Microsoft Patches Record 1,413 Security Flaws, Including Actively Exploited Windows Shell Bug

Microsoft's October 2026 Patch Tuesday addressed a record 1,413 security flaws across Windows and other software. This includes a critical Windows Shell command injection vulnerability (CVE-2026-96951) that bypasses Mark of the Web protections and is being actively exploited by attackers. CISA has added this bug to its Known Exploited Vulnerabilities catalog, urging federal agencies to patch by October 16, 2026.