Microsoft issued updates to address over 1,400 security vulnerabilities in Windows and other software, including a zero-day flaw in the Windows Shell. The vulnerability...
Windows 10 and 11 users are affected by a critical zero-day exploit, now patched in October’s update
What broke
Microsoft issued updates to address over 1,400 security vulnerabilities in Windows and other software, including a zero-day flaw in the Windows Shell. The vulnerability, tracked as CVE-2026-96951, allows attackers to bypass security features on Windows 10, 11, and certain Server versions. The patch is now available, but users must apply it to mitigate risks.
How to check if you are affected
Verify whether your system is vulnerable to CVE-2026-96951 by checking the affected versions: Windows 10, Windows 11, and specific Server editions. Microsoft’s advisory page provides details on impacted systems and the scope of the vulnerability.
What to do now
Install the latest Windows updates immediately to address the patched vulnerabilities. Microsoft’s October 18 update includes fixes for 1,411 flaws, with a focus on security features like the Windows Shell and File Explorer. Users running Windows 10 or 11 should prioritize applying the update to prevent exploitation of known weaknesses.
Frequently Asked Questions
Q1: What is the most critical flaw addressed in the update?
CVE-2026-96951 is a zero-day exploit that bypasses security features in the Windows Shell, affecting Windows 10, 11, and some Server versions. Microsoft confirmed it was actively exploited in the wild before the patch.