Theme

Security

October 2026 Patch Tuesday forecast: Time for an Office cleanup

Help Net SecurityPublished
Image: Help Net Security

September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch Apocalypse and everyone seems to be numb with respect to the insane number of CVEs reported. Despite this massive number, only two, CVE-2026-85880 and CVE-2026-81963, were reported Known Exploited and none were Publicly Disclosed. So for most of us, it’s…

Read at Help Net Security

CVE-2026-81963Exploited

Severity
7.8 High · CVSS 3.1 · Microsoft
Exploited
Since 2026-09-08 (CISA)
CISA deadline
2026-09-22
Published
Microsoft Windows 11 version 23H2

Affected: 10.0.22631.0 to before 10.0.22631.7582

Fixed: 10.0.22631.7582

Microsoft Windows 11 Version 23H2

Affected: 10.0.22631.0 to before 10.0.22631.7582

Fixed: 10.0.22631.7582

Microsoft Windows 11 Version 24H2

Affected: 10.0.26100.0 to before 10.0.26100.9445

Fixed: 10.0.26100.9445

Microsoft Windows 11 Version 25H2

Affected: 10.0.26200.0 to before 10.0.26200.9445

Fixed: 10.0.26200.9445

Microsoft Windows 11 version 26H1

Affected: 10.0.28000.0 to before 10.0.28000.2954

Fixed: 10.0.28000.2954

Microsoft Windows Server 2025

Affected: 10.0.26100.0 to before 10.0.26100.33438

Fixed: 10.0.26100.33438

1 more products in the CVE record.

msrc.microsoft.com · CVE record · NVD

CVE-2026-85880Exploited

Severity
7.8 High · CVSS 3.1 · Microsoft
Exploited
Since 2026-09-08 (CISA)
CISA deadline
2026-09-22
Published
Microsoft Windows 10 Version 1607

Affected: 10.0.14393.0 to before 10.0.14393.9512

Fixed: 10.0.14393.9512

Microsoft Windows 10 Version 1809

Affected: 10.0.17763.0 to before 10.0.17763.9245

Fixed: 10.0.17763.9245

Microsoft Windows 10 Version 21H2

Affected: 10.0.19044.0 to before 10.0.19044.7725

Fixed: 10.0.19044.7725

Microsoft Windows 10 Version 22H2

Affected: 10.0.19045.0 to before 10.0.19045.7725

Fixed: 10.0.19045.7725

Microsoft Windows Server 2012

Affected: 6.2.9200.0 to before 6.2.9200.26349

Fixed: 6.2.9200.26349

Microsoft Windows Server 2012 (Server Core installation)

Affected: 6.2.9200.0 to before 6.2.9200.26349

Fixed: 6.2.9200.26349

6 more products in the CVE record.

msrc.microsoft.com · CVE record · NVD