Microsoft Releases Record-Breaking Patch Tuesday, Addresses 1,413 Vulnerabilities Including Actively Exploited Windows Zero-Day

Microsoft's October 2026 Patch Tuesday is the largest in its history, fixing 1,413 CVEs. Notably, it includes a patch for CVE-2026-96951, an actively exploited Windows zero-day that bypasses the Mark of the Web warning system, allowing attackers to deliver malicious files. CISA has added this vulnerability to its Known Exploited Vulnerabilities catalog, mandating federal agencies to apply fixes by October 16, 2026.