Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)
69 Critical 1337 Important 0 Moderate 1 Low Microsoft addresses 1407 CVEs in the tenth Patch Tuesday of 2026, marking the second consecutive month to reset the bar as the largest Patch Tuesday release. This month’s updates include patches for two zero days, including one that was exploited in the wild. Microsoft patched 1,407 CVEs in its October 2026 Patch Tuesday release, with 69 rated critical, 1,337 rated as important, and one rated as low. This month’s update includes patches for 301 products and components. The following table lists the products with the most CVEs patched this month. A full list of patched products is available in the appendix. Rank Product CVE Count 1 Microsoft Office
- Vendor
- Microsoft
- CVSS v3.0
- 8.8
- EPSS
- 0.005 (p40)
- Exploitation
- observed in the wild
- Fix
- available
Why it ranks 54 (High)
- Exploitation observed in the wild
- CVSS v3.0 8.8 high
- Covered by 9 independent sources
- Fix available
- Threat research
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Tenable Research (tenable.com)
- CVE-2026-96951 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-21510 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-32202 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-108398 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-21513 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.