Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Shell Zero-Day

Microsoft's October 2026 Patch Tuesday addressed a record 1,413 vulnerabilities across its products, including 1,102 in Windows. Among these, a Windows Shell bug (CVE-2026-96951) is actively being exploited in the wild, and a .NET Framework security feature bypass (CVE-2026-108398) has been publicly disclosed. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the exploited flaw to its Known Exploited Vulnerabilities catalog.