News

Microsoft Patches More Than 1,400 Security Flaws

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond.

Read at KrebsOnSecurity

Vendor

Microsoft

EPSS

0.008 (p56)

• KrebsOnSecurity (krebsonsecurity.com)
• CVE-2026-108398 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-96951 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 22
   Research Check Point Research 12d ago

   19th October – Threat Intelligence Report

   EPSS 0.27 CVE-2026-35029CVE-2026-59823CVE-2026-96951+4 more
2. 55
   Ivanti advisory Ivanti 18d ago

   October 2026 Patch Tuesday

   Exploited CVSS 8.7 No fix yet CVE-2026-88779CVE-2026-104286CVE-2026-102255+11 more Ivanti
3. 54
   Tenable research Tenable 18d ago

   Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)

   Exploited CVSS 8.8 Fix available CVE-2026-96951CVE-2026-21510CVE-2026-32202+20 more Microsoft
4. 51
   Research Rapid7 18d ago

   Patch Tuesday - October 2026

   Exploited Fix available CVE-2026-96951CVE-2026-108398CVE-2026-70242+5 more Microsoft Rapid7
5. 19
   Qualys TRU Qualys 18d ago

   Microsoft Patch Tuesday, October 2026 Security Update Review

   Fix available CVE-2026-96951CVE-2026-108398CVE-2026-105016+57 more Microsoft
6. 32
   Talos research Talos 18d ago

   Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities

   Fix available CVE-2026-96951CVE-2026-70229CVE-2026-70571+57 more Microsoft Cisco
7. 16
   Research ZDI 18d ago

   The October 2026 Security Update Review

   CVE-2026-75650CVE-2026-106631CVE-2026-108398+57 more Microsoft Adobe
8. 33
   CVE NVD 18d ago

   Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.

   CVSS 8.8 CVE-2026-108398 Microsoft
9. 31
   Advisory MSRC 18d ago

   CVE-2026-108398 .NET Framework Security Feature Bypass Vulnerability

   CVE-2026-108398 Microsoft
10. 80
    CISA alert CISA 18d ago

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    Exploited EPSS 0.87 CVE-2026-96951CVE-2026-104935 Microsoft Ivanti
11. 68
    KEV CISA KEV 19d ago

    Microsoft Windows Command Injection Vulnerability

    KEV · due 16 Oct 2026 (overdue) Fix available CVE-2026-96951 Microsoft