Patch TuesdayMicrosoft's monthly security release, by update and product, as the Security Update Guide states it. Nothing is generated.

October 2026

Microsoft CVEs1,477 Critical96

Exploited1

Publicly disclosed3

Republished1,947

Released2026-10-13

Your Windows releases from the fleet

Windows 11, version 26H2 — KB5127648 (3025 CVEs, 3 exploited · build 10.0.26100.9711)
Windows 11, version 25H2 — KB5127648 (3025 CVEs, 3 exploited · build 10.0.26100.9711), KB5124008 (20 CVEs · build 10.0.26200.9445), KB5101650 (2 CVEs · build 10.0.26200.8875)
Windows 11, version 24H2 — KB5127648 (3025 CVEs, 3 exploited · build 10.0.26100.9711), KB5124008 (20 CVEs · build 10.0.26200.9445), KB5101650 (2 CVEs · build 10.0.26200.8875)
Windows 11, version 23H2 — KB5126653 (965 CVEs, 1 exploited · build 10.0.22631.7652), KB5122880 (9 CVEs · build 10.0.22631.7582), KB5099414 (1 CVEs · build 10.0.22631.7376)

By update 152 in October 2026

Updates in this release
Update	Products	CVEs	Critical	Exploited
KB5127648 · 10.0.26100.9711	Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 11 Version 26H2	3025	75	3
KB5126657 · 10.0.19044.7807	Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2	1798	44	2
KB5126646 · 10.0.26100.33650	Windows Server 2025, Windows Server 2025 (Server Core installation)	1041	35	1
KB5127646 · 10.0.28000.3231	Windows 11 Version 26H1, Windows 11 version 26H1	997	25	1
KB5126655 · 10.0.20348.5761	Windows Server 2022, Windows Server 2022 (Server Core installation)	977	33	1
KB5126653 · 10.0.22631.7652	Windows 11 Version 23H2	965	25	1
KB5126651 · 10.0.17763.9376	Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation)	918	30	1
KB5126868 · 10.0.14393.9612	Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 version 1607, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016	770	27	1
KB5126836 · 6.3.9600.23470	Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)	649	23	1
Release Notes · 20260925.100	Outlook.com, azl3 brotli 1.1.0-2 on Azure Linux 3.0, azl3 nodejs 24.21.0-1 on Azure Linux 3.0, Raw Image Extension on Windows 10 Version 1607, Raw Image Extension on Windows 10 Version 1607 for 32-bit Systems, Raw Image Extension on Windows 10 and 28 more	23	8	1
Release Notes · 154.0.4258.62	Microsoft Edge (Chromium-based)	19	2	1
KB5126835 · 6.2.9200.26434	Windows Server 2012, Windows Server 2012 (Server Core installation)	612	21
Release Notes · 16.0.14334.20974	Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions	310	68
Release Notes · https://aka.ms/OfficeSecurityReleases	Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft 365 Apps for Enterprise for 32-bit Systems	162	37
Release Notes · 16.114.26101123	Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac	118	30
Release Notes · 18.11.2	Microsoft Visual Studio 2026 version 18.11, Microsoft Visual Studio 2026 version 18.12, Microsoft Visual Studio 2026 version 18.10	52	4
Release Notes · 17.14.43	Microsoft Visual Studio 2022 version 17.14	47	3
KB5002928 · 16.0.10417.20228	Office Online Server	44	13
KB5002927 · 16.0.20326.20190	Microsoft SharePoint Server Subscription Edition	36	2
Release Notes · 11.0.100-rc.3.26522.148	.NET 11.0 installed on Windows, .NET 11.0 installed on Linux, .NET 11.0 installed on Mac OS, .NET 11.0 runtime installed on Windows, ASP.NET Core 11.0, .NET 11.0 runtime installed on Linux and 1 more	34	2
KB5130035 · 9.0.21	.NET 9.0 runtime installed on Windows, ASP.NET Core 9.0, .NET 9.0 runtime installed on Mac OS, .NET 9.0 runtime installed on Linux	32	1
KB5130036 · 10.0.13	ASP.NET Core 10.0, .NET 10.0 runtime installed on Windows, .NET 10.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Linux	32
KB5130034 · 8.0.32	.NET 8.0 runtime installed on Windows, ASP.NET Core 8.0, .NET 8.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Linux	29	1
KB5126934 · 16.0.4305.5	Microsoft SQL Server 2022 for x64-based Systems (CU27)	21
KB5126967 · 17.0.5015.4	Microsoft SQL Server 2025 for x64-based Systems (CU9)	21
KB5128492 · 17.0.1145.4	Microsoft SQL Server 2025 for x64-based Systems (GDR)	21
KB5128493 · 16.0.1210.3	Microsoft SQL Server 2022 for x64-based Systems (GDR)	21
KB5124008 · 10.0.26200.9445	Windows 11 Version 25H2, Windows 11 Version 24H2	20	2
KB5128494 · 15.0.4500.2	Microsoft SQL Server 2019 for x64-based Systems (CU32)	19
KB5128495 · 15.0.2200.2	Microsoft SQL Server 2019 for x64-based Systems (GDR)	19
KB5127666 · 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0	Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2019, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 version 1809	18	1
KB5127689 · 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0	Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 21H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 22H2	18	1
KB5127690 · 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0	Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 24H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 25H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025	18	1
KB5127691 · 4.8.9363.0	Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1	18	1
KB5127692 · 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0	Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 23H2	18	1
KB5127693 · 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0	Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022	18	1
KB5127667 · 4.7.4150.0	Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012	17	1
KB5127668 · 4.7.4150.0	Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2	17	1
KB5127685 · 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0	Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 1809, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019	17	1
KB5127687 · 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0	Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022	17	1

112 more updates, mostly single products; the CVE table below names each.

CVEs 52 of 1477, Microsoft's own (include the 1947 republished)

All components Microsoft Office Excel 70 Role: DNS Server 52 Windows Kernel 46 Microsoft Office Word 45 Windows Installer 38 Microsoft Office SharePoint 37 Windows Win32 Kernel Subsystem 36 Microsoft Windows Search Component 29 .NET 27 Windows NTFS 26 SQL Server 22 Windows Error Reporting 22 Windows Broadcast DVR User Service 20 Remote Desktop Client 19

CVEs in this release
CVE	Severity	CVSS	Component	Title	Update
CVE-2026-83869	Important	9.8	Role: DNS Server	Windows Domain Name Service Remote Code Execution Vulnerability	KB5126651, KB5126655, KB5126657 +10
CVE-2026-96113	Important	9.8	Role: DNS Server	Windows Domain Name Service Remote Code Execution Vulnerability	KB5126836, KB5126868, KB5126651 +3
CVE-2026-70167	Important	8.8	Role: DNS Server	Windows Domain Name Service Remote Code Execution Vulnerability	KB5126655, KB5126646
CVE-2026-83642	Important	8.8	Role: DNS Server	Windows Domain Name Service Remote Code Execution Vulnerability	KB5126651, KB5126655, KB5126657 +10
CVE-2026-83889	Important	8.8	Role: DNS Server	Windows DNS Server Remote Code Execution Vulnerability	KB5127648, KB5126651, KB5126655 +10
CVE-2026-85903	Important	8.8	Role: DNS Server	Windows Domain Name Service Remote Code Execution Vulnerability	KB5127648, KB5126651, KB5126655 +10
CVE-2026-88112	Important	8.8	Role: DNS Server	Windows Domain Name Service Remote Code Execution Vulnerability	KB5127648, KB5126651, KB5126655 +9
CVE-2026-88114	Important	8.8	Role: DNS Server	Windows Domain Name Service Remote Code Execution Vulnerability	KB5126651, KB5126655, KB5126657 +8
CVE-2026-88116	Important	8.8	Role: DNS Server	Windows Domain Name Service Remote Code Execution Vulnerability	KB5127648, KB5126651, KB5126655 +8
CVE-2026-70127	Important	8.1	Role: DNS Server	Windows Domain Name Service Remote Code Execution Vulnerability	KB5126651, KB5126655, KB5126646 +3
CVE-2026-83635	Important	7.5	Role: DNS Server	Role: DNS Server Denial of Service Vulnerability	KB5126651, KB5126655, KB5126646 +3
CVE-2026-108127	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-108128	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-108129	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-70244	Important	6.5	Role: DNS Server	Windows DNS Server Information Disclosure Vulnerability	KB5126651, KB5126655, KB5126657 +10
CVE-2026-88122	Important	6.5	Role: DNS Server	Role: DNS Server Denial of Service Vulnerability	KB5126835, KB5126836, KB5126868 +3
CVE-2026-88123	Important	6.5	Role: DNS Server	Role: DNS Server Denial of Service Vulnerability	KB5126835, KB5126836, KB5126868 +3
CVE-2026-88125	Important	6.5	Role: DNS Server	Role: DNS Server Denial of Service Vulnerability	KB5126835, KB5126836, KB5126868 +3
CVE-2026-88129	Important	6.5	Role: DNS Server	Role: DNS Server Denial of Service Vulnerability	KB5126835, KB5126836, KB5126868 +3
CVE-2026-88130	Important	6.5	Role: DNS Server	Role: DNS Server Denial of Service Vulnerability	KB5126835, KB5126836, KB5126868 +3
CVE-2026-97817	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97819	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97820	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97821	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97822	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97823	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97824	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97825	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126868, KB5126651, KB5126657 +8
CVE-2026-97826	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97827	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97828	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5127648, KB5126651, KB5126655 +10
CVE-2026-97829	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97831	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97832	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126653 +10
CVE-2026-97833	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97834	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97835	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97836	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126651, KB5126657, KB5126657 +10
CVE-2026-97837	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97838	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97839	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97840	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97841	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97842	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97843	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-97844	Important	6.5	Role: DNS Server	Role: DNS Server Information Disclosure Vulnerability	KB5126835, KB5126836, KB5126868 +10
CVE-2026-103560	Important	5.5	Role: DNS Server	Role: DNS Server Tampering Vulnerability	KB5126835, KB5126836, KB5126868 +3
CVE-2026-70071	Important	5.5	Role: DNS Server	Role: DNS Server Tampering Vulnerability	KB5126651, KB5126655, KB5126646 +3
CVE-2026-70083	Important	5.5	Role: DNS Server	Role: DNS Server Tampering Vulnerability	KB5126651, KB5126655, KB5126646 +3
CVE-2026-70085	Important	5.5	Role: DNS Server	Role: DNS Server Tampering Vulnerability	KB5126651, KB5126655, KB5126646 +3
CVE-2026-70087	Important	5.5	Role: DNS Server	Role: DNS Server Security Feature Bypass Vulnerability	KB5126651, KB5126655, KB5126646 +3
CVE-2026-96926	Important	5.5	Role: DNS Server	Role: DNS Server Tampering Vulnerability	KB5126835, KB5126836, KB5126868 +3

Revised by Microsoft 2026-11-01. "Exploited" and "disclosed" are Microsoft's own words from the guide's exploitability index; a CVE's page carries NVD's, CISA's and the public exploit indexes' besides.