Microsoft’s October 2026 security updates fix a record 1,413 issues, including 61 affecting developer tools.
The release also addresses a Windows issue that Microsoft says is already being used in real-world attacks; the company has not disclosed the method or targets.
The fixes cover 1.102 issues in Windows and 134 in Office. They also include 61 issues in developer tools, 36 in SharePoint Server, and 22 in SQL Server.
For the Windows issue, Microsoft says that attackers can't force a user to view content they control. They have to convince them to do something, like click a link or download a specially crafted file. The company hasn't specified exactly how the attack works, who the attackers are, or who they've targeted.
The US CISA agency added the issue to its list of vulnerabilities that have already been used in attacks. It gave US federal agencies until October 16, 2026, to implement the fixes.
Top comments (0)