Microsoft Ships Record Patch Tuesday, Fixing 1,413 Flaws Including One Under Active Attack

Microsoft's October 2026 Patch Tuesday addressed a record 1,413 vulnerabilities, the largest single batch the company has ever shipped. One of the fixes, a Windows security feature bypass tracked as CVE-2026-96951, was already being exploited in the wild before the patch landed, according to Microsoft's advisory. The update arrived alongside a wave of fixes from Citrix, Fortinet, and Ivanti covering 29 additional vulnerabilities, some of which could allow authentication bypass or remote code execution.

Photo: Coolcaesar via Wikimedia Commons (CC BY-SA 4.0).