Windows update patches a whopping 1,400 security bugs –  including 2 zero days

Microsoft has once again demonstrated its commitment to security with the release of the October Windows update, which addresses over 1,400 vulnerabilities. This substantial patch, released on Tuesday, includes fixes for 80 critical vulnerabilities and two zero-day exploits, underscoring the importance of keeping systems updated.

The October update marks a significant milestone as it is the final supported update for Windows 11 24H2 Home and Pro editions. It also serves as the inaugural update for Windows 11 26H2. Among the enhancements, users will find improvements to File Explorer, allowing for easier file previews and better state retention of sections, making navigation more intuitive. Additionally, Bluetooth connectivity has been refined, enhancing the stability and accuracy of connected devices.

Critical vulnerabilities and zero days

Among the vulnerabilities addressed, one zero-day, identified as CVE-2026-96951, has already been exploited in the wild. This flaw in Windows Shell could enable remote attackers to bypass essential security protections, posing a serious threat to users. Action1, a patch management provider, highlighted the risks associated with this vulnerability, emphasizing the potential for malicious content to reach users without the expected security warnings.

The second zero-day, labeled CVE-2026-108398, was disclosed prior to the update and could allow attackers to circumvent security measures within Microsoft’s .NET Framework. The urgency of these patches cannot be overstated, as they are crucial for maintaining the integrity of user systems.

For those looking to install the update, the process is straightforward. Windows 11 users can navigate to Settings and select Windows Update, where they may find the update already installed, awaiting a reboot. For Windows 10 users, a similar approach applies, ensuring that all supported versions receive the necessary security enhancements.

As the lifecycle of Windows versions progresses, it is essential to note that each annual version, such as 24H2, will lose support after 24 months. Consequently, users must upgrade to the latest version—Windows 11, version 26H2—to continue receiving security updates and bug fixes. This transition is particularly pressing for Windows 11 23H2 Enterprise and Education editions, which will reach their end of support next month.

In addition to the security enhancements, the October update introduces a new feature allowing users to remap the Copilot key, providing greater flexibility in how this functionality can be utilized. Instead of solely activating Microsoft’s AI, users can now configure the key to serve as the right Ctrl key or access the right-click context menu, enhancing the overall user experience.

Winsage
Windows update patches a whopping 1,400 security bugs -  including 2 zero days