Microsoft security advisory – October 2026 monthly rollup (AV26-1038)

Imported from official source

Cybersecurity Classified by Officially

Serial Number:AV26-1038
Date: October 13, 2026

As of October 13, 2026, Microsoft is affected by vulnerabilities in the following products:

  • Azure Container Storage enabled by Azure Arc
  • Azure Storage Blobs client library for Java
  • Microsoft Dynamics 365 (on-premises) version 9.1
  • Microsoft Exchange Server Subscription Edition RTM
  • Microsoft SharePoint Enterprise Server 2016
  • Microsoft SharePoint Server Subscription Edition
  • Skype for Business Server Subscription Edition CU1
  • Skype for Business Server Subscription Edition RTM
  • Microsoft has indicated that CVE-2026-96951 has been exploited.

    On October 13, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-96951 to their Known Exploited Vulnerabilities (KEV) Database.

    This is an extract. The publication continues at the source.

    Source: Canadian Centre for Cyber Security. Licence

    Read the original at the source: https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-october-2026-monthly-rollup-av26-1038

    Officially imported this from Canadian Centre for Cyber Security’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

    This publication has changed since it was first published

    2 versions recorded. The original is kept in full — nothing is overwritten.

    1. v2 imported change on current
    2. v1 as first published on

    Provenance

    Organization
    Canadian Centre for Cyber Security — imported from official source
    Official source
    https://www.cyber.gc.ca/api/cccs/rss/v1/get?feed=alerts_advisories&lang=en ATOM
    Imported
    October 13, 2026 21:00
    Versions
    2 recorded
    Identity
    https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-october-2026-month...

    Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.