Patch Tuesday dashboard
Each month's Microsoft security release in one table: severity, CVSS, the KBs that fix each CVE, and whether it is exploited in the wild according to MSRC or the CISA Known Exploited Vulnerabilities catalog. Rebuilt every week from the MSRC API, so revisions after Patch Tuesday show up too.
October 2026
1,456 Microsoft CVEs: 88 Critical, 1 exploited, 1 publicly disclosed.
- CVE-2026-96951 Windows Shell Security Feature Bypass Vulnerability (exploited)
- CVE-2026-108398 .NET Framework Security Feature Bypass Vulnerability
- CVE-2026-96207 Microsoft Partner Center Elevation of Privilege Vulnerability
- CVE-2026-94510 Microsoft Bookings Elevation of Privilege Vulnerability
- CVE-2026-100202 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
All months
| Month | CVEs | Critical | Exploited | Publicly disclosed |
|---|---|---|---|---|
| October 2026 | 1,456 | 88 | 1 | 1 |
| September 2026 | 998 | 132 | 2 | 0 |