Patch Tuesday

What Microsoft patched, month by month

Each month, this page lists the vulnerabilities Microsoft itself flags as Critical severity, under active exploitation, or publicly disclosed before a fix shipped — the ones worth acting on first. Every other fix in the release is still counted, just not listed row by row: Microsoft bundles hundreds of open-source package updates for its Azure Linux container distro and Chromium fixes shipped through Edge into the same monthly document, and neither is what most readers mean by “Patch Tuesday.” New to the term, or to CVE, CVSS and the rest? See the security glossary.

Built by Daily CISO from Microsoft’s own Security Update API, not an official Microsoft page.

1. October 2026

   Released October 2, 2026

   240 fixes total · 7 Critical, exploited or publicly disclosed · 232 Azure Linux package updates · 0 Edge/Chromium fixes

2. September 2026

   Released September 8, 2026

   2772 fixes total · 135 Critical, exploited or publicly disclosed · 1340 Azure Linux package updates · 435 Edge/Chromium fixes

3. August 2026

   Released August 11, 2026

   1676 fixes total · 88 Critical, exploited or publicly disclosed · 868 Azure Linux package updates · 353 Edge/Chromium fixes

4. July 2026

   Released July 14, 2026

   2005 fixes total · 80 Critical, exploited or publicly disclosed · 473 Azure Linux package updates · 933 Edge/Chromium fixes