October 2026 Patch Tuesday arrived on October 13 with 1,411 CVEs, the first four-digit release in Microsoft’s history and the fourth record in five months. One flaw is under active exploitation, a Windows Shell bypass of Mark of the Web protections that Microsoft rates Important