Microsoft addressed 1,413 vulnerabilities in its October 2026 security update release, according to an analysis published by CrowdStrike. The updates include three zero-day vulnerabilities and 75 critical security flaws.
Vulnerability Breakdown
Microsoft addressed 1,413 vulnerabilities in its October 2026 security update release, according to CrowdStrike, including one exploited zero-day vulnerability, two publicly disclosed zero-day vulnerabilities, and 75 critical vulnerabilities.
According to CrowdStrike's analysis, the leading risk types by exploitation technique are elevation of privilege with 677 patches, remote code execution with 317 patches, and information disclosure with 254 patches. Windows received the most patches this month with 1,123, followed by ESU with 977 and Microsoft Office with 179.
Zero-Day and Publicly Disclosed Flaws
CrowdStrike highlighted CVE-2026-96951, an important security feature bypass vulnerability in Windows Shell with a CVSS score of 8.8. Microsoft confirmed that the flaw is being exploited in the wild, allowing attackers to evade Mark of the Web defenses.
A second flaw, CVE-2026-108398, is an important security feature bypass vulnerability in the .NET Framework with a CVSS score of 8.8 that had been publicly disclosed. Additionally, CVE-2026-92707 is a moderate publicly disclosed denial of service vulnerability in MessagePack-CSharp carrying a CVSS score of 5.3.
What to do
- Develop a response plan for how to defend environments when no patching protocol exists.
- Regularly review your patching strategy and improve your organization's overall security posture.
Key facts and where they come from
- Microsoft addressed 1,413 vulnerabilities in the October 2026 security updates.
Microsoft addressed 1,413 vulnerabilities in its October 2026 security update release, including one exploited zero-day vulnerability, two publicly disclosed zero-day vulnerabilities, and 75 Critical vulnerabilities.
- Elevation of privilege represents 677 patches, making up 48% of the month's leading risk types.
This month's leading risk types by exploitation technique are elevation of privilege with 677 patches (48%), remote code execution (RCE) with 317 patches (22%), and information disclosure with 254 patches (18%).
- CVE-2026-96951 is an exploited zero-day vulnerability in Windows Shell.
CVE-2026-96951 is an Important security feature bypass vulnerability in Windows Shell and has a CVSS score of 8.8. Microsoft confirms the flaw is being exploited in the wild.
