started · updated
Microsoft releases record 1,400+ security patches in October 2026
Microsoft’s October 2026 Patch Tuesday has set a new record by addressing over 1,400 vulnerabilities, a significant increase from previous months. The release includes fixes for approximately 1,102 vulnerabilities within the Windows operating system, representing roughly 80% of the total. Among these, 78 are classified as critical, with 65 of those allowing for remote code execution.
A major focus of this update is a zero-day vulnerability, CVE-2026-96951, which affects the Windows Shell. This flaw is being actively exploited in the wild to bypass the ‘Mark of the Web’ security feature, allowing malicious files to run without standard warnings. Additionally, the update addresses a publicly disclosed zero-day in the .NET Framework.
Beyond security, the cumulative update KB5127648 provides various functional improvements and bug fixes. These include resolving mouse input stuttering in certain games, fixing Windows Explorer crashes, and addressing issues with AC-3 audio playback and Always On VPN connections.
Notably, this update cycle marks the end of mainstream support for Windows 11 24H2 Home and Pro editions. Microsoft also reported that the surge in discovered vulnerabilities may be attributed to the increased use of artificial intelligence in bug-hunting processes.
Entities
Adobe · Azure · CISA · Microsoft · Office · Windows · Windows 11 · Windows Shell · Zero Day Initiative
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 6 SOURCES] Approximately 80% of the patched vulnerabilities are located within the Windows operating system. www.nouvelles-du-monde.com · www.punto-informatico.it · cybernoz.com · flagthis.com
- [● 2 SOURCES] The KB5127648 update addresses mouse input stuttering issues reported in certain games. stadt-bremerhaven.de
- [● 7 SOURCES] The update includes at least 78 vulnerabilities rated as critical. www.nouvelles-du-monde.com · www.adslzone.net · www.world-today-news.com · cybernoz.com · flagthis.com · +1 more
- [● 9 SOURCES] Microsoft attributes the high volume of discovered vulnerabilities to the use of large language models (AI) in bug hunting. gurizuri0505.halfmoon.jp · www.adslzone.net · www.world-today-news.com · www.punto-informatico.it · expertinsights.com · +1 more
- [● 23 SOURCES] A zero-day vulnerability, CVE-2026-96951, affecting the Windows Shell, is being actively exploited in the wild. gurizuri0505.halfmoon.jp · www.nouvelles-du-monde.com · www.adslzone.net · www.softzone.es · www.world-today-news.com · +13 more
- [● 9 SOURCES] Support for Windows 11 24H2 Home and Pro editions has ended with this update cycle. www.adslzone.net · www.softzone.es · stadt-bremerhaven.de · pc.watch.impress.co.jp · www.ad-hoc-news.de · +3 more
- [DISPUTED] Microsoft released a record-breaking batch of security patches addressing over 1,400 vulnerabilities. gurizuri0505.halfmoon.jp · www.nouvelles-du-monde.com · www.adslzone.net · www.softzone.es · www.world-today-news.com · +16 more
- [● 3 SOURCES] The cumulative update includes functional improvements to File Explorer and new customization options for the Copilot key. stadt-bremerhaven.de · www.windows-faq.de
- [● 7 SOURCES] The update KB5127648 addresses mouse input stuttering issues in certain games. pc.watch.impress.co.jp · stadt-bremerhaven.de · www.ad-hoc-news.de · www.coolaler.com · www.windows-faq.de
- [● 4 SOURCES] Microsoft is testing ‘Risk Cohorts’ to group vulnerabilities for easier prioritization by IT teams. ap-verlag.de · www.punto-informatico.it
- [● 2 SOURCES] The October 2026 update includes fixes for over 70 critical vulnerabilities. www.adslzone.net