Microsoft's October 2026 Patch Tuesday Addresses 1407 CVEs (CVE-2026-96951)
Tenable, Tuesday, October 13th, 2026
Microsoft patched a record 1,407 CVEs in October 2026, including two zero-days, one exploited in the wild.
Tenable's analysis covers Microsoft's October 2026 Patch Tuesday, which fixed 1,407 CVEs, the second consecutive month to set a record.
Sixty-nine were rated critical, 1,337 important and one low, across 301 products and components, and the release includes two zero-days, one exploited in the wild.
Excel, DNS Server and the Windows Kernel had the most CVEs patched.