Patch · 1 source · latest 1h

October 2026 Patch Tuesday fixed a record 1,407 CVEs, with one zero-day flagged

PATCHMicrosoftredteam/daily · 1 source

Severity: Medium
Highest CVSS: 8.8
Exploited: Yes
Sources: 1

What happened

Microsoft released its regular monthly security updates for October 2026, about two and a half hours late. The company fixed a record 1,407 separate security flaws, and one of them was already being actively exploited as a zero-day.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

Check that the October 2026 Patch Tuesday updates, including the fix for zero-day CVE-2026-96951, have been installed on Microsoft systems.

Written by AI from the sources, checked against them

Read the full story at the source

Vulnerabilities

CVE-2026-96951CVSS 8.8ExploitedImproper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

Full story timeline · 3 updates

Who reported · 1 outlet

Help Net Security

Who and what is in it

Companies

Microsoft

Support usRedTeamDaily has no paywall. Readers like you keep security news free for everyone.