Microsoft Patch Tuesday flaws top 1,400, one already exploited

Microsoft fixed more than 1,400 security flaws in a single October Patch Tuesday, the largest batch ever released. The updates, issued on Oct. 13, push the total of this month’s fixes well past 1,400 CVEs, beating September’s record and dwarfing Microsoft’s typical monthly load. This is the kind of spike you notice in a hurry, especially for security teams watching for misconfigurations and ongoing exploits.

Of the flaws addressed, at least 78 are rated critical, meaning they could let an attacker run code of their choice on a target device. The most notable entry is a flaw in the Windows Shell, tracked as CVE-2026-96951. It helps an attacker bypass the Mark of the Web, Microsoft’s extra checks for files downloaded from the internet. Exploitation requires a user to open a crafted file or click a malicious link; the patches apply to Windows 10, Windows 11, Windows Server and Outlook.com.

Microsoft credits researchers from Fujitsu and others for the discovery, and notes that one researcher listed as using Claude with Anthropic helped identify this particular flaw. The company also mentions a separate, previously known vulnerability in the .NET Framework that could give attackers more time to mount an attack, though there are currently no signs of active exploitation for that one.

AI features into this story in two ways. Microsoft has highlighted that large language models helped uncover more bugs in the past, and the news comes amid broader industry chatter that AI is both a boon for finding issues and a potential source of new, harder-to-find vulnerabilities. Banks and security vendors alike have noted AI’s role in speeding up detection and response, even as teams brace for higher patch workloads.

For everyday users, the takeaway is simple: apply these updates when your device prompts you, and test critical systems first if you’re patching in a corporate setting. Security is a team sport, and large batches like this place extra pressure on IT departments to validate compatibility and minimize downtime.