Microsoft Server security updates, October 2026 (Patch Tuesday 2026-10-13)

Every Microsoft server-product CVE that the Microsoft Security Update Guide published in October 2026, including the Patch Tuesday release on 2026-10-13 and any out-of-band updates. Client-only products (Edge, Office apps, consumer Windows) are not tracked.

Advisories: 718
Critical: 43
High: 494
In CISA KEV: 1

Microsoft server CVEs, October 2026

Oct 13, 2026
Medium [CVE-2026-70017] Windows Secure Kernel Mode Information Disclosure Vulnerability
Medium5.5
Oct 13, 2026
Medium [CVE-2026-69979] Windows AppX Deployment Service Security Feature Bypass Vulnerability
Medium5.5
Oct 13, 2026
Medium [CVE-2026-69978] Microsoft Windows VMSwitch Denial of Service Vulnerability
Medium5.6
Oct 13, 2026
Medium [CVE-2026-69974] Desktop Window Manager Information Disclosure Vulnerability
Medium4.7
Oct 13, 2026
Medium [CVE-2026-69973] Windows libarchive Tampering Vulnerability
Medium6.5
Oct 13, 2026
Medium [CVE-2026-69971] Windows Kernel-Mode Drivers Information Disclosure Vulnerability
Medium5.5
Oct 13, 2026
Medium [CVE-2026-69969] Windows AppX Deployment Service Information Disclosure Vulnerability
Medium4.7
Oct 13, 2026
Medium [CVE-2026-69967] Windows Overlay Filter Information Disclosure Vulnerability
Medium5.5
Oct 13, 2026
Medium [CVE-2026-69905] Windows AppX Deployment Service Tampering Vulnerability
Medium5.5
Oct 13, 2026
Medium [CVE-2026-69914] Windows AppX Deployment Service Information Disclosure Vulnerability
Medium5.5
Oct 13, 2026
Medium [CVE-2026-108466] Windows Kernel Denial of Service Vulnerability
Medium5.3
Oct 13, 2026
Medium [CVE-2026-108462] Windows Kernel Information Disclosure Vulnerability
Medium5.5
Oct 13, 2026
Medium [CVE-2026-70235] Windows Event Tracing Spoofing Vulnerability
Medium5.5
Oct 13, 2026
Medium [CVE-2026-105719] Microsoft SharePoint Server Information Disclosure Vulnerability
Medium6.5
Oct 13, 2026
Medium [CVE-2026-105713] Microsoft Office SharePoint Spoofing Vulnerability
Medium5.7
Oct 13, 2026
Medium [CVE-2026-102865] Microsoft Office SharePoint Information Disclosure Vulnerability
Medium6.5
Oct 13, 2026
Advisory ADV260001 Hardening changes for ReFS volumes on removable media
Unrated
Oct 2, 2026
High [CVE-2026-96940] Microsoft Exchange Server Elevation of Privilege Vulnerability
High8.8

Page 8 of 8 · 18 of 718

Get an email when Microsoft publishes the next one.

See Microsoft's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Microsoft

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.