Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.8.

Jak se o tom psalo 11

1. 14. 10. 2026 04:25 · JPCERT/CC JP

   Security Alert: Microsoft Releases October 2026 Security Updates

2. 14. 10. 2026 · zachyceno 04:30 · NCSC-FI FI

   Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days

   Classification: Critical, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 9.8, CVEs: CVE-2026-70098, CVE-2026-102855, CVE-2026-102238, CVE-2026-102235, CVE-2026-102234, CVE-2026-97844, CVE-2026-97843, CVE-2026-97842, CVE-2026-97841, CVE-2026-97840, CVE-2026-97839, CVE-2026-97838, CVE-2026-97837, CVE-2026-97836, CVE-2026-97835, CVE-2026-97834, CVE-2026-97833, CVE-2026-97832, CVE-2026-97831, CVE-2026-97830 (+1364 other associated CVEs), Summary: Today is Microsoft's October 2026…

3. 13. 10. 2026 23:49 · Tenable Research US

   Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)

   69Critical 1337Important 0Moderate 1Low Microsoft addresses 1407 CVEs in the tenth Patch Tuesday of 2026, marking the second consecutive month to reset the bar as the largest Patch Tuesday release. This month’s updates include patches for two zero days, including one that was exploited in the wild. Microsoft patched 1,407 CVEs in its October 2026 Patch Tuesday release, with 69 rated critical, 1,337 rated as important, and one rated as low. This month’s update includes patches for 301 products…

4. 13. 10. 2026 23:40 · Rapid7 US

   Patch Tuesday - October 2026

   Microsoft is publishing 1,413 own-product vulnerabilities on October 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows. Anyone who enjoyed last month’s record-setting Patch Tuesday will love the October 2026 edition, because it’s much bigger still. As Rapid7 has noted over the course of 2026, there is every reason to suppose that vulnerability volumes will continue to rise. Microsoft is aware of exploitation in the wild for just one of the vulnerabilities published today, as well…

5. 13. 10. 2026 22:37 · Cisco Talos US

   Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities

   Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical." Microsoft notes that 1 of the vulnerabilities disclosed this month have been exploited in the wild CVE-2026-96951 is a security feature bypass vulnerability that affects Windows Shell. The shared weakness is Improper Neutralization of Special Elements used in a Command ('Command Injection'). The vulnerability…

6. 13. 10. 2026 22:06 · Cyber Centre Kanada CA

   Microsoft security advisory – October 2026 monthly rollup (AV26-1038)

   Serial Number:AV26-1038 Date: October 13, 2026 As of October 13, 2026, Microsoft is affected by vulnerabilities in the following products: .NET 10.0 .NET 11.0 .NET 8.0 .NET 9.0 ASP.NET Core 10.0 ASP.NET Core 11.0 ASP.NET Core 8.0 ASP.NET Core 9.0 Arc Enabled Servers Azure API Center Azure App Service for Linux Azure CLI Azure CycleCloud Azure Container Storage enabled by Azure Arc Azure Event Grid System Azure SRE Agent Azure Storage Blobs client library for Java HVEC Video Extensions Microsoft…

7. 13. 10. 2026 21:56 · BleepingComputer US nadpis události

   Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days

   Today is Microsoft's October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. [...]

8. 13. 10. 2026 21:25 · SANS Internet Storm Ctr. US

   October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)

   Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties requiring no customer actions. One vulnerability was disclosed before today's patch Tuesday, and one is already exploited. CVE-2026-96951: An already exploited Windows Shell Security Feature Bypass Vulnerability. This vulnerabliity allows bypassing the "Mark of the Web" making it easier to exeucte code by sending a malicious message to a user via e-mail or…

9. 13. 10. 2026 · zachyceno 22:02 · Microsoft Security US

   CVE-2026-96951 Windows Shell Security Feature Bypass Vulnerability

   Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

10. 13. 10. 2026 · zachyceno 14. 10. 2026 02:00 · CrowdStrike US

    October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities

11. 13. 10. 2026 · zachyceno 21:30 · CISA KEV US

    Microsoft Windows Command Injection Vulnerability (CVE-2026-96951)

    CISA added CVE-2026-96951 to the Known Exploited Vulnerabilities catalog. Affected product: Microsoft Windows. Remediation due date: 2026-10-16.