By Ana Maria Constantin
Publication Date: 2026-10-17 12:26:00
“We’ve now crossed the 4,000 CVE mark with two months left to go,” Satnam Narang of Tenable told Brian Krebs.
Microsoft has fixed more than 1,400 security flaws in one month, the largest Microsoft Patch Tuesday on record. The updates came out on 13 October, Krebs reported on Krebs on Security. They beat September’s record of nearly 1,000, which was already about ten times Microsoft’s normal monthly load.
October alone beats the 1,261 flaws Microsoft fixed in all of 2020, the previous record year, Narang said. At least 78 of this month’s flaws are rated critical. Most of those let an attacker run code of their choice on the target system.
The flaw already under attack
Only one of the flaws was already in use by attackers. CVE-2026-96951 sits in the Windows Shell. It lets an attacker get around Mark of the Web. That is the Windows label that adds extra checks to files from the internet. Microsoft rates the flaw Important, with a CVSS score of…
