Microsoft Released October 2026 Software Updates
Microsoft October 2026 patches fix 1411 security vulnerabilities, including 3 zero-day vulnerabilities
Microsoft has released software updates as part of its October 2026 Patch Tuesday. The updates fix 1411 security vulnerabilities in total, including 3 zero-day vulnerabilities.
The breakdown of the vulnerabilities is as follows:
- 677 elevation of privilege
- 317 remote code execution
- 254 information disclosure
- 28 spoofing
- 73 denial of service
- 40 security feature bypass
The zero-days are as follows:
| CVE | Affects | Can lead to |
|---|---|---|
CVE-2026-96951 | Windows Shell | Security feature bypass |
CVE-2026-108398 | .NET Framework | Security feature bypass |
CVE-2026-92707 | MessagePack-CSharp | Denial of service |
Why You Should Care?
Warning
These vulnerabilities are flaws that have been identified in Microsoft software, and now that they are publicly known, attackers will try to exploit as many targets as possible before users apply the fix. This makes it extra dangerous, and needs to be addressed as soon as possible.
In this case, one zero-day vulnerability is being actively exploited and two have been publicly disclosed, which means it is only a matter of time before the attackers compromise your business. Now that patches are available, it is critical to apply the patches as soon as possible to avoid getting compromised.
What Should You Do?
- Test the patches ASAP at your organization, and make sure they do not break any business applications
- Prioritize the three zero-day vulnerabilities
- Roll out the rest of the Patch Tuesday updates