Microsoft security advisory – October 2026 monthly rollup (AV26-1038)
Canada's Cyber Centre urges patching Microsoft's October 2026 updates after exploited CVE-2026-96951 entered CISA's KEV.
74
Product
Microsoft Exchange Server
- Mentions · 7d0
- Mentions · 30d12
- All mentions16
- First seenAug 17, 2026
- Last mentioned16d ago
Timeline
16 articles · newest firstMicrosoft Patch Tuesday, October 2026 Security Update Review
Microsoft's October 2026 Patch Tuesday fixes 1,414 flaws, including exploited Windows Shell bypass CVE-2026-96951.
84
Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)
Microsoft’s October 2026 Patch Tuesday fixes 1,407 CVEs, including an exploited Windows Shell zero-day.
82
Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
Microsoft's October 2026 Patch Tuesday fixes 1,415 flaws, including 85 critical, with one Windows Shell bug exploited in the wild.
76
The October 2026 Security Update Review
ZDI's October 2026 review lists dozens of critical Microsoft Office, Azure, Exchange, and Windows flaws.
74
October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)
Microsoft's October 2026 Patch Tuesday patches 1,417 flaws, including an already exploited Windows Shell bypass.
82
US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward
The US offers up to $10 million for alleged Hafnium hacker Zhang Yu, still at large.
62
U.S. Offers $10 Million Reward for Alleged HAFNIUM Hacker Zhang Yu
The United States offered $10 million for Zhang Yu, accused of helping run the HAFNIUM Exchange intrusions.
63
U.S. Offers $10 Million Reward for Chinese Hacker Behind Alleged COVID-19 Research Cyberattacks
The U.S. offers up to $10 million for information on Zhang Yu, accused of COVID-19 research cyberattacks.
64
U.S. Offers $10 Million Reward for Chinese Hacker Who Tried to Steal COVID-19 Research
The U.S. offers up to $10 million for Zhang Yu, accused of MSS-directed theft of COVID-19 research.
66
Microsoft security advisory (AV26-1001)
Canada's Cyber Centre urges patches for Exchange elevation-of-privilege flaw CVE-2026-96940.
56
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
Microsoft patched CVE-2026-96940, an Exchange flaw that lets authenticated attackers read other users' mailboxes.
71
September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor
Microsoft's September 2026 Patch Tuesday delivers a record patch count, fixing two exploited zero-days and a wormable DNS flaw dubbed a SigRed successor.
78
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
Microsoft's September Patch Tuesday fixed a record 974 flaws, including two Windows privilege-escalation zero-days actively exploited and added to CISA's KEV catalog.
85
Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911)
About 22,000 Microsoft Exchange servers remain unpatched against critical auth bypass CVE-2026-62911 as a working exploit circulates online.
72
Threat Brief: OWASSRF Vulnerability Exploitation
Unit 42 details active exploitation of Exchange SSRF flaws CVE-2022-41080/CVE-2022-41082 via the OWASSRF method, deploying the SilverArrow PowerShell backdoor.
55
Related CVEs
by mentions- CVE-2026-9695110%8.8Windows Shell command injection bypasses a security feature
- Network stack buffer overflow RCE in Microsoft Exchange
- Untrusted search path in Microsoft .NET Framework
- Use-after-free remote code execution in Microsoft QUIC
- Heap buffer overflow in Microsoft QUIC allows remote code execution
- CVE-2026-969403%8.8Weak authorization privilege escalation in Microsoft Exchange Server
- Incorrect authorization RCE in Active Directory Domain Services
- Heap buffer overflow in Microsoft Graphics Component
- Use-after-free RCE in Windows Message Queuing
- Heap buffer overflow in Microsoft Excel enables network RCE
Appears with
- Microsoftvendor · 16
- Microsoftorganization · 8
- Windowsproduct · 6
- Microsoft Officeproduct · 4
- Hafniumthreat actor · 4
- Microsoft SharePointproduct · 4
- Federal Bureau of Investigationorganization · 4
- Windows Shellproduct · 4
- Shanghai State Security Bureauorganization · 4
- Ministry of State Securityorganization · 4
- U.S. Department of Stateorganization · 3
- Xu Zeweithreat actor · 3
- Shanghai Firetechorganization · 3
- Zero Day Initiativeorganization · 3
- Rewards for Justiceorganization · 3
- Zhang Yuthreat actor · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.