Microsoft releases record‑breaking 1,400+ patch batch, extends Win 10 support

Microsoft drops a 1,400‑plus patch haul, breaking its own record

On 13 October 2026 Microsoft released updates that close more than 1,400 security flaws across Windows and related software. The batch dwarfs September’s near‑1,000‑fix release and pushes the company past 4,000 CVEs fixed this year.

Why the numbers matter

At least 78 of the newly‑patched issues are rated critical, meaning a successful exploit could give an attacker full control of an affected system. Two of the most notable fixes address CVE‑2026‑96951, a Windows Shell feature bypass, and CVE‑2026‑108398, a .NET Framework bypass that was already public.

Technical highlights

• CVE‑2026‑96951: Bypasses security checks in the Windows Shell, affecting Windows 10, Windows 11, and several Server editions.
• CVE‑2026‑108398: Allows code execution by sidestepping .NET Framework protections; the flaw was disclosed before the patch landed.
• 78 critical‑severity fixes span privilege‑escalation, remote code execution, and information‑leak vectors.
• 26 of the month’s vulnerabilities have already appeared in the CISA Known Exploited Vulnerabilities (KEV) catalog.

Who needs to act

Any organization still running Windows 10, Windows 11, or the affected Server builds should prioritize the update. .NET‑based applications are also in the crosshairs, so developers must test their software against the new runtime.

Steps to stay safe

1. Deploy the October 2026 Patch Tuesday updates via WSUS, SCCM, or Microsoft Endpoint Manager without delay.
2. Verify that the patches for CVE‑2026‑96951 and CVE‑2026‑108398 are installed; use PowerShell Get-HotFix or the Windows Update History.
3. For systems that cannot reboot immediately, enable temporary mitigations such as Application Control policies or .NET runtime hardening.
4. Monitor the CISA KEV feed for any emerging exploitation attempts targeting the 26 listed flaws.
5. Review the Cisco Talos and SANS Internet Storm Center roundups for any additional guidance.

Microsoft also announced that free support for Windows 10 will continue until October 2027, a year later than originally planned. That extension gives legacy users a longer runway to transition, but it also means the OS will keep receiving security updates for another full year.