Microsoft has released its October security update for Windows, addressing a record-breaking 1,400 vulnerabilities. According to patch management provider Action1, the update resolves 80 critical flaws and two zero-day exploits. One of these active threats has already been exploited in the wild, allowing attackers to bypass Windows Shell security protections.
Windows 11 26H2 and End of Support
This release serves as the first official update for Windows 11 version 26H2. It also marks the end of support for Windows 11 24H2 Home and Pro editions. Microsoft typically provides 24 months of support for each annual Windows version. Once that period expires, systems no longer receive security patches or bug fixes.
Windows 11 23H2 Enterprise and Education editions will lose support on November 10. Users on these versions must upgrade to the latest release to maintain protection. The update applies to all supported Windows 11 editions, including 26H1, 25H2, and 24H2. Windows 10 devices enrolled in the Extended Security Updates program also receive these patches.
AI-Driven Vulnerability Scanning
The volume of fixes surpasses the nearly 1,000 vulnerabilities patched in September. Microsoft attributes this increase to its internal AI scanning tool, codenamed MDASH. This multi-model agentic harness identifies real vulnerabilities and reduces false positives. The system sends findings to engineers more quickly than previous methods.
Action1 highlighted two specific zero-day flaws in its advisory. CVE-2026-96951 allows remote attackers to bypass security defenses by tricking users into opening crafted files. The second flaw, CVE-2026-108398, affects the Microsoft .NET Framework and was disclosed publicly before the fix was deployed.
Feature Fixes and Copilot Remapping
Beyond security, the update addresses several functional issues in Windows 11. File Explorer now retains the state of expanded or collapsed sections. Users can also preview downloaded files more easily using the Preview pane. Thumbnail previews for cloud-based files in the Details pane render more reliably.
Bluetooth connectivity sees improvements in accuracy and stability for connected accessories. The update also introduces a new setting for the Copilot keyboard key. Users can now remap this key to function as the right Ctrl key or trigger the right-click context menu. This change allows users to customize the key for actions other than launching Microsoft’s AI assistant.
Users should install this update immediately. In Windows 11, open Settings and select Windows Update. The update may already be installed and waiting for a reboot. If not, click the check for updates button to download and install it. Windows 10 users should follow the same steps in their Settings menu.
Source: ZDNet
