Microsoft’s October Patch Tuesday release fixes a record 1,413 CVEs, including CVE-2026-96951, a Windows Shell zero-day that attackers are already exploiting to push files past Mark of the Web protections. CISA added the flaw to its Known Exploited Vulnerabilities catalog the same day.
Record 1,413-CVE Release Eclipses Every Earlier Microsoft Patch Day
Microsoft’s tally of 1,413 CVEs is more than the company patched in all of 2025 and beats the previous record of 999 CVEs set in September. Counts vary by tracker: several other trackers headline the release at 1,411. By one tally, Microsoft’s 2026 total has now passed 4,000 CVEs.
Windows Accounts for 1,102 of the Fixes
Windows carries by far the largest share, with 1,102 CVEs. Office follows with 134, developer tools with 61, SharePoint Server with 36, SQL Server with 22, Azure with 15 and Exchange Server with 7. Severity breakdowns differ between trackers. One tracker counts 78 Critical vulnerabilities, 65 of them remote code execution, plus 1,329 rated Important. Another counts more than 70 Critical flaws, over 670 privilege escalation bugs and more than 300 remote code execution bugs.
MDASH Agentic Scanning Drives the Volume
Microsoft attributes the volume to AI-assisted discovery, specifically its MDASH multi-model agentic scanning, and proposes grouping fixes into “risk cohorts” to make them easier to manage. Dustin Childs of the Zero Day Initiative said discovery is scaling faster than exploitation, so administrators should prioritize by exploitability rather than raw counts. A Socura survey found that 22% of UK chief information security officers have taken time off to avoid Patch Tuesday. Windows 10 also receives these fixes: Extended Security Updates, which were due to end on October 12, were extended by a year in June.
CVE-2026-96951 Lets Crafted Files Skip Windows Security Warnings
The one vulnerability Microsoft confirms as actively exploited is CVE-2026-96951, a Windows Shell command-injection and security feature bypass flaw with a CVSS score of 8.8. It evades Mark of the Web protections, which means files downloaded from the internet skip SmartScreen, Office Protected View and Smart App Control warnings that would normally slow an attack down.
Exploitation requires user interaction. An attacker has to get a crafted file in front of a victim by email, by instant message, through Teams or Slack, or by hosting it on a malicious site. Microsoft has not said who is exploiting the flaw or how.
Third Exploited Windows Shell Flaw This Year
Satnam Narang of Tenable noted that this is the third Windows Shell vulnerability exploited in 2026. The earlier two were CVE-2026-21510, which has been linked to APT28, and CVE-2026-32202, an unattributed follow-up caused by an incomplete patch. It remains unclear whether CVE-2026-96951 is another incomplete fix or whether it connects to APT28.
Fujitsu, Anthropic’s Benoit Sevens and an Independent Researcher Reported the Bug
Microsoft credits Fujitsu researchers, Anthropic’s Benoit Sevens and an independent researcher with reporting the flaw. One outlet reported that the discovery was linked to Anthropic’s Claude AI model, but Microsoft has not confirmed that.
Outlook, QUIC and SharePoint Flaws Top the Severity Scale
Two further vulnerabilities were publicly disclosed before the patches arrived, though not exploited. CVE-2026-108398 is a .NET Windows Defender Application Control bypass with a CVSS score of 8.8 that requires an authenticated, low-privilege attacker. CVE-2026-92707 is a denial-of-service flaw in the MessagePack-CSharp library used in Visual Studio and .NET.
Several other bugs carry high risk. CVE-2026-70242 is an Outlook heap overflow with a CVSS score of 9.8 that triggers in the Reading Pane. CVE-2026-105016 is an unauthenticated remote code execution flaw in Microsoft QUIC, also scored 9.8. CVE-2026-102866 is a SharePoint cryptographic token verification flaw that allows account hijacking if an attacker obtains a valid proof token. Microsoft rates that one “less likely” to be exploited.
Federal Deadline Falls Three Days After Release
CISA gave federal civilian agencies until October 16 to apply the fix for CVE-2026-96951. Patches are available through Windows Update. A Mark of the Web bypass does not compromise a machine by itself, but it removes the warning prompts that stand between a phishing attachment and execution, which makes it a plausible first step in a longer phishing chain. With 1,413 CVEs competing for attention, the exploited Shell flaw, the Outlook, QUIC and SharePoint fixes are the items Microsoft’s own risk ratings put at the front of the queue.
