October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)

Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties requiring no customer actions. One vulnerability was disclosed before today&#;x26;#;39;s patch Tuesday, and one is already exploited.

Summary from US-CERT / SANS Internet Storm Center.

Related coverage

Other sources covering the same vulnerabilities or event.

More in Vulnerabilities

CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

The Hacker Newsjust nowVulnerabilitiesCVE-2026-96652

PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

SecurityWeek1h agoVulnerabilitiesCVE-2026-109618CVE-2026-109619

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

The Hacker News3h agoAppSecVulnerabilities

Risky Business #856 -- 8-bit encryption, PHP megabugs and more

Podcast1 h 5 minRisky Business3h agoThreat IntelVulnerabilitiesAI

Urgent Livestream - PHP Vulnerabilities: What You Need to Know Today and Do Right Now

VideoSANS Institute6h agoVulnerabilities