Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
Microsoft's October 2026 Patch Tuesday fixes 1,415 flaws, including 85 critical, with one Windows Shell bug exploited in the wild.
Microsoft's October 2026 Patch Tuesday addresses 1,415 vulnerabilities, 85 of them critical, across Windows, Office, Exchange, Hyper-V, and other products. Cisco Talos says CVE-2026-96951, a Windows Shell command-injection flaw scored 8.8, is already exploited. Sixty-seven critical bugs allow remote code execution, including CVSS 9.8 issues in Message Queuing, Microsoft QUIC, Text Shaping, and the PostScript printer driver. Microsoft rates Active Directory CVE-2026-70229 and Exchange CVE-2026-70571 as more likely to be exploited.