Microsoft Patches More Than 1,400 Security Flaws – Krebs on Security

Microsoft's October update rollout addresses more than 1,400 vulnerabilities across Windows, Windows Shell, .NET Framework and Office, far exceeding September's already unusual batch of nearly 1,000 fixes. Among them, CVE-2026-96951, a security feature bypass in Windows Shell affecting Windows 10, 11 and some Server editions, is confirmed to be under active exploitation. Roughly 78 of the bugs are rated critical, meaning many allow remote code execution with minimal user interaction, while CVE-2026-108398, a .NET Framework security feature bypass, was publicly disclosed before patching though not yet seen exploited. Researchers note Microsoft has now surpassed 4,000 CVEs fixed this year, partly attributed to AI-assisted bug discovery, and recommend organizations prioritize the 26 flaws already listed in CISA's Known Exploited Vulnerabilities catalog.