Microsoft fixes over 1400 security flaws in October Windows update

Microsoft released an October update for Windows that resolves more than 1400 security vulnerabilities. The update, issued on October 13 in US time, marks the first official patch for Windows 11 version 26H2 and serves as the final update for Windows 11 version 24H2 Home and Pro editions. The patch also addresses several Explorer issues, enabling easier preview of downloaded files in the preview window and preserving the expand and collapse state of sections for quicker resumption of work. Additionally, thumbnail previews of cloud stored files in the details pane will display more reliably.

A Bluetooth connectivity problem is also corrected, improving the accuracy and stability of displayed connection status for paired devices and accessories. According to an advisory from Action1, a provider of patch management services, the October update fixes 80 critical vulnerabilities and two zero day vulnerabilities. One of the zero day flaws, CVE 2026 96951, has already been exploited in real attacks and could allow remote attackers to bypass security protections through a Windows Shell vulnerability. The other zero day, CVE 2026 108398, had its information disclosed prior to the release of a fix, potentially allowing attackers to bypass security measures using a .NET Framework flaw.