BlackTreeCVE Intelligence
Patch Tuesday cycleOctober 2026 Patch TuesdayProvisional

Canonical Patch Tuesday catalogue

October 2026 Patch Tuesday catalogue.

Provisional Patch Tuesday cycle. Source-complete vendor cohorts are published independently; pending or degraded sources expose readiness only. 281 publication-approved records are currently shown. No claim is made for vendors outside the active cohort. 1 candidate record is withheld pending correction or publication review. Each row is one deployable update or vendor advisory with linked CVEs. BlackTree timing remains separate from CVSS and vendor severity.

281Patch recordsStable operational entries, not CVE duplicates
1432Linked unique CVEsEvery CVE opens in BlackTree CVE Intelligence
11Accelerated actionsOut-of-band action
11Revised entriesCanonical history remains visible

October 2026 Patch Tuesday

Patch catalogue

Search and filters execute on the server. Each response is capped at the selected bounded page size, with a maximum of 100 compact patch rows.

Hide update groups
No groups hidden

Select every group you want removed from this view, its shared URL and its filtered exports.

Microsoft
SAP
Several vendor and product groups can be hidden together.
Additional filtersProduct, platform, exploitation, restart, issues, date and cycle state
Reset filters
281 matching recordsPage 1 of 15
Selected PDF report0 of 20 visible records selectedSelect up to 20 approved records. Filter-hidden selections remain selected until cleared.
MicrosoftDeploy Microsoft Apps update for Microsoft Power Apps for AndroidMSRC-2026-10-apps-release-notes · Updated 2026-10-13
Product and releaseMicrosoft Power Apps for Android3.26085.7
Review linked CVEs (1) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 1 linked CVE for Microsoft Power Apps for Android.

Open official sourceCanonical detail record

Evidence and release

Advisory
MSRC-2026-10-apps-release-notes
Platform
Apps
Restart
no
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Important

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
  • This update uses vendor release notes or a fixed build instead of a standalone KB identity.
Vendor-linked CVEs (1)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 8.0
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Apps update for Microsoft PowerToysMSRC-2026-10-apps-release-notes · Updated 2026-10-13
Product and releaseMicrosoft PowerToys0.101.2632.0
Review linked CVEs (2) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 2 linked CVEs for Microsoft PowerToys.

Open official sourceCanonical detail record

Evidence and release

Advisory
MSRC-2026-10-apps-release-notes
Platform
Apps
Restart
no
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Important

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
  • This update uses vendor release notes or a fixed build instead of a standalone KB identity.
Vendor-linked CVEs (2)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 7.3
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Apps update for Microsoft PaintMSRC-2026-10-apps-store-app · Updated 2026-10-13
Product and releaseMicrosoft Paint11.2605.91.0
Review linked CVEs (1) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 1 linked CVE for Microsoft Paint.

Open official sourceCanonical detail record

Evidence and release

Advisory
MSRC-2026-10-apps-store-app
Platform
Apps
Restart
varies by product
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Important

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
  • This update uses vendor release notes or a fixed build instead of a standalone KB identity.
Vendor-linked CVEs (1)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 8.1
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Azure update for Azure CycleCloud 8.9.1MSRC-2026-10-azure-release-notes · Updated 2026-10-13
Product and releaseAzure CycleCloud 8.9.18.9.2
Review linked CVEs (1) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 1 linked CVE for Azure CycleCloud 8.9.1.

Open official sourceCanonical detail record

Evidence and release

Advisory
MSRC-2026-10-azure-release-notes
Platform
Azure
Restart
no
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Important

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
  • This update uses vendor release notes or a fixed build instead of a standalone KB identity.
Vendor-linked CVEs (1)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 7.3
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Azure update for Azure CLIMSRC-2026-10-azure-release-notes · Updated 2026-10-13
Product and releaseAzure CLI1.0.7
Review linked CVEs (1) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 1 linked CVE for Azure CLI.

Open official sourceCanonical detail record

Evidence and release

Advisory
MSRC-2026-10-azure-release-notes
Platform
Azure
Restart
varies by product
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Important

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
  • This update uses vendor release notes or a fixed build instead of a standalone KB identity.
Vendor-linked CVEs (1)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 6.5
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Azure update for Azure HDInsightMSRC-2026-10-azure-release-notes · Updated 2026-10-13
Product and releaseAzure HDInsight2606012120
Review linked CVEs (1) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 1 linked CVE for Azure HDInsight.

Open official sourceCanonical detail record

Evidence and release

Advisory
MSRC-2026-10-azure-release-notes
Platform
Azure
Restart
yes
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Important

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
  • This update uses vendor release notes or a fixed build instead of a standalone KB identity.
Vendor-linked CVEs (1)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 7.5
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Azure update for Arc Enabled Servers - Azure Connected Machine AgentMSRC-2026-10-azure-release-notes · Updated 2026-10-13
Product and releaseArc Enabled Servers - Azure Connected Machine Agent1.68
Review linked CVEs (1) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 1 linked CVE for Arc Enabled Servers - Azure Connected Machine Agent.

Open official sourceCanonical detail record

Evidence and release

Advisory
MSRC-2026-10-azure-release-notes
Platform
Azure
Restart
no
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Important

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
  • This update uses vendor release notes or a fixed build instead of a standalone KB identity.
Vendor-linked CVEs (1)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 6.5
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Developer Tools security update KB5126868KB5126868 · Updated 2026-10-13
Product and releaseMicrosoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 version 1607, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 20162.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0
Review linked CVEs (18) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 18 linked CVEs for Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 version 1607, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016. Microsoft marks CVE-2026-108398 as publicly disclosed, without that disclosure alone changing the BlackTree action window.

Open official sourceCanonical detail record

Evidence and release

Advisory
KB5126868
Platform
Developer Tools
Restart
varies by product
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Critical

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
Vendor-linked CVEs (18)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 8.8
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Developer Tools security update KB5127660KB5127660 · Updated 2026-10-13
Product and releaseMicrosoft .NET Framework 3.5 on Windows Server 20122.0.50727.8987 AND 3.0.30729.8982
Review linked CVEs (16) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 16 linked CVEs for Microsoft .NET Framework 3.5 on Windows Server 2012.

Open official sourceCanonical detail record

Evidence and release

Advisory
KB5127660
Platform
Developer Tools
Restart
varies by product
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Critical

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
Vendor-linked CVEs (16)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 8.8
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Developer Tools security update KB5127664KB5127664 · Updated 2026-10-13
Product and releaseMicrosoft .NET Framework 3.5 on Windows Server 2012 R22.0.50727.8987 AND 3.0.30729.8982
Review linked CVEs (16) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 16 linked CVEs for Microsoft .NET Framework 3.5 on Windows Server 2012 R2.

Open official sourceCanonical detail record

Evidence and release

Advisory
KB5127664
Platform
Developer Tools
Restart
varies by product
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Critical

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
Vendor-linked CVEs (16)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 8.8
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Developer Tools security update KB5127666KB5127666 · Updated 2026-10-13
Product and releaseMicrosoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2019, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 version 18092.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0
Review linked CVEs (18) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 18 linked CVEs for Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2019, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 version 1809. Microsoft marks CVE-2026-108398 as publicly disclosed, without that disclosure alone changing the BlackTree action window.

Open official sourceCanonical detail record

Evidence and release

Advisory
KB5127666
Platform
Developer Tools
Restart
varies by product
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Critical

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
Vendor-linked CVEs (18)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 8.8
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Developer Tools security update KB5127667KB5127667 · Updated 2026-10-13
Product and releaseMicrosoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 20124.7.4150.0
Review linked CVEs (18) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 18 linked CVEs for Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012. Microsoft marks CVE-2026-108398 as publicly disclosed, without that disclosure alone changing the BlackTree action window.

Open official sourceCanonical detail record

Evidence and release

Advisory
KB5127667
Platform
Developer Tools
Restart
varies by product
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Critical

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
Vendor-linked CVEs (18)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 8.8
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Developer Tools security update KB5127668KB5127668 · Updated 2026-10-13
Product and releaseMicrosoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R24.7.4150.0
Review linked CVEs (18) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 18 linked CVEs for Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2. Microsoft marks CVE-2026-108398 as publicly disclosed, without that disclosure alone changing the BlackTree action window.

Open official sourceCanonical detail record

Evidence and release

Advisory
KB5127668
Platform
Developer Tools
Restart
varies by product
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Critical

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
Vendor-linked CVEs (18)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 8.8
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Developer Tools security update KB5127683KB5127683 · Updated 2026-10-13
Product and releaseMicrosoft .NET Framework 3.5 AND 4.8 on Windows 10 version 21H2, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 22H22.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0
Review linked CVEs (18) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 18 linked CVEs for Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 21H2, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 22H2. Microsoft marks CVE-2026-108398 as publicly disclosed, without that disclosure alone changing the BlackTree action window.

Open official sourceCanonical detail record

Evidence and release

Advisory
KB5127683
Platform
Developer Tools
Restart
varies by product
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Critical

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
Vendor-linked CVEs (18)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 8.8
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Developer Tools security update KB5127684KB5127684 · Updated 2026-10-13
Product and releaseMicrosoft .NET Framework 4.8 on Windows 10 version 1607, Microsoft .NET Framework 4.8 on Windows Server 20164.8.4811.0
Review linked CVEs (18) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 18 linked CVEs for Microsoft .NET Framework 4.8 on Windows 10 version 1607, Microsoft .NET Framework 4.8 on Windows Server 2016. Microsoft marks CVE-2026-108398 as publicly disclosed, without that disclosure alone changing the BlackTree action window.

Open official sourceCanonical detail record

Evidence and release

Advisory
KB5127684
Platform
Developer Tools
Restart
varies by product
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Critical

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
Vendor-linked CVEs (18)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 8.8
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Developer Tools security update KB5127685KB5127685 · Updated 2026-10-13
Product and releaseMicrosoft .NET Framework 3.5 AND 4.8 on Windows 10 version 1809, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 20192.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0
Review linked CVEs (18) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 18 linked CVEs for Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 1809, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019. Microsoft marks CVE-2026-108398 as publicly disclosed, without that disclosure alone changing the BlackTree action window.

Open official sourceCanonical detail record

Evidence and release

Advisory
KB5127685
Platform
Developer Tools
Restart
varies by product
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Critical

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
Vendor-linked CVEs (18)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 8.8
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Developer Tools security update KB5127686KB5127686 · Updated 2026-10-13
Product and releaseMicrosoft .NET Framework 4.8 on Windows Server 20124.8.4811.0
Review linked CVEs (18) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 18 linked CVEs for Microsoft .NET Framework 4.8 on Windows Server 2012. Microsoft marks CVE-2026-108398 as publicly disclosed, without that disclosure alone changing the BlackTree action window.

Open official sourceCanonical detail record

Evidence and release

Advisory
KB5127686
Platform
Developer Tools
Restart
varies by product
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Critical

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
Vendor-linked CVEs (18)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 8.8
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Developer Tools security update KB5127687KB5127687 · Updated 2026-10-13
Product and releaseMicrosoft .NET Framework 3.5 AND 4.8 on Windows Server 20222.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0
Review linked CVEs (18) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 18 linked CVEs for Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022. Microsoft marks CVE-2026-108398 as publicly disclosed, without that disclosure alone changing the BlackTree action window.

Open official sourceCanonical detail record

Evidence and release

Advisory
KB5127687
Platform
Developer Tools
Restart
varies by product
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Critical

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
Vendor-linked CVEs (18)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 8.8
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Developer Tools security update KB5127688KB5127688 · Updated 2026-10-13
Product and releaseMicrosoft .NET Framework 4.8 on Windows Server 2012 R24.8.4811.0
Review linked CVEs (18) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 18 linked CVEs for Microsoft .NET Framework 4.8 on Windows Server 2012 R2. Microsoft marks CVE-2026-108398 as publicly disclosed, without that disclosure alone changing the BlackTree action window.

Open official sourceCanonical detail record

Evidence and release

Advisory
KB5127688
Platform
Developer Tools
Restart
varies by product
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Critical

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
Vendor-linked CVEs (18)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 8.8
Confirmed exploitedCVSS above 9.0
MicrosoftDeploy Microsoft Developer Tools security update KB5127689KB5127689 · Updated 2026-10-13
Product and releaseMicrosoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 21H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 22H22.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0
Review linked CVEs (18) No confirmed exploitation stated

Operational summary

This official Microsoft Patch Tuesday update addresses 18 linked CVEs for Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 21H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 22H2. Microsoft marks CVE-2026-108398 as publicly disclosed, without that disclosure alone changing the BlackTree action window.

Open official sourceCanonical detail record

Evidence and release

Advisory
KB5127689
Platform
Developer Tools
Restart
varies by product
CVE state
Complete For Update

Why this urgency

  • Fix Available
  • Routine Review

Vendor signal: Critical

Decision confidence: high

Known gaps and caveats

  • Confirm exact product, edition and architecture applicability in the Microsoft Security Update Guide before deployment.
Vendor-linked CVEs (18)0 confirmed exploited · 0 with PoC or lab evidence · max CVSS 8.8
Confirmed exploitedCVSS above 9.0