cve.bz

Microsoft Patch Tuesday, October 2026: the CVEs, page 11

Filter

Microsoft Patch Tuesday October 2026: the CVEs Microsoft published on 13 October 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Sep 2026, Aug 2026, Jul 2026, Jun 2026, May 2026, Apr 2026, Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025, Oct 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 5.5CVE-2026-70201EPSS 0.5%

    Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.

  2. 5.5CVE-2026-70199EPSS 0.9%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

  3. 7.0CVE-2026-70198EPSS 0.3%

    Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

  4. 8.1CVE-2026-70197EPSS 0.8%

    Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

  5. 5.9CVE-2026-70196EPSS 0.9%

    Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  6. 4.7CVE-2026-70195EPSS 0.3%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.

  7. 6.5CVE-2026-70194EPSS 0.5%

    Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.

  8. 7.3CVE-2026-70190EPSS 0.5%

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

  9. 9.1CVE-2026-70188EPSS 0.9%

    Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

  10. 8.1CVE-2026-70187EPSS 0.8%

    Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

  11. 7.5CVE-2026-70186EPSS 1.0%

    Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  12. 8.8CVE-2026-70185EPSS 0.3%

    Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.

  13. 7.8CVE-2026-70184EPSS 0.4%

    Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

  14. 7.5CVE-2026-70183EPSS 0.5%

    Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

  15. 7.5CVE-2026-70181EPSS 1.2%

    Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  16. 7.5CVE-2026-70179EPSS 0.6%

    Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

  17. 7.8CVE-2026-70177EPSS 0.4%

    Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  18. 7.0CVE-2026-70176EPSS 0.3%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  19. 8.1CVE-2026-70175EPSS 0.7%

    Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

  20. 8.8CVE-2026-70174EPSS 0.9%

    Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.

  21. 5.5CVE-2026-70173EPSS 0.4%

    Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

  22. 7.8CVE-2026-70172EPSS 0.4%

    Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

  23. 6.5CVE-2026-70170EPSS 1.2%

    Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.

  24. 7.0CVE-2026-70169EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

  25. 7.0CVE-2026-70168EPSS 0.3%

    Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  26. 8.8CVE-2026-70167EPSS 1.0%

    Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.

  27. 6.5CVE-2026-70166EPSS 1.3%

    Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.

  28. 6.7CVE-2026-70165EPSS 0.4%

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

  29. 7.0CVE-2026-70164EPSS 0.3%

    Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

  30. 7.5CVE-2026-70163EPSS 1.2%

    Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.

  31. 5.9CVE-2026-70162EPSS 0.9%

    A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application…

  32. 7.3CVE-2026-70161EPSS 0.5%

    Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.

  33. 7.0CVE-2026-70160EPSS 0.3%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  34. 7.5CVE-2026-70159EPSS 1.2%

    Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  35. 8.8CVE-2026-70158EPSS 1.0%

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  36. 9.8CVE-2026-70157EPSS 1.1%

    Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.

  37. 7.0CVE-2026-70156EPSS 0.3%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  38. 7.5CVE-2026-70155EPSS 1.3%

    Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.

  39. 9.8CVE-2026-70153EPSS 1.1%

    Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

  40. 7.8CVE-2026-70151EPSS 0.4%

    Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

  41. 7.0CVE-2026-70150EPSS 0.3%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  42. 8.8CVE-2026-70149EPSS 0.9%

    Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

  43. 6.5CVE-2026-70148EPSS 0.4%

    Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

  44. 9.8CVE-2026-70147EPSS 1.1%

    Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

  45. 7.0CVE-2026-70144EPSS 0.4%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  46. 7.8CVE-2026-70143EPSS 0.4%

    Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.

  47. 7.8CVE-2026-70142EPSS 0.5%

    Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.

  48. 5.5CVE-2026-70141EPSS 0.4%

    Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

  49. 7.0CVE-2026-70140EPSS 0.3%

    Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  50. 7.8CVE-2026-70139EPSS 0.4%

    Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.

  51. 7.8CVE-2026-70138EPSS 0.4%

    Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

  52. 5.5CVE-2026-70137EPSS 0.4%

    Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.

  53. 7.0CVE-2026-70136EPSS 0.3%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  54. 5.5CVE-2026-70135EPSS 0.5%

    Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.

  55. 7.0CVE-2026-70134EPSS 0.3%

    Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

  56. 7.5CVE-2026-70133EPSS 1.3%

    Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.

  57. 7.8CVE-2026-70132EPSS 0.4%

    Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.

  58. 7.8CVE-2026-70131EPSS 0.5%

    Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.

  59. 5.5CVE-2026-70128EPSS 0.4%

    Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

  60. 8.1CVE-2026-70127EPSS 0.8%

    Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

  61. 7.1CVE-2026-70126EPSS 0.5%

    Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

  62. 7.8CVE-2026-70123EPSS 0.3%

    Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

  63. 6.5CVE-2026-70122EPSS 0.3%

    Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  64. 7.8CVE-2026-70121EPSS 0.4%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  65. 6.5CVE-2026-70119EPSS 1.3%

    Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.

  66. 7.0CVE-2026-70118EPSS 0.3%

    Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  67. 7.8CVE-2026-70117EPSS 0.4%

    Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  68. 4.2CVE-2026-70116EPSS 0.4%

    Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.

  69. 7.0CVE-2026-70115EPSS 0.3%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  70. 7.8CVE-2026-70114EPSS 0.4%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  71. 7.8CVE-2026-70113EPSS 0.4%

    Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.

  72. 7.8CVE-2026-70112EPSS 0.4%

    Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.

  73. 8.1CVE-2026-70111EPSS 0.8%

    Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.

  74. 7.8CVE-2026-70110EPSS 0.5%

    Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

  75. 7.8CVE-2026-70109EPSS 0.5%

    Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

  76. 7.8CVE-2026-70108EPSS 0.5%

    Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  77. 7.8CVE-2026-70106EPSS 0.5%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  78. 7.8CVE-2026-70104EPSS 0.4%

    Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  79. 7.8CVE-2026-70103EPSS 0.4%

    Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  80. 7.8CVE-2026-70102EPSS 0.4%

    Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

  81. 5.6CVE-2026-70097EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.

  82. 9.8CVE-2026-70096EPSS 1.1%

    Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

  83. 7.5CVE-2026-70095EPSS 0.6%

    Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

  84. 7.8CVE-2026-70093EPSS 0.4%

    Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.

  85. 7.8CVE-2026-70092EPSS 0.5%

    Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

  86. 5.5CVE-2026-70090EPSS 0.5%

    Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.

  87. 8.8CVE-2026-70089EPSS 0.9%

    Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.

  88. 5.5CVE-2026-70087EPSS 0.3%

    Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.

  89. 7.0CVE-2026-70086EPSS 0.3%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  90. 5.5CVE-2026-70085EPSS 0.3%

    Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.

  91. 5.5CVE-2026-70084EPSS 0.5%

    Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.

  92. 5.5CVE-2026-70083EPSS 0.3%

    Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.

  93. 7.5CVE-2026-70082EPSS 1.3%

    Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.

  94. 7.5CVE-2026-70079EPSS 1.3%

    Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.

  95. 4.7CVE-2026-70077EPSS 0.4%

    Use after free in Windows Kernel allows an authorized attacker to disclose information locally.

  96. 7.0CVE-2026-70076EPSS 0.3%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  97. 4.4CVE-2026-70075EPSS 0.3%

    Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

  98. 5.5CVE-2026-70074EPSS 0.5%

    Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.

  99. 6.5CVE-2026-70072EPSS 1.2%

    Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.

  100. 5.5CVE-2026-70071EPSS 0.3%

    Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally.