{"@odata.context":"https://api.msrc.microsoft.com/sug/v2.0/sugodata/v2.0/en-US/$metadata#releaseNote/$entity","id":"00000000-0000-0000-0000-0000e3272176","releaseDate":"2026-10-13T07:00:00-07:00","title":"October 2026 Security Updates","releaseNumber":"2026-Oct","description":"<h2 id=\"this-release-consists-of-the-following-1413-microsoft-cves\">This release consists of the following 1413 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Product Family</th>\n<th>Vulnerabilities Addressed</th>\n<th>Distinct Updates</th>\n<th>Update Type</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows</td>\n<td>1102</td>\n<td>39</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Office</td>\n<td>134</td>\n<td>11</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SharePoint Server</td>\n<td>36</td>\n<td>1</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td>22</td>\n<td>8</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Exchange Server</td>\n<td>7</td>\n<td>8</td>\n<td>Cumulative</td>\n</tr>\n<tr>\n<td>Developer Tools (Dev Div)</td>\n<td>61</td>\n<td>60</td>\n<td>Mixed</td>\n</tr>\n<tr>\n<td>Azure</td>\n<td>15</td>\n<td>20</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Defender</td>\n<td>4</td>\n<td>3</td>\n<td>Automatic</td>\n</tr>\n<tr>\n<td>Edge</td>\n<td>0</td>\n<td>1</td>\n<td>Automatic</td>\n</tr>\n<tr>\n<td>Other</td>\n<td>32</td>\n<td>25</td>\n<td>Individual</td>\n</tr>\n<tr>\n<td>Total</td>\n<td>1414</td>\n<td>176</td>\n<td></td>\n</tr>\n</tbody>\n</table>\n<h3 id=\"notable-cves\">Notable CVEs</h3>\n<table>\n<thead>\n<tr>\n<th>CVE ID</th>\n<th>Title</th>\n<th>Notable Item</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951\">CVE-2026-96951</a></td>\n<td>Windows Shell Security Feature Bypass Vulnerability</td>\n<td>Exploitation Detected</td>\n</tr>\n<tr>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108398\">CVE-2026-108398</a></td>\n<td>.NET Framework Security Feature Bypass Vulnerability</td>\n<td>Publicly disclosed</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-1-non-microsoft-cve\">We are republishing 1 non-Microsoft CVE:</h2>\n<table>\n<thead>\n<tr>\n<th>CNA</th>\n<th>CVE ID</th>\n<th>Title</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Cisco Talos</td>\n<td><a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21413\">CVE-2026-21413</a></td>\n<td>Raw Image Extension Remote Code Execution Vulnerability</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>October 13, 2026</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2026/10/using-risk-cohorts-to-prioritize-security-updates\">Using risk cohorts to prioritize security updates</a></td>\n</tr>\n<tr>\n<td>October 31, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience\">You asked, we delivered: Introducing new features for an improved security experience</a></td>\n</tr>\n<tr>\n<td>October 28, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315\">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td>\n</tr>\n<tr>\n<td>October 22, 2025</td>\n<td><a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td>\n</tr>\n<tr>\n<td>November 12, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CSAF-Blog\">Toward greater transparency: Publishing machine-readable CSAF files</a></td>\n</tr>\n<tr>\n<td>June 27, 2024</td>\n<td><a href=\"https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/\">Toward greater transparency: Unveiling Cloud Service CVEs</a></td>\n</tr>\n<tr>\n<td>April 9, 2024</td>\n<td><a href=\"https://aka.ms/MSRC-CWE-Blog\">Toward greater transparency: Security Update Guide now shares CWEs for CVEs</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-resources\">Relevant Resources</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10  and Windows 11 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A list of the latest servicing stack updates for each operating system can be found in <a href=\"https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001\">ADV990001</a>. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.</li>\n<li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li>\n<li>Customers running Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See <a href=\"https://support.microsoft.com/en-us/topic/procedure-to-continue-receiving-security-updates-after-extended-support-ends-on-january-14-2020-48c59204-fe67-3f42-84fc-c3c3145ff28e\">4522133</a> for more information.</li>\n</ul>\n<h2 id=\"known-issues\">Known Issues</h2>\n<p>You can see these in more detail from the Deployments tab by selecting <strong>Known Issues</strong> column in the <strong>Edit Columns</strong> panel.</p>\n<p>For more information about Windows Known Issues, please see <a href=\"https://docs.microsoft.com/en-us/windows/release-information/windows-message-center\">Windows message center</a> (links to currently-supported versions of Windows are in the left pane).</p>\n<table>\n<thead>\n<tr>\n<th>KB Article</th>\n<th>Applies To</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5126646\">5126646</a></td>\n<td>Windows Server 2025</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5126651\">5126651</a></td>\n<td>Windows 10, version 1809, Windows Server 2019</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5126655\">5126655</a></td>\n<td>Windows Server 2022</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5126657\">5126657</a></td>\n<td>Windows 10 versions 21H2 and 22H2</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5126868\">5126868</a></td>\n<td>Windows 10 version 1607, Windows Server 2016</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5126934\">5126934</a></td>\n<td>SQL Server 2022 CU27 (Windows and Linux)</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5126967\">5126967</a></td>\n<td>SQL Server 2025 CU9 (Windows and Linux)</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5127646\">5127646</a></td>\n<td>Windows 11 version 26H1</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5127648\">5127648</a></td>\n<td>Windows 11 version 26H2, Windows 11 version 25H2,  Windows 11 version 24H2</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5128492\">5128492</a></td>\n<td>SQL Server 2025 GDR (Windows and Linux)</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5128493\">5128493</a></td>\n<td>SQL Server 2022 GDR (Windows and Linux)</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5128494\">5128494</a></td>\n<td>SQL Server 2019 CU32 (Windows and Linux)</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5128495\">5128495</a></td>\n<td>SQL Server 2019 GDR (Windows and Linux)</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5128496\">5128496</a></td>\n<td>SQL Server 2017 CU31 (Windows and Linux)</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5128497\">5128497</a></td>\n<td>SQL Server 2017 GDR (Windows and Linux)</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5129955\">5129955</a></td>\n<td>Exchange Server SE</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5129956\">5129956</a></td>\n<td>Exchange Server 2019 CU15</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5129957\">5129957</a></td>\n<td>Exchange Server 2019 CU14</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5129958\">5129958</a></td>\n<td>Exchange Server 2016 CU23</td>\n</tr>\n</tbody>\n</table>\n","langCode":"en-US"}