Assurance Security Dashboard: October 2026 Patch Tuesday

Sunday, October 18, 2026

Microsoft's October 2026 Patch Tuesday addresses 1408 CVEs across the October security release. The infographic above summarises severity and risk level by product family; the prose below unpacks the items that need attention this cycle. 3 CVEs carry a zero-day flag (publicly disclosed and/or being exploited in the wild).

Posted by LampLighter at 01:33 AM | 1 COMMENT | permalink | Comment on This Entry |

Alternate links: Google News | Twitter

Comments

Admin's note: Participants in this discussion must follow the site's moderation policy. Profanity will be filtered. Abusive conduct is not allowed.

More from the article ...

... October 2026 Patch Tuesday: updates by product family

Windows - 42 Critical, 1080 Important, top CVSS 9.8. Action: Patch Now.
Browsers - no updates this month.
Development - 2 Critical, 63 Important, 1 Moderate, top CVSS 9.8. Action: Patch Now.
Office - 26 Critical, 153 Important, 1 Low, top CVSS 9.8. Action: Patch Now.
Exchange - 1 Critical, 6 Important, top CVSS 9.3. Action: Patch Now.
SQL Server - 22 Important, top CVSS 8.8. Action: Schedule.

Notable CVEs this cycle

CVE-2026-96951 (Office, Windows) - Exploited, CVSS 8.8.
CVE-2026-108398 (Development) - Publicly Disclosed, CVSS 8.8.
CVE-2026-92707 (Development, Other) - Publicly Disclosed, CVSS 5.3.

Recommended actions

Patch now: Windows, Development, Office, Exchange. Critical-rated or actively exploited vulnerabilities drive these into the immediate-action queue. ...

#1 | Posted by LampLighter at 2026-10-18 01:36 AM | Reply