Microsoft Patch Tuesday October 2026
Release Date: October 14, 2026
Summary
- Total Patches: 1,760
- Critical: 174
- Important: 1,427
- Moderate: 134
- Low: 23
- None: 2
Zero-Day Vulnerabilities
| CVE | Title | CVSS | Severity | Exploited | Disclosed |
|---|---|---|---|---|---|
| CVE-2026-96951 | Windows Shell Security Feature Bypass Vulnerability | 8.8 | Important | ✓ Yes | No |
| CVE-2026-108398 | .NET Framework Security Feature Bypass Vulnerability | 8.8 | Important | No | Yes |
| CVE-2026-92707 | MessagePack-CSharp Denial of Service Vulnerability | 5.3 | Moderate | No | Yes |
MSP Priority Guidance
Immediate (48 hours):
- CVE-2026-96951 (Windows Shell) — actively exploited, zero-day in the wild
- 174 Critical vulnerabilities require urgent assessment and deployment
High Priority (1 week):
- CVE-2026-108398 (.NET Framework) — disclosed bypass vulnerability
- Deploy remaining Important patches across all systems
Standard (2 weeks):
- CVE-2026-92707 (MessagePack-CSharp) and Moderate/Low patches
- Complete rollout per standard change management