The October 2026 Security Update Review
ZDI's October 2026 review lists dozens of critical Microsoft Office, Azure, Exchange, and Windows flaws.
The Zero Day Initiative's October 2026 Security Update Review catalogs a large Microsoft patch set spanning Windows, Office, Exchange, Azure, Active Directory, and related components. Many entries are rated Critical, including remote code execution in Outlook, Excel, PowerPoint, Word, Exchange, Azure App Service, Dataverse, QUIC, and printer drivers, with several CVSS scores of 9.8. Microsoft Partner Center elevation of privilege is listed at CVSS 10.0 and Microsoft Bookings elevation at 9.9. The visible entries are mostly marked not exploited in the supplied flags, and the text does not explicitly confirm active exploitation.
74