Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug

What happened

Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug  Ravie Lakshmanan  Oct 14, 2026 Vulnerability / Endpoint Security Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities , including one that it said has come under active exploitation. Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation. Microsoft is a software and software development company based in Redmond, and its products and services include Microsoft Windows.

These include 1,102 flaws in Windows, 134 in Office, 61 in Developer Tools, 36 in SharePoint (Stack Exchange site for SharePoint enthusiasts) Server, and 22 in SQL Server. Of these, more than 670 relate to privilege escalation (gaining powers on a system that the user was not given), followed by over 300 remote code execution (running programs on a machine from somewhere else) flaws and 250 information disclosure flaws.

Over 70 flaws are rated Critical in severity. "Hundreds of CVEs in a single release used to be the exception; now it's the baseline," Dustin Childs, head of Threat Awareness at the Zero Day Initiative (ZDI), said . "Is AI to blame? Partly. It's accelerating bug-hunting on both sides of the fence, so vendors are finding (and fixing) more flaws, and researchers are finding them faster too."