Microsoft security advisory – October 2026 monthly rollup (AV26-1038)

Serial Number:AV26-1038Date: October 13, 2026 As of October 13, 2026, Microsoft is affected by vulnerabilities in the following products: Azure Container Storage enabled by Azure Arc Azure Storage Blobs client library for Java Microsoft Dynamics 365 (on-premises) version 9.1 Microsoft Exchange Server Subscription Edition RTM Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition Skype for Business Server Subscription Edition CU1 Skype for Business Server Subscription Edition RTM Microsoft has indicated that CVE-2026-96951 has been exploited. On October 13, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-96951 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the web link provided, perform the suggested mitigations, and apply the necessary updates.