Microsoft fixed 1,411 security flaws in its October update, released on the 13th. It is the largest monthly batch the company has ever shipped. One of the flaws was already being exploited by criminals before the fix came out.
The count comes from BleepingComputer, which tracks Patch Tuesday every month, the second Tuesday of the month, when Microsoft releases its fixes. Seventy of the flaws were rated critical. In most of them, an attacker could run programs on a victim’s computer without being anywhere near it.
The warning that never shows up
The exploited flaw is tracked as CVE-2026-96951 and sits in Windows Shell, the part of the system that handles folders, files and the desktop. It defeats the “Mark of the Web”, a tag Windows puts on every file that comes from the internet or an email.
That tag is what makes Windows ask whether you really want to open a downloaded program, and what makes Word open attachments in Protected View. With the flaw, the file arrives without the tag and opens straight away, with no warning at all. For anyone running email scams, that is a gift.
Two other flaws in the batch were zero-days, the term for problems that become public before a fix exists. According to the report, neither had been used in attacks. One of them, in the .NET Framework, was found by James Forshaw, a researcher at Google Project Zero.
End of the road for Windows 11 24H2
If you run Windows 11 version 24H2 in the Home or Pro edition, you just got your last update. The version has reached end of support, and from now on only newer versions get fixes. Staying on it means piling up open flaws month after month.
For businesses, the batch includes critical fixes in Active Directory and Azure services. And the Enterprise, Education and IoT Enterprise editions of Windows 11 23H2 stop receiving updates next month.
How to protect yourself
The main thing is to install the update: open Settings > Windows Update, click Check for updates and restart when asked.
- Check your version under Settings > System > About. If it says 24H2 on a Home or Pro edition, upgrade to the latest Windows 11 version through Windows Update itself.
- Until the fix is installed, do not rely on the Windows warning. If you were not expecting an attachment or download, do not open it.
- Keep Microsoft Defender switched on. For most people, the antivirus that ships with Windows is enough.
- Turn on automatic updates, so you do not have to remember every month.
