Patch Tuesday - October 2026
Microsoft is publishing 1,413 own-product vulnerabilities on October 2026 Patch Tuesday , including 1,102 vulnerabilities in Windows. Anyone who enjoyed last month’s record-setting Patch Tuesday will love the October 2026 edition, because it’s much bigger still. As Rapid7 has noted over the course of 2026, there is every reason to suppose that vulnerability volumes will continue to rise. Microsoft is aware of exploitation in the wild for just one of the vulnerabilities published today, as well as public disclosure for two others. Windows Shell: zero-day security feature bypass The Windows Shell is Microsoft’s term for the GUI interaction logic for the entire OS provided by explorer.exe and a
- Vendor
- Microsoft, Rapid7
- Product
- InsightVM / Nexpose / Metasploit
- EPSS
- 0.013 (p71)
- Exploitation
- observed in the wild
- Fix
- available
- Exposure class
- Network management
Why it ranks 51 (High)
- Exploitation observed in the wild
- Product class: network management
- Covered by 11 independent sources
- Fix available
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Rapid7 research (rapid7.com)
- CVE-2026-96951 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-108398 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-70242 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-97749 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-97016 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.