Microsoft October 2026 Patch Tuesday fixes 1,407 CVEs, including Windows Shell MOTW bypass zero-day CVE-2026-96951 exploited in the wild
Microsoft's October 2026 Patch Tuesday addresses 1,407 CVEs across 301 products and components, the largest release on record for the second consecutive month. 69 are rated critical, 1,337 important and 1 low. Two zero-days are fixed: CVE-2026-96951, a Windows Shell security feature bypass exploited in the wild, and CVE-2026-108398, a .NE…