Microsoft Patches Record 1,413 Vulnerabilities Including Exploited Zero-Day

· Cybersecurity · United States

Microsoft shattered its Patch Tuesday record by shipping fixes for 1,413 vulnerabilities, including one actively exploited Windows zero-day (CVE-2026-96951) and two publicly disclosed zero-days. The update covers 1,102 flaws in Windows, 134 in Office, 61 in Developer Tools, 36 in SharePoint Server, and 22 in SQL Server. The exploited flaw is a security feature bypass in Windows. The sheer volume of patches underscores the growing burden on security teams to prioritize and deploy fixes across sprawling enterprise environments.

Why it matters：Record patch volumes strain enterprise vulnerability management, and an exploited zero-day means defenders must act immediately rather than follow a routine cycle.

Key points

  • 1,413 flaws patched, including 1,102 in Windows and 134 in Office.
  • One actively exploited Windows zero-day and two publicly disclosed zero-days.
  • The exploited flaw is a security feature bypass in Windows.

Sources (original reporting)

More stories from this day