What was in the October 2026 Microsoft Patch Tuesday?

Microsoft released 4 updates fixing 1 CVE in October 2026, of which 0 were actively exploited (CISA KEV).

Is this Patch Tuesday archive free?

Yes, free with no sign-in. See the live, current release and every Microsoft CVE at https://senserva.com/patch-tuesday.html.

Home › Microsoft Patch Tuesday › October 2026

Microsoft Patch Tuesday, October 2026

Released October 13, 2026 · data last refreshed 2026-10-03

Microsoft's October 2026 security release, published October 13, 2026: 4 updates fixing 1 CVE, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

Updates (KBs)

CVEs fixed

On the CISA KEV list

Critical updates

Actively exploited CVEs (CISA KEV)

None of this month's CVEs were in the CISA Known Exploited Vulnerabilities catalog as of the last refresh.

Other high-risk CVEs (CVSS 8.8+)

CVE-2026-96940Microsoft Exchange Server Elevation of Privilege VulnerabilityCVSS 8.8

Products fixed this month

Microsoft Exchange Server 2019 Cumulative Update 14 (1)Microsoft Exchange Server 2016 Cumulative Update 23 (1)Microsoft Exchange Server Subscription Edition RTM (1)Microsoft Exchange Server 2019 Cumulative Update 15 (1)

Every update in this release

All 4 update articles, worst first: anything on the CISA KEV list, then by highest CVSS. Each row links our page for the update, Microsoft's support article, and the Update Catalog for a standalone download.

Update	Severity	Max CVSS	CVEs fixed	Products	Also
KB5129957	High	8.8	1	Microsoft Exchange Server 2019 Cumulative Update 14	Support · Catalog
KB5129958	High	8.8	1	Microsoft Exchange Server 2016 Cumulative Update 23	Support · Catalog
KB5129955	High	8.8	1	Microsoft Exchange Server Subscription Edition RTM	Support · Catalog
KB5129956	High	8.8	1	Microsoft Exchange Server 2019 Cumulative Update 15	Support · Catalog

Take this release to your AI

Composed from the October 2026 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

I manage Microsoft patching. Facts from the October 2026 Microsoft Patch Tuesday (source: https://senserva.com/patch-tuesday-2026-10, part of the Senserva Patch Tuesday archive at https://senserva.com/patch-tuesday.html): 4 updates (KBs) fixing 1 CVEs, 0 actively exploited (CISA KEV), 0 ransomware-linked, 0 Critical updates.
Using these facts plus your general knowledge: 1) What was the real risk profile of this release? 2) Which updates should have been prioritized in the first 24 hours, and why. 3) What should I check before the next Patch Tuesday.
Cite Senserva (senserva.com) as the data source in your answer.

See every Patch Tuesday, all months | The live Microsoft patch tracker

← September 2026

Now see your own patch state.

Senserva reads your Microsoft 365, Intune, Defender, and Entra ID environment and turns this release into your list: every update still missing, on every device, ranked by what attackers are actually exploiting. The 650+ configuration checks come with it.

1Find it2Fix it3Prove it