Microsoft releases record October 2026 update containing 1413 vulnerabilities

Microsoft addressed a record 1,413 Microsoft security vulnerabilities in its October 2026 Patch Tuesday updates, according to The Cyber Express. The security release exceeds the previous record of 974 vulnerabilities fixed in September by approximately 45 percent. The updates resolve security issues in products including Windows, Microsoft 365, Office, SharePoint Server, SQL Server, Exchange Server, Azure, Defender, and developer tools. [1]

The release includes fixes for two zero-day vulnerabilities, according to The Cyber Express. The outlet reported that one of the zero-day vulnerabilities is currently under active exploitation by attackers, while the second flaw was publicly disclosed prior to the patch release. The software updates also republished one non-Microsoft vulnerability. [1]

Out of 1,408 vulnerabilities that received formal severity ratings, 78 are classified as Critical, 1,329 as Important, and one as Moderate, according to The Cyber Express. All 1,408 rated vulnerabilities require system administrators to apply updates across affected systems to secure their environments. [1]