cve.bz

Microsoft Patch Tuesday, October 2026: the CVEs, page 6

Filter

Microsoft Patch Tuesday October 2026: the CVEs Microsoft published on 13 October 2026, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Sep 2026, Aug 2026, Jul 2026, Jun 2026, May 2026, Apr 2026, Mar 2026, Feb 2026, Jan 2026, Dec 2025, Nov 2025, Oct 2025. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 7.8CVE-2026-85832EPSS 0.4%

    Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

  2. 5.5CVE-2026-85831EPSS 0.4%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.

  3. 5.5CVE-2026-85830EPSS 0.4%

    Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

  4. 7.8CVE-2026-85829EPSS 0.3%

    Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

  5. 7.0CVE-2026-85828EPSS 0.2%

    Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

  6. 7.0CVE-2026-85827EPSS 0.2%

    Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

  7. 7.0CVE-2026-85826EPSS 0.2%

    Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.

  8. 7.0CVE-2026-85825EPSS 0.2%

    Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

  9. 7.0CVE-2026-85824EPSS 0.2%

    Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.

  10. 7.0CVE-2026-85823EPSS 0.2%

    Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.

  11. 7.8CVE-2026-85822EPSS 0.3%

    Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

  12. 6.5CVE-2026-85821EPSS 1.0%

    Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.

  13. 7.8CVE-2026-85820EPSS 0.3%

    Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

  14. 9.0CVE-2026-85818EPSS 0.4%

    Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

  15. 8.8CVE-2026-85817EPSS 0.7%

    Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.

  16. 5.7CVE-2026-85816EPSS 0.5%

    Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.

  17. 5.5CVE-2026-85815EPSS 0.4%

    Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

  18. 9.8CVE-2026-85814EPSS 0.9%

    Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

  19. 5.5CVE-2026-85812EPSS 0.5%

    Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.

  20. 7.5CVE-2026-85811EPSS 0.4%

    Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.

  21. 7.0CVE-2026-85810EPSS 0.2%

    Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

  22. 9.8CVE-2026-85809EPSS 0.9%

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  23. 7.5CVE-2026-85808EPSS 1.1%

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

  24. 7.8CVE-2026-85807EPSS 0.3%

    Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

  25. 9.8CVE-2026-85806EPSS 0.9%

    Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

  26. 6.5CVE-2026-85805EPSS 0.6%

    Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.

  27. 7.8CVE-2026-85804EPSS 0.3%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  28. 7.0CVE-2026-85803EPSS 0.2%

    Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

  29. 7.0CVE-2026-85802EPSS 0.3%

    Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  30. 7.8CVE-2026-85800EPSS 0.3%

    Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  31. 8.1CVE-2026-85799EPSS 0.7%

    Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

  32. 7.2CVE-2026-85798EPSS 0.9%

    Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

  33. 7.5CVE-2026-85797EPSS 0.9%

    Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

  34. 7.8CVE-2026-85796EPSS 0.3%

    Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.

  35. 7.8CVE-2026-85795EPSS 0.3%

    Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.

  36. 5.5CVE-2026-85794EPSS 0.4%

    Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.

  37. 5.5CVE-2026-85793EPSS 0.5%

    Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally.

  38. 9.8CVE-2026-85792EPSS 0.9%

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  39. 7.0CVE-2026-85791EPSS 0.3%

    Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

  40. 5.9CVE-2026-85790EPSS 0.8%

    Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

  41. 7.8CVE-2026-85377EPSS 0.3%

    Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.

  42. 7.8CVE-2026-85376EPSS 0.3%

    Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

  43. 7.8CVE-2026-85375EPSS 0.3%

    Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

  44. 5.5CVE-2026-85374EPSS 0.4%

    Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

  45. 7.8CVE-2026-85373EPSS 0.3%

    Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

  46. 7.0CVE-2026-85372EPSS 0.2%

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

  47. 8.1CVE-2026-85371EPSS 0.7%

    Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

  48. 7.0CVE-2026-85370EPSS 0.3%

    Use after free in WebDAV allows an authorized attacker to elevate privileges locally.

  49. 8.8CVE-2026-85369EPSS 0.4%

    Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  50. 7.8CVE-2026-85368EPSS 0.3%

    Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

  51. 7.0CVE-2026-85367EPSS 0.2%

    Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.

  52. 7.8CVE-2026-85366EPSS 0.3%

    Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

  53. 7.0CVE-2026-85365EPSS 0.2%

    Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

  54. 7.0CVE-2026-85364EPSS 0.2%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  55. 8.8CVE-2026-85363EPSS 0.9%

    Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

  56. 7.0CVE-2026-85362EPSS 0.2%

    Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

  57. 7.0CVE-2026-85361EPSS 0.2%

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

  58. 7.8CVE-2026-85359EPSS 0.3%

    Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

  59. 7.8CVE-2026-85358EPSS 0.3%

    Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

  60. 7.0CVE-2026-85357EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.

  61. 7.8CVE-2026-85356EPSS 0.3%

    Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

  62. 7.0CVE-2026-85355EPSS 0.3%

    Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  63. 7.0CVE-2026-85354EPSS 0.2%

    Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  64. 7.5CVE-2026-85353EPSS 1.0%

    Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.

  65. 7.0CVE-2026-85352EPSS 0.2%

    Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  66. 7.8CVE-2026-85343EPSS 0.3%

    Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  67. 7.0CVE-2026-85342EPSS 0.2%

    Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  68. 7.8CVE-2026-85341EPSS 0.3%

    Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

  69. 7.8CVE-2026-85340EPSS 0.4%

    Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

  70. 8.8CVE-2026-85339EPSS 0.5%

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  71. 7.8CVE-2026-85338EPSS 0.3%

    Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

  72. 6.5CVE-2026-85337EPSS 0.9%

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

  73. 5.5CVE-2026-85336EPSS 0.4%

    Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

  74. 7.5CVE-2026-85334EPSS 1.0%

    Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.

  75. 7.0CVE-2026-85333EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

  76. 7.8CVE-2026-85332EPSS 0.3%

    Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  77. 6.5CVE-2026-85331EPSS 1.0%

    Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.

  78. 7.0CVE-2026-85329EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.

  79. 7.0CVE-2026-85328EPSS 0.2%

    Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.

  80. 7.8CVE-2026-85327EPSS 0.3%

    Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

  81. 7.5CVE-2026-85324EPSS 0.8%

    Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

  82. 6.8CVE-2026-85323EPSS 0.5%

    Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.

  83. 7.5CVE-2026-85322EPSS 1.0%

    Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

  84. 7.5CVE-2026-85321EPSS 1.0%

    Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

  85. 5.5CVE-2026-85320EPSS 0.3%

    Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

  86. 7.5CVE-2026-85319EPSS 1.1%

    Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

  87. 7.8CVE-2026-85318EPSS 0.3%

    Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

  88. 7.0CVE-2026-84020EPSS 0.2%

    Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

  89. 7.0CVE-2026-84019EPSS 0.2%

    Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

  90. 7.0CVE-2026-84018EPSS 0.2%

    Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

  91. 7.5CVE-2026-84017EPSS 1.1%

    Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

  92. 7.8CVE-2026-84016EPSS 0.3%

    Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.

  93. 9.8CVE-2026-84015EPSS 0.9%

    Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.

  94. 7.0CVE-2026-84014EPSS 0.2%

    Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  95. 7.8CVE-2026-84013EPSS 0.3%

    Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

  96. 8.1CVE-2026-84012EPSS 0.7%

    Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

  97. 5.5CVE-2026-84011EPSS 0.3%

    Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.

  98. 4.7CVE-2026-84009EPSS 0.2%

    Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.

  99. 7.5CVE-2026-84008EPSS 1.0%

    Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

  100. 6.5CVE-2026-84007EPSS 1.0%

    Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.