Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
October 2026 Patch Tuesday
Lead record- Why these records are connected
- Records grouped into the same Patch Tuesday cycle; this does not establish a single cause.
- Connection key
pt:2026-10- Public snapshot refreshed
- today 16:29 UTC
- Distinct source events
- 1494
- Source records represented
- 1494
Current snapshot membership is shown here. Source histories and cited revisions remain on each record. Future source targets are labelled separately from observed changes. Browse connections.
Evidence in chronological order
- Fri 2 Oct · Dated source evidence · Published vulnerability Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2026-96940 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Thu 8 Oct · Dated source evidence · Published vulnerability Azure SRE Agent Elevation of Privilege VulnerabilityCVE-2026-69435 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Thu 8 Oct · Dated source evidence · Published vulnerability Azure App Service Remote Code Execution VulnerabilityCVE-2026-77900 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Thu 8 Oct · Dated source evidence · Published vulnerability Azure API Center Information Disclosure VulnerabilityCVE-2026-83943 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Thu 8 Oct · Dated source evidence · Published vulnerability Azure Event Grid Spoofing VulnerabilityCVE-2026-83947 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Thu 8 Oct · Dated source evidence · Published vulnerability Microsoft Dataverse Remote Code Execution VulnerabilityCVE-2026-88131 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Thu 8 Oct · Dated source evidence · Published vulnerability Microsoft Bookings Elevation of Privilege VulnerabilityCVE-2026-94510 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Thu 8 Oct · Dated source evidence · Published vulnerability Microsoft Partner Center Elevation of Privilege VulnerabilityCVE-2026-96207 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Update Service Elevation of Privilege VulnerabilityCVE-2026-100200 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Client License Service Elevation of Privilege VulnerabilityCVE-2026-100201 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Message Queuing Queue Manager Remote Code Execution VulnerabilityCVE-2026-100202 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Update Service Elevation of Privilege VulnerabilityCVE-2026-100203 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability SysInternals Elevation of Privilege VulnerabilityCVE-2026-100205 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Azure CycleCloud Remote Code Execution VulnerabilityCVE-2026-100207 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Office Excel Remote Code Execution VulnerabilityCVE-2026-100209 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Office Excel Remote Code Execution VulnerabilityCVE-2026-100210 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Office Excel Remote Code Execution VulnerabilityCVE-2026-100211 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Office Excel Remote Code Execution VulnerabilityCVE-2026-100212 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Dynamics 365 Business Central Remote Code Execution VulnerabilityCVE-2026-100214 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Graphics Component Remote Code Execution VulnerabilityCVE-2026-100215 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Storage Elevation of Privilege VulnerabilityCVE-2026-100216 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Group Policy Elevation of Privilege VulnerabilityCVE-2026-100217 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Remote Desktop Gateway Service Remote Code Execution VulnerabilityCVE-2026-100218 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft QUIC Remote Code Execution VulnerabilityCVE-2026-100219 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Media Video Decoder Remote Code Execution VulnerabilityCVE-2026-100220 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Network Policy Server (NPS) Remote Code Execution VulnerabilityCVE-2026-100222 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Storage Elevation of Privilege VulnerabilityCVE-2026-100225 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Network File System Information Disclosure VulnerabilityCVE-2026-102186 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Kernel Information Disclosure VulnerabilityCVE-2026-102187 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Storage Port Driver Elevation of Privilege VulnerabilityCVE-2026-102188 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Storage Elevation of Privilege VulnerabilityCVE-2026-102189 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Storage Elevation of Privilege VulnerabilityCVE-2026-102191 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Failover Cluster Denial of Service VulnerabilityCVE-2026-102192 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityCVE-2026-102193 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Graphics Kernel Elevation of Privilege VulnerabilityCVE-2026-102194 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityCVE-2026-102195 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityCVE-2026-102196 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityCVE-2026-102197 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Remote Desktop Protocol Information Disclosure VulnerabilityCVE-2026-102198 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Windows Codecs Library Denial of Service VulnerabilityCVE-2026-102199 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required