Story perspectives

Microsoft patches 1,413 flaws, including exploited zero-day

By Drooid · Oct 14, 2026, 2:33 PM UTC · How we work

Summary

Story summary

Microsoft shipped patches for 1,413 vulnerabilities, breaking its own Patch Tuesday record.
The update fixes 1,102 Windows, 134 Office, 61 Developer Tools, 36 SharePoint Server, and 22 SQL Server flaws.
At least 78 flaws are rated Critical, and CVE-2026-96951 is a zero-day already exploited in the wild.
CISA added CVE-2026-96951 to its Known Exploited Vulnerabilities catalog, requiring federal agencies to apply the fix by October 16, 2026.
Microsoft credited AI-assisted researchers, including Fujitsu’s Riku Bamba and Anthropic’s Benoit Sevens, for discovering several flaws.

1 of 1

Story summary

Microsoft shipped patches for 1,413 vulnerabilities, breaking its own Patch Tuesday record.
The update fixes 1,102 Windows, 134 Office, 61 Developer Tools, 36 SharePoint Server, and 22 SQL Server flaws.
At least 78 flaws are rated Critical, and CVE-2026-96951 is a zero-day already exploited in the wild.
CISA added CVE-2026-96951 to its Known Exploited Vulnerabilities catalog, requiring federal agencies to apply the fix by October 16, 2026.
Microsoft credited AI-assisted researchers, including Fujitsu’s Riku Bamba and Anthropic’s Benoit Sevens, for discovering several flaws.