Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
October 2026 Patch Tuesday
Lead record- Why these records are connected
- Records grouped into the same Patch Tuesday cycle; this does not establish a single cause.
- Connection key
pt:2026-10- Public snapshot refreshed
- today 17:32 UTC
- Distinct source events
- 1494
- Source records represented
- 1494
Current snapshot membership is shown here. Source histories and cited revisions remain on each record. Future source targets are labelled separately from observed changes. Browse connections.
Evidence in chronological order
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-105715 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Office Access Remote Code Execution VulnerabilityCVE-2026-105716 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Office Access Remote Code Execution VulnerabilityCVE-2026-105717 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-105718 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft SharePoint Server Information Disclosure VulnerabilityCVE-2026-105719 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Office SharePoint Elevation of Privilege VulnerabilityCVE-2026-105720 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityCVE-2026-105722 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Distributed File System (DFS) Elevation of Privilege VulnerabilityCVE-2026-105723 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Security App Elevation of Privilege VulnerabilityCVE-2026-105725 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Defender Information Disclosure VulnerabilityCVE-2026-105726 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Dynamics 365 Business Central Elevation of Privilege VulnerabilityCVE-2026-105727 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Dynamics Business Central Information Disclosure VulnerabilityCVE-2026-105728 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability SysInternals Elevation of Privilege VulnerabilityCVE-2026-105729 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Office Graphics Component Information Disclosure VulnerabilityCVE-2026-105731 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability SysInternals Elevation of Privilege VulnerabilityCVE-2026-105732 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Hyper-V Remote Code Execution VulnerabilityCVE-2026-105733 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Role: DNS Server Information Disclosure VulnerabilityCVE-2026-108127 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Role: DNS Server Information Disclosure VulnerabilityCVE-2026-108128 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Role: DNS Server Information Disclosure VulnerabilityCVE-2026-108129 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityCVE-2026-108130 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Active Directory Federation Services (AD FS) Spoofing VulnerabilityCVE-2026-108131 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Kerberos Elevation of Privilege VulnerabilityCVE-2026-108132 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityCVE-2026-108133 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Autopilot Elevation of Privilege VulnerabilityCVE-2026-108134 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Backup Engine Elevation of Privilege VulnerabilityCVE-2026-108135 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Windows Search Component Elevation of Privilege VulnerabilityCVE-2026-108136 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityCVE-2026-108396 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Publicly disclosed vulnerability .NET Framework Security Feature Bypass VulnerabilityCVE-2026-108398 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.MSRC reports public disclosure · Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Hyper-V Elevation of Privilege VulnerabilityCVE-2026-108399 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2026-108400 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Windows PDF Remote Code Execution VulnerabilityCVE-2026-108457 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Remote Desktop Client Remote Code Execution VulnerabilityCVE-2026-108458 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Message Queuing Remote Code Execution VulnerabilityCVE-2026-108460 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityCVE-2026-108461 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Kernel Information Disclosure VulnerabilityCVE-2026-108462 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows SmartScreen Security Feature Bypass VulnerabilityCVE-2026-108463 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Software Protection Platform (SPP) Elevation of Privilege VulnerabilityCVE-2026-108464 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Update Delivery Optimization Elevation of Privilege VulnerabilityCVE-2026-108465 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Windows Kernel Denial of Service VulnerabilityCVE-2026-108466 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityCVE-2026-108467 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required