Microsoft releases updates for more than 1400 security vulnerabilities

Microsoft issued security updates on October 13 to fix more than 1,400 vulnerabilities across its software, Krebs on Security reported. The release exceeds the previous record set in September, which saw nearly 1,000 security updates. [1]

Krebs on Security reported that one of the patched weaknesses is an actively exploited zero-day vulnerability tracked as CVE-2026-96951. The vulnerability is a security feature bypass flaw in the Windows Shell. It affects Windows 10, Windows 11, and several Windows Server versions. [1]

Separately, Cyber Press reported that MariaDB released updates to address multiple flaws that allow remote code execution and data theft. GBHackers News and CyberSecurityNews also reported that SAP issued security updates for NetWeaver and S/4HANA systems to fix critical code injection and memory corruption vulnerabilities. [2][3][4][5]

In addition, GBHackers News reported that security flaws identified in the Amazon Fire TV Cube allow hackers to unlock the bootloader and gain permanent root access to the device. [6]