October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)

On October 13, 2026, Microsoft issued security updates for 1,417 vulnerabilities, including 76 rated critical. Seven critical vulnerabilities require no customer action. One vulnerability (CVE-2026-96951) is already exploited and involves a Windows Shell security feature bypass that circumvents the "Mark of the Web" protection, enabling easier code execution upon user interaction. Another disclosed vulnerability (CVE-2026-108398) affects the .NET Framework, allowing bypass of application control to execute unauthorized applications, though no exploitation in the wild has been detected. Windows DHCP Server has 10 remote code execution vulnerabilities, five of which are critical. Microsoft Exchange Server has a remote code execution vulnerability triggered by specially crafted emails. Numerous Office vulnerabilities are also addressed. Microsoft has provided patches for these vulnerabilities.

The vulnerabilities include critical remote code execution, elevation of privilege, security feature bypass, denial of service, and information disclosure issues affecting multiple Microsoft products such as Windows Shell, .NET Framework, Windows DHCP Server, Microsoft Exchange Server, and Office. One vulnerability is actively exploited in the wild, increasing risk. Exploitation could allow attackers to execute code, bypass security controls, or elevate privileges. However, some critical vulnerabilities require no customer action, indicating they are mitigated or do not pose immediate risk. The large number of vulnerabilities patched reduces the overall attack surface when updates are applied.

Microsoft has released official patches for all reported vulnerabilities in this update. Customers should apply these security updates promptly to mitigate risks. Seven critical vulnerabilities require no customer action, as they are already mitigated or do not require intervention. For the actively exploited vulnerability (CVE-2026-96951), applying the patch is essential. Review Microsoft's official security advisories for detailed guidance and ensure all affected systems are updated accordingly.