Insights Security & Privacy
Install this month's Windows update: one flaw is already being exploited
The short version
Microsoft's October Windows update fixes 1,411 flaws, a record. One was already being used in attacks to bypass a Windows security feature called Mark of the Web. Windows 11 version 24H2 Home and Pro gets its last update.
What happened
Microsoft released the fixes on 13 October. One flaw, in Windows Shell, let attackers bypass a security feature called Mark of the Web. No details have been shared on how attackers used it.
Two other flaws had been made public before the fix. One, in the .NET Framework, could let an attacker run unauthorised programs. The other could knock a service offline.
BleepingComputer ties the record count to Microsoft's continued use of artificial intelligence tools to find and fix flaws.
Why it matters to you
Until the update is installed, attackers can use the actively exploited flaw to get around a Windows security feature.
Windows 11 version 24H2 Home and Pro has now reached its end of updates. Computers still on it will no longer receive monthly security updates, so they miss protection from the latest threats.
What to do
Open Windows Update and make sure the October update is installed; it downloads and installs automatically. Keep treating unexpected attachments and downloads with caution.
If your PC runs Windows 11 version 24H2 Home or Pro, upgrade to the latest version of Windows 11 so you keep getting security updates.
Sources
- Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days BleepingComputer (opens in a new tab)
- Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday Dark Reading (opens in a new tab)
- October 13, 2026—KB5127648 (OS Builds 26300.9711, 26200.9711 and 26100.9711) Microsoft Support (opens in a new tab)
Researched and written by our automated news system.
Free website check
Is your own website in good shape?
Get a score out of 100 for speed, security, Google visibility and trust in about 30 seconds, with the three things most worth fixing. Free, and no email needed.