CVE-2026-97766EPSS 0.8%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  99. 8.8CVE-2026-97765EPSS 0.8%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

  100. 8.8CVE-2026-97763EPSS 0.9%

    Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.