Microsoft addresses over 1400 vulnerabilities in October security update

a sign in the grass — Robin Jonathan Deutsch / Unsplash

Microsoft released its monthly security update on October 13, 2026, addressing over 1400 vulnerabilities. Some of these vulnerabilities have already been confirmed as exploited.

The updates were released in line with the regular security updates that companies publish on the second Tuesday of each month, known as "Patch Tuesday."

The newly disclosed vulnerabilities include 1407 items that have been assigned CVE numbers. Additionally, one advisory without an assigned number was also published.

The impact of these vulnerabilities varies; however, 315 of them pose a risk of remote code execution, and 673 are associated with privilege escalation. Furthermore, there are 252 vulnerabilities related to information leakage, 72 related to denial of service, 40 for bypassing security features, 27 related to impersonation, and 29 associated with memory issues.

In terms of severity, among the vulnerabilities, 78 are classified as "Critical," which is the highest level on a four-tier scale. A total of 1329 vulnerabilities fall into the second-highest category, labeled "Important," while one is categorized as "Moderate."