October Patch Tuesday: 1,408 CVEs, 1 exploited flaw and a SharePoint surprise
Microsoft’s October 2026 Patch Tuesday is the year’s largest release, with 1,408 CVEs requiring customer action, 72 of them rated critical. September, the previous high, carried 963. One CVE is already exploited: CVE-2026-96951, a Windows Shell flaw that bypasses Mark of the Web.
Two were publicly disclosed before release, in the .NET Framework and the MessagePack-CSharp library. Separately, on 25 September Microsoft reported attacks against CVE-2026-65660, a SharePoint Server flaw fixed in August. Readiness recommends a Patch Now scheduling for Windows, Office, Exchange and the developer…
Read the full report on Computerworldin
Story file
- Section
- Tech
- First reported by
- Computerworldin
- Reporter
- greglambert
- Published
- Friday, 16 October 2026, 10:30 pm IST
- Coverage
- One outlet so far
How this page works. The Headline Update lists this report from Computerworldin with a short summary and a link to the original. The original reporting and photograph belong to the publisher. Spotted an error in our summary? Tell our corrections desk.
