Holy Patch: Microsoft is increasingly relying on AI tools to uncover security vulnerabilities in Windows and its other software products. Yet this month's Patch Tuesday brings an unprecedented number of bug fixes, with Windows bearing the brunt of the latest security cleanup.
Earlier this week, Microsoft released a new batch of security updates, traditionally known as Patch Tuesday. For October 2026, Redmond's Patch Tuesday is tasked with fixing 1,413 security bugs, each tracked under its own CVE record.
October 2026's Patch Tuesday updates continue an upward trend that began after Microsoft started using large language models to scan its software for new security flaws. In recent months, the monthly updates have included hundreds of individual bug fixes. Now, Microsoft developers have had to fix more than 1,000 bugs in a single month for the first time ever.
In October, Microsoft fixed more security flaws than the company patched in any previous year. Most of the fixes address vulnerabilities in Windows (1,102). Microsoft's Office productivity suite comes second, with 134 patched flaws, while other notable products with security issues include SharePoint Server (36 flaws), SQL Server (22), and various developer-focused tools (61).
NET development tools. One, tracked as CVE-2026-96951, is a Windows Shell Security Feature Bypass Vulnerability that cybercriminals are already exploiting in the wild. NET Framework and MessagePack-CSharp, respectively. NET Framework Security Feature Bypass Vulnerability and a MessagePack-CSharp Denial of Service Vulnerability.
Source link







