Windows October update patches over 1,400 security flaws, including two zero-days

Microsoft's October Windows update fixes more than 1,400 security vulnerabilities, including 80 critical flaws and two zero-days, according to patch management provider Action1.

One zero-day, CVE-2026-96951, lets a remote attacker bypass a Windows Shell protection and has already been exploited in the wild. The update is also the final supported release for Windows 11 24H2 and the first for Windows 11 26H2.