// Microsoft 365HIGH
Microsoft released its October 2026 Patch Tuesday on October 13, addressing a record-breaking 1,411 vulnerabilities including 70 critical flaws. The update includes one actively exploited zero-day (CVE-2026-96951, Windows Shell security feature bypass) and two publicly disclosed zero-days (CVE-2026-108398 in .NET Framework, CVE-2026-92707 in MessagePack-CSharp). Notable patches address remote code execution flaws in SQL Server, SharePoint elevation-of-privilege vulnerabilities, and Office component weaknesses. This represents the largest security update in Microsoft history.
- Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-d(opens in a new tab)
- Zero Day Initiative — The October 2026 Security Update Review(opens in a new tab)
- Zero Days Lurk in Microsoft's Overgrown October Patch Tuesday(opens in a new tab)
- October 2026 Microsoft Patch Tuesday | Tenable®(opens in a new tab)
- Zero Day Initiative — The October 2026 Security Update Review(opens in a new tab)
- Microsoft patches 1,413 flaws, including exploited zero-day(opens in a new tab)
// Get alerts for Microsoft 365