Microsoft has released its October Windows security updates, setting a new record for the number of vulnerabilities addressed.
The latest release fixes an impressive 1,413 security vulnerabilities (CVEs) across the Microsoft ecosystem, with the vast majority — 1,102 vulnerabilities — directly affecting the Windows operating system.
This release significantly surpasses the previous record set by September's Patch Tuesday, which addressed 974 vulnerabilities.
In addition to Windows, the October update covers 134 vulnerabilities in Microsoft Office, 61 in developer tools, and 36 in SharePoint Server, along with security updates for SQL Server, Azure, Exchange, and Defender.
Active exploitation and publicly disclosed vulnerabilities
Among the more than 1,000 vulnerabilities addressed, two stand out and require immediate attention from administrators and users:
CVE-2026-96951 (Windows Shell Security Feature Bypass): A vulnerability in the Windows Shell interface that allows attackers to bypass security protections. Microsoft has officially marked this vulnerability as "Exploitation Detected," meaning it is actively being exploited in real-world attacks.
CVE-2026-108398 (.NET Framework Security Feature Bypass): A vulnerability within the .NET environment that has been publicly disclosed. Although there is no confirmation of widespread exploitation, the public availability of technical details increases the risk of malicious code being developed quickly.
Because monthly security updates are cumulative, installing the latest package on supported versions of Windows, including Windows 11, Windows 10, and Windows Server, automatically includes all previous security fixes.
Microsoft introduces the risk cohorts concept in Windows
Reviewing and analyzing more than a thousand individual security vulnerabilities represents an enormous workload for corporate IT departments. To simplify classification, Microsoft introduced a new approach in October called Risk Cohorts.
Instead of analyzing each CVE individually, Risk Cohorts groups vulnerabilities based on shared security concerns.
For example, it identifies which services process unverified files from a network or which processes allow low-privilege users to interact with system components.
This system does not change existing security guidelines, but it enables administrators to assess severity more quickly and prioritize patch deployment more efficiently.
For home users, security experts' recommendation remains the same: Do not delay installing Microsoft's October update. Download and install it through Windows Update as soon as possible to protect your system against active threats.
Discussion(0)