Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

October 2026 Patch Tuesday

Lead record
Why these records are connected
Records grouped into the same Patch Tuesday cycle; this does not establish a single cause.
Connection key
pt:2026-10
Public snapshot refreshed
today 17:32 UTC
Distinct source events
1494
Source records represented
1494

Current snapshot membership is shown here. Source histories and cited revisions remain on each record. Future source targets are labelled separately from observed changes. Browse connections.

Evidence in chronological order

  1. Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-105715 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  2. Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Office Access Remote Code Execution VulnerabilityCVE-2026-105716 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  3. Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Office Access Remote Code Execution VulnerabilityCVE-2026-105717 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  4. Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Excel Remote Code Execution VulnerabilityCVE-2026-105718 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
  5. Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft SharePoint Server Information Disclosure VulnerabilityCVE-2026-105719 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  6. Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Office SharePoint Elevation of Privilege VulnerabilityCVE-2026-105720 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  7. Tue 13 Oct · Dated source evidence · Published vulnerability Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityCVE-2026-105722 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  8. Tue 13 Oct · Dated source evidence · Published vulnerability Windows Distributed File System (DFS) Elevation of Privilege VulnerabilityCVE-2026-105723 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  9. Tue 13 Oct · Dated source evidence · Published vulnerability Windows Security App Elevation of Privilege VulnerabilityCVE-2026-105725 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  10. Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Defender Information Disclosure VulnerabilityCVE-2026-105726 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  11. Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Dynamics 365 Business Central Elevation of Privilege VulnerabilityCVE-2026-105727 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  12. Tue 13 Oct · Dated source evidence · Published vulnerability Dynamics Business Central Information Disclosure VulnerabilityCVE-2026-105728 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  13. Tue 13 Oct · Dated source evidence · Published vulnerability SysInternals Elevation of Privilege VulnerabilityCVE-2026-105729 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  14. Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Office Graphics Component Information Disclosure VulnerabilityCVE-2026-105731 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  15. Tue 13 Oct · Dated source evidence · Published vulnerability SysInternals Elevation of Privilege VulnerabilityCVE-2026-105732 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  16. Tue 13 Oct · Dated source evidence · Published vulnerability Windows Hyper-V Remote Code Execution VulnerabilityCVE-2026-105733 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
  17. Tue 13 Oct · Dated source evidence · Published vulnerability Role: DNS Server Information Disclosure VulnerabilityCVE-2026-108127 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  18. Tue 13 Oct · Dated source evidence · Published vulnerability Role: DNS Server Information Disclosure VulnerabilityCVE-2026-108128 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  19. Tue 13 Oct · Dated source evidence · Published vulnerability Role: DNS Server Information Disclosure VulnerabilityCVE-2026-108129 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  20. Tue 13 Oct · Dated source evidence · Published vulnerability Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityCVE-2026-108130 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
  21. Tue 13 Oct · Dated source evidence · Published vulnerability Active Directory Federation Services (AD FS) Spoofing VulnerabilityCVE-2026-108131 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
  22. Tue 13 Oct · Dated source evidence · Published vulnerability Windows Kerberos Elevation of Privilege VulnerabilityCVE-2026-108132 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  23. Tue 13 Oct · Dated source evidence · Published vulnerability Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityCVE-2026-108133 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  24. Tue 13 Oct · Dated source evidence · Published vulnerability Windows Autopilot Elevation of Privilege VulnerabilityCVE-2026-108134 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  25. Tue 13 Oct · Dated source evidence · Published vulnerability Windows Backup Engine Elevation of Privilege VulnerabilityCVE-2026-108135 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  26. Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Windows Search Component Elevation of Privilege VulnerabilityCVE-2026-108136 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  27. Tue 13 Oct · Dated source evidence · Published vulnerability Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityCVE-2026-108396 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  28. Tue 13 Oct · Dated source evidence · Publicly disclosed vulnerability .NET Framework Security Feature Bypass VulnerabilityCVE-2026-108398 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.MSRC reports public disclosure · Microsoft states that customer action is required
  29. Tue 13 Oct · Dated source evidence · Published vulnerability Windows Hyper-V Elevation of Privilege VulnerabilityCVE-2026-108399 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
  30. Tue 13 Oct · Dated source evidence · Published vulnerability HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2026-108400 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
  31. Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft Windows PDF Remote Code Execution VulnerabilityCVE-2026-108457 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
  32. Tue 13 Oct · Dated source evidence · Published vulnerability Remote Desktop Client Remote Code Execution VulnerabilityCVE-2026-108458 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  33. Tue 13 Oct · Dated source evidence · Published vulnerability Windows Message Queuing Remote Code Execution VulnerabilityCVE-2026-108460 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
  34. Tue 13 Oct · Dated source evidence · Published vulnerability Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityCVE-2026-108461 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  35. Tue 13 Oct · Dated source evidence · Published vulnerability Windows Kernel Information Disclosure VulnerabilityCVE-2026-108462 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  36. Tue 13 Oct · Dated source evidence · Published vulnerability Windows SmartScreen Security Feature Bypass VulnerabilityCVE-2026-108463 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  37. Tue 13 Oct · Dated source evidence · Published vulnerability Software Protection Platform (SPP) Elevation of Privilege VulnerabilityCVE-2026-108464 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  38. Tue 13 Oct · Dated source evidence · Published vulnerability Windows Update Delivery Optimization Elevation of Privilege VulnerabilityCVE-2026-108465 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  39. Tue 13 Oct · Dated source evidence · Published vulnerability Windows Kernel Denial of Service VulnerabilityCVE-2026-108466 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
  40. Tue 13 Oct · Dated source evidence · Published vulnerability Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityCVE-2026-108467 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 17:32 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current