October 2026 Patch Tuesday forecast: Time for an Office cleanup

Following last month's record-breaking batch of 973 CVE fixes from Microsoft, analysts expect October's Patch Tuesday to stay large, though likely not surpass that peak. A recent optional update, KB5002907, meant to refresh outdated Microsoft 365 installations instead caused Office 2016 and Office 2019 to be deactivated or removed on many machines, forcing Microsoft to pause the rollout — a reminder that these out-of-support suites still receive sporadic patches that aren't fully vetted against current builds. Apple has already shipped macOS 27 Golden Gate and closed out a zero-day tracked as CVE-2026-86950 across its operating systems on September 29, while Windows 11 version 26H2 has also rolled out, sharing a kernel with 24H2 and 25H2 for easier upgrades. Looking ahead, expect fresh Chrome updates, likely Firefox or Thunderbird patches, and a new Adobe release cycle covering Premiere, Content Credentials, Substance 3D Modeler, Bridge, and Connect, alongside Microsoft's planned fixes for recent Excel clipboard and Windows Backup bugs.