Microsoft fixes record 1,400+ flaws, one already under attack

Microsoft shipped its largest Patch Tuesday ever on 13 October, fixing more than 1,400 vulnerabilities — more than the 1,261 it patched in all of 2020. At least 78 flaws are rated critical, and CVE-2026-96951 in Windows Shell (CVSS 8.8) is already being exploited to bypass Mark of the Web.

• Over 1,400 fixes in one month, beating September's record of about 1,000
• 78+ flaws rated critical, most allow remote code execution
• CVE-2026-96951 in Windows Shell already exploited, CVSS 8.8
• Patches cover Windows 10, Windows 11, Windows Server and Outlook.com