// Microsoft 365CRITICAL
Microsoft's October 2026 Patch Tuesday addressed 1,413 CVEs including critical flaws in Microsoft 365 components. CVE-2026-70242 (Outlook Reading Pane RCE, CVSS 9.8) allows remote code execution via email preview without user interaction; CVE-2026-102866 (SharePoint EoP, CVSS 8.1) enables elevation of privilege. Additionally, CVE-2026-96951 (Windows Shell MOTW bypass, CVSS 8.8) is under active exploitation, allowing crafted files to circumvent Office Protected View and macro blocking.
- Microsoft: October 2026 Patch Tuesday fixes 1,413 CVEs incl. two(opens in a new tab)
- Microsoft's October Security Update Fixes 1,400+ Vulnerabilities(opens in a new tab)
- Classic Outlook updates, features, fixes and known issues (end-O(opens in a new tab)
// Get alerts for Microsoft 365