Microsoft breaks Patch Tuesday record with more than 1,000 Windows security flaws fixed
Earlier this week, Microsoft released a new batch of security updates, traditionally known as Patch Tuesday. For October 2026, Redmond's Patch Tuesday is tasked with fixing 1,413 security bugs, each tracked under its own CVE record. Read Entire Article
Microsoft has shattered Patch Tuesday records by fixing over 1,000 security flaws in Windows, surpassing any previous year's patching efforts. The majority of these security bugs, totaling 1,102, affect Windows, followed by Microsoft's Office suite with 134 patched vulnerabilities. Other affected products include SharePoint Server, SQL Server, and various developer-focused tools.
In addition to the substantial list of security flaws, Microsoft identified three zero-day vulnerabilities, two of which are already being exploited by cybercriminals. One zero-day vulnerability, CVE-2026-96951, is a Windows Shell Security Feature Bypass Vulnerability. The other two, CVE-2026-108398 and CVE-2026-92707, impact the .NET Framework and MessagePack-CSharp, respectively.
Microsoft is addressing the increased burden of patching these security issues by introducing a new system called risk cohorts, which groups related vulnerabilities to help IT teams prioritize their attention. However, Microsoft warns that this new method is experimental and does not necessarily indicate the severity of the vulnerabilities.
Furthermore, October's Patch Tuesday marks the end of security updates for Windows 11 version 24H2 and Windows 10 Enterprise LTSB 2016.
Written by urgent.news from TechSpot's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
