{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/postscript-printer-driver/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*","cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*","cpe:2.3:a:microsoft:outlook:*:*:*:*:*:*:*:*","cpe:2.3:a:microsoft:outlook_web:-:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_11_26h2:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*"],"_cs_cves":[{"id":"CVE-2026-108398"},{"id":"CVE-2026-70229"},{"cvss":8.8,"id":"CVE-2026-96951"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Windows","Office","Excel","PowerPoint","Visio","DHCP Server","Microsoft QUIC","PostScript Printer Driver","Active Directory Federation Services","Outlook","Windows Shell"],"_cs_severities":["critical"],"_cs_tags":["patch-tuesday","windows","vulnerability","identity","zero-day"],"_cs_type":"advisory","_cs_vendors":["Microsoft"],"content_html":"\u003cp\u003eThe October 2026 Microsoft security release contains 1,413 CVEs, featuring one exploited zero-day (CVE-2026-96951) and two publicly disclosed zero-days. Notable risks include remote code execution (RCE) in identity services (AD DS, AD FS), critical RCE vulnerabilities in Microsoft Outlook, and 23 preview-pane triggered flaws in Office applications that allow code execution with minimal user interaction.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe disclosed vulnerabilities include 75 critical-rated items. CVE-2026-96951 allows attackers to strip Mark of the Web (MOTW) protections, facilitating the execution of malicious payloads by bypassing SmartScreen and Office Protected View. Unauthenticated RCEs in DHCP, Microsoft QUIC, and printer drivers enable potential lateral movement. Identity fabric compromise via AD DS and AD FS could allow for complete domain takeover or authentication boundary bypass.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrioritize patching of CVE-2026-96951 (Windows Shell), CVE-2026-70229 (AD DS), and the five critical Outlook RCE vulnerabilities.\u003c/li\u003e\n\u003cli\u003eAudit internal DHCP and QUIC-enabled services for exposure to unauthenticated network access.\u003c/li\u003e\n\u003cli\u003eEvaluate the exposure of AD FS and AD DS interfaces and implement restricted access to mitigate lateral movement risk.\u003c/li\u003e\n\u003cli\u003eFor .NET environments, review existing WDAC policies and ensure assembly loading protections are maintained to mitigate CVE-2026-108398.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-21T07:58:52Z","date_published":"2026-10-21T07:58:52Z","id":"https://feed.craftedsignal.io/briefs/2026-10-october-patch-tuesday/","summary":"Microsoft addressed 1,413 vulnerabilities including 75 critical flaws and an exploited zero-day (CVE-2026-96951) bypass in Windows Shell that circumvents Mark of the Web protections.","title":"Microsoft October 2026 Security Updates","url":"https://feed.craftedsignal.io/briefs/2026-10-october-patch-tuesday/"}],"language":"en","title":"CraftedSignal Threat Feed - PostScript Printer Driver","version":"https://jsonfeed.org/version/1.1"}