Microsoft and Adobe Patch Tuesday, October 2026 Security Update Review | Qualys

Summary: Microsoft's October 2026 Patch Tuesday addresses 1,414 vulnerabilities, including 78 rated critical and 1,329 important, making it the company's largest security update ever after 400 fixes in August and over 970 in September. Adobe separately released 11 advisories covering 176 vulnerabilities across products including Experience Manager, ColdFusion, Commerce, Photoshop and Bridge, 23 of them critical, while CISA added a Windows Shell command injection flaw to its Known Exploited Vulnerabilities Catalog and urged patching before October 16, 2026.
What's compelling: One of the 1,414 Microsoft vulnerabilities is already being exploited in the wild, and CISA's October 16, 2026 deadline leaves a narrow window to find and patch every affected host across a release this size.

Read the original at Qualys Blog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-10021 CVE-2026-100211 CVE-2026-100212 CVE-2026-102849 CVE-2026-102850 CVE-2026-105591 CVE-2026-105592 CVE-2026-105593 CVE-2026-105595 CVE-2026-105596 CVE-2026-105597 CVE-2026-105598 CVE-2026-105714 CVE-2026-105716 CVE-2026-70276 CVE-2026-70279 CVE-2026-70571 CVE-2026-77910 CVE-2026-83760 CVE-2026-83776 CVE-2026-83846 CVE-2026-83868 CVE-2026-85340 CVE-2026-87692 CVE-2026-87695 CVE-2026-87696 CVE-2026-88109 CVE-2026-88145 CVE-2026-88151 CVE-2026-88153 CVE-2026-88154 CVE-2026-88158 CVE-2026-88184 CVE-2026-88190 CVE-2026-88192 CVE-2026-88195 CVE-2026-88196 CVE-2026-88197 CVE-2026-88201 CVE-2026-94506 CVE-2026-95943 CVE-2026-96844 CVE-2026-96940 CVE-2026-97752 CVE-2026-97766 CVE-2026-97767 CVE-2026-97768 CVE-2026-97769 CVE-2026-97773 CVE-2026-97774 CVE-2026-97775 CVE-2026-97779 CVE-2026-97780
Related: Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026