Skip to content
Microsoft Patches 1415 Vulnerabilities, One

Microsoft Patches 1415 Vulnerabilities, One

First seen 28 Oct 2026, 16:39 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 28, 2026 at 18:11 UTC
  • •Microsoft's October update fixes 1,415 vulnerabilities, with 85 critical.
  • •CVE-2026-96951, a Windows Shell vulnerability, is actively exploited.
  • •Issues reported with updates affecting enterprise Wi-Fi and VPN connections.

Microsoft's October security update addresses 1,415 vulnerabilities, including 85 classified as. One vulnerability, CVE-2026-96951, affects Windows Shell and has been exploited in the wild, allowing unauthorized attackers to bypass the Mark of the Web defenses. The attack vector involves users being tricked into opening malicious files via email or instant messages. Additionally, CVE-2026-108398, a.NET Framework security feature bypass, was disclosed prior to the patch release. Reports indicate that two updates caused issues with enterprise Wi-Fi and VPN connections. Security experts recommend prioritizing patches and monitoring for regressions. Microsoft has not confirmed any exploitation of the.NET vulnerability to date.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-13
CVE-2026-96951 published
CVE-2026-96951 disclosed, allowing bypass of Mark of the Web defenses, with active exploitation confirmed.
News.Lavx.Hu
2026-10-13
CVE-2026-108398 published
CVE-2026-108398 disclosed, a .NET Framework security feature bypass, acknowledged by Microsoft.
Infoq
2026-10-28
October security update released
Microsoft releases its October security update, patching 1,415 vulnerabilities across multiple products.
News.Lavx.Hu

More articles in this cluster (2)

Following this threat?

Track Azure and CVE-2026-108398 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 3

Common questions

What systems are affected by CVE-2026-96951?
CVE-2026-96951 affects Windows Shell and can be exploited through malicious files sent via email or instant messages.
How urgent is the patch for CVE-2026-96951?
The patch is urgent due to confirmed active exploitation, and organizations should prioritize applying it immediately.
What issues have been reported after the update?
Users have reported that the updates caused disruptions to WPA-Enterprise Wi-Fi and VPN connections.