Microsoft has released a security advisory on the 14th of October 2026 in line with their regular monthly patch schedule which includes a number of updates to address 1413 vulnerabilities in two (2) high risk and ten (10) medium risk products.
These updates address vulnerabilities which may impact services through Elevation of Privilege, Remote Code Execution, Information Disclosure, Denial of Service, Security Restriction Bypass, Data Manipulation, and Spoofing.
For more information please see: Microsoft Security Update
This release consists of security updates for the following products, features and roles:
- Windows
- Office
- SharePoint Server
- SQL Server
- Exchange Server
- Developer Tools
- Azure
- Defender
- Edge
CVE-2026-96951 - Windows Shell Security Feature Bypass Vulnerability - Exploitation Detected
CVE-2026-108398 - .NET Framework Security Feature Bypass Vulnerability - Publicly disclosed