Windows Shell Security Feature Bypass Vulnerability

CISA Adds Microsoft, Ivanti, Cisco and Palo Alto Networks Vulnerabilities to KEV Catalog

CISA has expanded its Known Exploited Vulnerabilities (KEV) catalog with four vulnerabilities affecting Microsoft Windows, Ivanti Connect Secure, Cisco Secure Email Gateway, and Palo Alto Networks PAN-OS. What makes these…

CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records

The sixth exploited Ivanti bug this year drew attention from the feds and researchers, while a severe Microsoft vulnerability was one of more than 1,400 listed for Patch Tuesday.

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day

The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek.

Microsoft dicht ruim 1400 beveiligingslekken tijdens record Patch Tuesday

Tijdens de Patch Tuesday van oktober heeft Microsoft ruim 1400 lekken in de eigen software gepatcht, waaronder een actief ...

Microsoft Fixes Record 1,413 CVEs in October Patch Tuesday

Microsoft's October 2026 Patch Tuesday fixes 1,413 Microsoft CVEs. That is a new record, set only one month after September's previous high of 974, and it represents a jump of roughly 45%. The release covers Windows, Microsoft 365 and Office, SharePoint Server, SQL Server, Exchange Server, Azure, Defender and developer tools. It also republishes one non-Microsoft CVE. Two of the fixes are zero-days: one is under active exploitation and the other has been publicly disclosed. Severity Breakdown for October 2026 Patch Tuesday Of the 1,408 CVEs with severity ratings, 78 are Critical, 1,329 are Imp

Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug

Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation. These include 1,102 flaws in Windows, 134 in Office, 61 in Developer Tools, 36 in SharePoint Server, and 22 in SQL Server. Of these, more than 670 relate to privilege escalation, followed by over 300 remote code

Microsoft Patch Tuesday – October 2026

1,411 Vulnerabilities and Three Zero-Days An actively exploited Windows Shell flaw, publicly disclosed vulnerabilities and a record-breaking security release put enterprise patch management under pressure. 1. October’s Patch Tuesday Is…

Microsoft Patches More Than 1,400 Security Flaws

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond.

Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday

The scary surprises in the largest security update ever include defense bypasses and unauthenticated RCEs.

Patch Tuesday - October 2026

Microsoft is publishing 1,413 own-product vulnerabilities on October 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows. Anyone who enjoyed last month’s record-setting Patch Tuesday will love the October 2026 edition, because it’s much bigger still. As Rapid7 has noted over the course of 2026, there is every reason to suppose that vulnerability volumes will continue to rise. Microsoft is aware of exploitation in the wild for just one of the vulnerabilities published today, as well as public disclosure for two others.Windows Shell: zero-day security feature bypassThe Windows Shell i

Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical."

October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities