cve.bz

Microsoft Patch Tuesday, October 2026: the CVEs, page 3

Filter

Microsoft Patch Tuesday October 2026: the CVEs Microsoft published on 13 October 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Sep 2026, Aug 2026, Jul 2026, Jun 2026, May 2026, Apr 2026, Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025, Oct 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 4.7CVE-2026-96853EPSS 0.2%

    Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

  2. 7.0CVE-2026-96852EPSS 0.3%

    Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

  3. 5.5CVE-2026-96851EPSS 0.4%

    Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

  4. 5.5CVE-2026-96850EPSS 0.4%

    Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.

  5. 5.5CVE-2026-96849EPSS 0.4%

    Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

  6. 5.5CVE-2026-96848EPSS 0.4%

    Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

  7. 7.8CVE-2026-96847EPSS 0.4%

    Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

  8. 5.5CVE-2026-96846EPSS 0.4%

    Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

  9. 8.0CVE-2026-96844EPSS 0.5%

    Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.

  10. 7.8CVE-2026-96843EPSS 0.4%

    Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

  11. 7.5CVE-2026-96325EPSS 1.1%

    Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.

  12. 7.8CVE-2026-96324EPSS 0.4%

    Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  13. 7.0CVE-2026-96323EPSS 0.3%

    Use after free in Windows Update allows an authorized attacker to elevate privileges locally.

  14. 7.0CVE-2026-96322EPSS 0.3%

    Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.

  15. 5.5CVE-2026-96321EPSS 0.4%

    Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.

  16. 9.8CVE-2026-96320EPSS 1.1%

    Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

  17. 7.0CVE-2026-96319EPSS 0.2%

    Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

  18. 7.8CVE-2026-96318EPSS 0.3%

    Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.

  19. 7.8CVE-2026-96317EPSS 0.2%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  20. 5.5CVE-2026-96316EPSS 0.3%

    Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.

  21. 5.5CVE-2026-96315EPSS 0.3%

    Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.

  22. 5.5CVE-2026-96314EPSS 0.4%

    Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.

  23. 7.0CVE-2026-96313EPSS 0.2%

    Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

  24. 7.8CVE-2026-96312EPSS 0.3%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  25. 5.5CVE-2026-96311EPSS 0.3%

    Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.

  26. 7.0CVE-2026-96310EPSS 0.3%

    Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

  27. 7.8CVE-2026-96309EPSS 0.3%

    Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

  28. 7.8CVE-2026-96308EPSS 0.3%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  29. 7.0CVE-2026-96307EPSS 0.2%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  30. 7.8CVE-2026-96306EPSS 0.2%

    Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.

  31. 7.0CVE-2026-96305EPSS 0.2%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  32. 7.0CVE-2026-96304EPSS 0.3%

    Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

  33. 6.5CVE-2026-96303EPSS 0.7%

    Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.

  34. 7.0CVE-2026-96302EPSS 0.2%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  35. 7.0CVE-2026-96301EPSS 0.3%

    Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

  36. 5.9CVE-2026-96300EPSS 0.9%

    Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.

  37. 7.0CVE-2026-96254EPSS 0.3%

    Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

  38. 7.0CVE-2026-96253EPSS 0.3%

    Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

  39. 9.1CVE-2026-96252EPSS 0.6%

    Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

  40. 8.8CVE-2026-96251EPSS 0.7%

    Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.

  41. 7.0CVE-2026-96250EPSS 0.3%

    Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

  42. 7.8CVE-2026-96249EPSS 0.4%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  43. 7.5CVE-2026-96248EPSS 1.1%

    Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.

  44. 5.5CVE-2026-96247EPSS 0.4%

    Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

  45. 7.5CVE-2026-96246EPSS 1.0%

    Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.

  46. 7.5CVE-2026-96245EPSS 1.0%

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  47. 7.8CVE-2026-96244EPSS 0.3%

    Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.

  48. 7.8CVE-2026-96243EPSS 0.3%

    Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.

  49. 6.5CVE-2026-96238EPSS 0.3%

    Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.

  50. 7.5CVE-2026-96237EPSS 0.6%

    Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

  51. 7.5CVE-2026-96236EPSS 1.1%

    Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  52. 8.8CVE-2026-96235EPSS 0.9%

    Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

  53. 5.3CVE-2026-96234EPSS 0.3%

    Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

  54. 7.5CVE-2026-96233EPSS 1.0%

    Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  55. 7.5CVE-2026-96232EPSS 0.9%

    Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.

  56. 7.8CVE-2026-96231EPSS 0.4%

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

  57. 8.8CVE-2026-96230EPSS 0.9%

    Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

  58. 6.5CVE-2026-96229EPSS 0.9%

    Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.

  59. 7.8CVE-2026-96225EPSS 0.4%

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

  60. 8.8CVE-2026-96224EPSS 0.8%

    Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

  61. 7.8CVE-2026-96223EPSS 0.3%

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  62. 7.4CVE-2026-96222EPSS 0.6%

    Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

  63. 7.8CVE-2026-96220EPSS 0.3%

    Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.

  64. 9.8CVE-2026-96219EPSS 0.9%

    Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.

  65. 5.5CVE-2026-96218EPSS 0.6%

    Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.

  66. 7.8CVE-2026-96217EPSS 0.3%

    Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

  67. 7.0CVE-2026-96216EPSS 0.2%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  68. 7.0CVE-2026-96215EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privileges locally.

  69. 7.0CVE-2026-96209EPSS 0.3%

    Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.

  70. 5.5CVE-2026-96206EPSS 0.4%

    Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.

  71. 6.5CVE-2026-96204EPSS 0.8%

    Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network.

  72. 8.8CVE-2026-96202EPSS 0.9%

    Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

  73. 7.3CVE-2026-96188EPSS 0.4%

    External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.

  74. 7.8CVE-2026-96186EPSS 2.4%

    Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

  75. 5.5CVE-2026-96183EPSS 0.4%

    Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.

  76. 7.8CVE-2026-96118EPSS 0.4%

    Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

  77. 9.8CVE-2026-96113EPSS 0.9%

    Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

  78. 7.8CVE-2026-96108EPSS 0.3%

    Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

  79. 9.8CVE-2026-96096EPSS 0.7%

    Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

  80. 7.5CVE-2026-96071EPSS 0.6%

    Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

  81. 8.8CVE-2026-96044EPSS 0.8%

    No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  82. 7.0CVE-2026-95943EPSS 0.3%

    Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

  83. 5.5CVE-2026-95904EPSS 0.3%

    Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

  84. 6.5CVE-2026-94506EPSS 0.9%

    Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.

  85. 4.6CVE-2026-88226EPSS 0.5%

    Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

  86. 8.8CVE-2026-88219EPSS 0.9%

    Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.

  87. 7.8CVE-2026-88210EPSS 0.4%

    Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.

  88. 4.6CVE-2026-88209EPSS 0.4%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  89. 4.6CVE-2026-88208EPSS 0.3%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  90. 7.5CVE-2026-88207EPSS 0.6%

    Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

  91. 7.5CVE-2026-88206EPSS 0.6%

    Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  92. 7.3CVE-2026-88204EPSS 0.6%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

  93. 6.5CVE-2026-88203EPSS 0.9%

    Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

  94. 8.8CVE-2026-88202EPSS 0.8%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  95. 6.5CVE-2026-88201EPSS 0.6%

    Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  96. 8.8CVE-2026-88200EPSS 0.8%

    Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  97. 8.8CVE-2026-88198EPSS 0.7%

    Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  98. 8.8CVE-2026-88197EPSS 0.5%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

  99. 8.8CVE-2026-88196EPSS 0.7%

    Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

  100. 6.5CVE-2026-88195EPSS 0.8%

    Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.