October 2026 Patch Tuesday
Microsoft's October 2026 security release came out on Friday, October 2, 2026. Below: the updates for each Windows version, the holes that were already under attack, and the rest of the release.
Microsoft data read Last revised by Microsoft Oct 8, 2026
Windows 11 and Windows 10
| Update | Applies to | Build after update | CVEs |
|---|
Critical fixes with the highest scores
| CVE | Type | CVSS | Severity |
|---|---|---|---|
| CVE-2026-96207Microsoft Partner Center Elevation of Privilege Vulnerability | Elevation of Privilege | 10.0 | Critical |
| CVE-2026-94510Microsoft Bookings Elevation of Privilege Vulnerability | Elevation of Privilege | 9.9 | Critical |
| CVE-2026-77900Azure App Service Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-88131Microsoft Dataverse Remote Code Execution Vulnerability | Remote Code Execution | 9.8 | Critical |
| CVE-2026-69435Azure SRE Agent Elevation of Privilege Vulnerability | Elevation of Privilege | 9.6 | Critical |
| CVE-2026-83943Azure API Center Information Disclosure Vulnerability | Information Disclosure | 8.7 | Critical |
| CVE-2026-83947Azure Event Grid Spoofing Vulnerability | Spoofing | 7.7 | Critical |
Servers and other products
| Update | Applies to | CVEs |
|---|---|---|
| KB5129957Security Update | Microsoft Exchange Server 2019 Cumulative Update 14 | 1 |
| KB5129958Security Update | Microsoft Exchange Server 2016 Cumulative Update 23 | 1 |
| KB5129955Security Update | Microsoft Exchange Server Subscription Edition RTM | 1 |
| KB5129956Security Update | Microsoft Exchange Server 2019 Cumulative Update 15 | 1 |
Questions and experiences
Ask about this page: members and our editors answer. Reading is open; writing needs a free account.
0 comments
…