BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Microsoft

October 2026 Early Security Updates

2026-Oct Oct 2, 2026 Source: Vendor

Imported by the Microsoft release catcher from the MSRC CVRF API (2026-Oct, revision 2026-10-05T15:25:55Z). 29 vulnerabilities, 1 of them carrying an acknowledgement. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

2174 lines
All 2174 CVEs 2170 Additional recognition 4 Unclaimed only
Showing 1–50 of 2174 , page 1 of 44
CVE-2026-96940 BR2026-0000-019582 unclaimed
Microsoft Exchange Server Elevation of Privilege Vulnerability
Credited as Jan Mitchell from Microsoft
CVE-2026-69435 BR2026-0000-020352 unclaimed
Azure SRE Agent Elevation of Privilege Vulnerability
Credited as Asaf Cohen with XBREACH.AI
CVE-2026-77900 BR2026-0000-020353 unclaimed
Azure App Service Remote Code Execution Vulnerability
Credited as Vamsi Nukavarapu with Microsoft
CVE-2026-83943 BR2026-0000-020354 unclaimed
Azure API Center Information Disclosure Vulnerability
Credited as Asaf Cohen with XBREACH.AI
CVE-2026-83947 BR2026-0000-020355 unclaimed
Azure Event Grid Spoofing Vulnerability
Credited as Asaf Cohen with XBREACH.AI
CVE-2026-88131 BR2026-0000-020356 unclaimed
Microsoft Dataverse Remote Code Execution Vulnerability
Credited as Brad Schlintz (nmdhkr)
CVE-2026-88131 BR2026-0000-020357 unclaimed
Microsoft Dataverse Remote Code Execution Vulnerability
Credited as Firas Fatnassi 🇹🇳
CVE-2026-94510 BR2026-0000-020358 unclaimed
Microsoft Bookings Elevation of Privilege Vulnerability
Credited as Asaf Cohen with XBREACH.AI
CVE-2026-96207 BR2026-0000-020359 unclaimed
Microsoft Partner Center Elevation of Privilege Vulnerability
Credited as Lucas Gayk with Microsoft
CVE BR2026-0000-020955 unclaimed
ADV260001 Hardening changes for ReFS volumes on removable media
Credited as Thanatos Tian (HKPolyU)
CVE BR2026-0000-020956 unclaimed
ADV260001 Hardening changes for ReFS volumes on removable media
Credited as wgg
CVE BR2026-0000-020957 unclaimed
ADV260001 Hardening changes for ReFS volumes on removable media
Credited as @2st__ with Diffract
CVE BR2026-0000-020958 unclaimed
ADV260001 Hardening changes for ReFS volumes on removable media
Credited as Zhiniang Peng with HUST
CVE-2026-100200 BR2026-0000-020959 unclaimed
Windows Update Service Elevation of Privilege Vulnerability
Credited as insu (@hpy_insu) of Theori, with Xint
CVE-2026-100201 BR2026-0000-020960 unclaimed
Windows Client License Service Elevation of Privilege Vulnerability
Credited as Ezrak1e
CVE-2026-100202 BR2026-0000-020961 unclaimed
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
Credited as R4mbb
CVE-2026-100203 BR2026-0000-020962 unclaimed
Windows Update Service Elevation of Privilege Vulnerability
Credited as Yuki Chen using GLM from z.ai (https://z.ai)
CVE-2026-100205 BR2026-0000-020963 unclaimed
SysInternals Elevation of Privilege Vulnerability
Credited as Zeze with TXOne
CVE-2026-100207 BR2026-0000-020964 unclaimed
Azure CycleCloud Remote Code Execution Vulnerability
Credited as XBREACH TEAM with XBreach.ai
CVE-2026-100209 BR2026-0000-020965 unclaimed
Microsoft Office Excel Remote Code Execution Vulnerability
Credited as Jongseong Kim (nevul37), UIUC
CVE-2026-100209 BR2026-0000-020966 unclaimed
Microsoft Office Excel Remote Code Execution Vulnerability
Credited as Hwiwon Lee (hwiwonl), UIUC
CVE-2026-100209 BR2026-0000-020967 unclaimed
Microsoft Office Excel Remote Code Execution Vulnerability
Credited as Dongjun Kim (smlijun), UIUC
CVE-2026-100209 BR2026-0000-020968 unclaimed
Microsoft Office Excel Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-100210 BR2026-0000-020969 unclaimed
Microsoft Office Excel Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-100211 BR2026-0000-020970 unclaimed
Microsoft Office Excel Remote Code Execution Vulnerability
Credited as Hwiwon Lee (hwiwonl), UIUC
CVE-2026-100211 BR2026-0000-020971 unclaimed
Microsoft Office Excel Remote Code Execution Vulnerability
Credited as Jongseong Kim (nevul37), UIUC
CVE-2026-100211 BR2026-0000-020972 unclaimed
Microsoft Office Excel Remote Code Execution Vulnerability
Credited as Dongjun Kim (smlijun), UIUC
CVE-2026-100212 BR2026-0000-020973 unclaimed
Microsoft Office Excel Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-100214 BR2026-0000-020974 unclaimed
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
Credited as Ilyass El Hadi with Armadin
CVE-2026-100214 BR2026-0000-020975 unclaimed
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
Credited as John Nzyuko
CVE-2026-100214 BR2026-0000-020976 unclaimed
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
Credited as Pham Quang Minh
CVE-2026-100215 BR2026-0000-020977 unclaimed
Microsoft Graphics Component Remote Code Execution Vulnerability
Credited as 0ccbbf129444eb66344ccafb92b00df4
CVE-2026-100216 BR2026-0000-020978 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-100216 BR2026-0000-020979 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as wgg with Diffract
CVE-2026-100217 BR2026-0000-020980 unclaimed
Windows Group Policy Elevation of Privilege Vulnerability
Credited as Filip Dragović
CVE-2026-100218 BR2026-0000-020981 unclaimed
Remote Desktop Gateway Service Remote Code Execution Vulnerability
Credited as yhw
CVE-2026-100219 BR2026-0000-020982 unclaimed
Microsoft QUIC Remote Code Execution Vulnerability
Credited as Seung Chan Kim
CVE-2026-100222 BR2026-0000-020983 unclaimed
Network Policy Server (NPS) Remote Code Execution Vulnerability
Credited as Pwnforr777
CVE-2026-100225 BR2026-0000-020984 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-100225 BR2026-0000-020985 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as wgg
CVE-2026-102186 BR2026-0000-020986 unclaimed
Windows Network File System Information Disclosure Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-102186 BR2026-0000-020987 unclaimed
Windows Network File System Information Disclosure Vulnerability
Credited as npc0vo with Diffract
CVE-2026-102187 BR2026-0000-020988 unclaimed
Windows Kernel Information Disclosure Vulnerability
Credited as haowei yan
CVE-2026-102188 BR2026-0000-020989 unclaimed
Windows Storage Port Driver Elevation of Privilege Vulnerability
Credited as Thanatos Tian (HKPolyU)
CVE-2026-102188 BR2026-0000-020990 unclaimed
Windows Storage Port Driver Elevation of Privilege Vulnerability
Credited as wgg with Diffract
CVE-2026-102189 BR2026-0000-020991 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as Seung Chan Kim
CVE-2026-102191 BR2026-0000-020992 unclaimed
Windows Storage Elevation of Privilege Vulnerability
Credited as Seung Chan Kim
CVE-2026-102192 BR2026-0000-020993 unclaimed
Windows Failover Cluster Denial of Service Vulnerability
Credited as 41ae55e9310ff27fa6f26af4727e5590
CVE-2026-102194 BR2026-0000-020994 unclaimed
Windows Graphics Kernel Elevation of Privilege Vulnerability
Credited as TunSk
CVE-2026-102194 BR2026-0000-020995 unclaimed
Windows Graphics Kernel Elevation of Privilege Vulnerability
Credited as Zhiniang Peng