// Microsoft AzureCRITICAL
Microsoft released 1,415 security patches in October 2026 Patch Tuesday, the first four-digit CVE release in company history. The update includes critical vulnerabilities affecting Azure services, SharePoint, SQL Server, Windows, and Exchange. CVE-2026-96951 (Windows Shell) is actively exploited in the wild; CVE-2026-102866 (SharePoint) allows unauthenticated elevation of privilege; CVE-2026-65674 (SQL Server) enables remote code execution. Fifty-nine CVEs are classified as potentially wormable.
- October 2026: Another record patch day with 1.415 Microsoft CVEs(opens in a new tab)
- Windows Zero-Day CVE-2026-96951: MotW Bypass Fix [2026](opens in a new tab)
- Microsoft SharePoint Code Injection Vulnerability (CVE-2026-6566(opens in a new tab)
- Microsoft Windows Type Confusion Vulnerability (CVE-2026-21519) (opens in a new tab)
- Microsoft's October Security Update Fixes 1,400+ Vulnerabilities(opens in a new tab)
- CISA warns of hackers now exploiting critical Node2Shell flaw(opens in a new tab)
// Get alerts for Microsoft Azure