Windows October update patches 1,400+ security bugs, including two zero days

According to ZDNET, Microsoft’s October Windows update fixes more than 1,400 security vulnerabilities and addresses several user-facing bugs in File Explorer and Bluetooth. ZDNET reports this update is also the final supported release for Windows 11 24H2 Home and Pro editions, and it adds a setting to remap the Copilot key.

Windows October update details and what was fixed

ZDNET says the update patches roughly 1,410 issues across supported Windows versions and resolves specific problems in built-in features. File Explorer gains improvements such as easier previewing of downloaded files via the Preview pane, retention of section state so expanded or collapsed folders remain as you left them, and more reliable thumbnail previews for cloud-based files in the Details pane. The update also improves Bluetooth device accuracy and stability, and it adds an option to remap the Copilot key to act as the right Ctrl key or open the desktop context menu.

ZDNET notes the update targets all supported Windows 11 releases, including editions of 26H2, 26H1, 25H2, and 24H2, and it also covers Windows 10 PCs enrolled in Microsoft’s Extended Security Updates program.

Security highlights: critical bugs and two zero-days

ZDNET cites a patch management advisory from Action1 showing the October update includes 80 critical vulnerabilities and two zero-day fixes. Action1 reported one zero-day, designated CVE-2026-96951, has been exploited in the wild and could allow an attacker to bypass Windows Shell security protections by convincing a user to open specially crafted files or interact with malicious content. The other zero-day, CVE-2026-108398, was publicly disclosed before a fix and affects Microsoft’s .net Framework in a way that could let attackers skirt security measures, according to Action1.

Because one of the zero-days has confirmed exploitation, ZDNET and Action1 make installing this update a priority for affected systems.

Who is affected and next support dates to watch

ZDNET explains this update applies to all supported Windows 11 versions listed above, and it calls out that Windows 11 24H2 Home and Pro will not receive further updates after this release. The article also points out that Windows 11 23H2 Enterprise and Education editions approach their end of support next month, and organizations running those editions need to move to a supported release to keep receiving security fixes.

Windows 10 machines that are covered by Microsoft’s Extended Security Updates program will receive the latest security patches, ZDNET notes.

Practical steps for small business and nonprofit owners

Follow these actions to reduce immediate risk and keep systems current:

• Install the October update now: open Settings, go to Windows Update, check for updates, and apply any pending Windows 11 patches; you may only need to reboot if the update is already downloaded, says ZDNET.
• Upgrade versions that have reached or will soon reach end of support: if you are on Windows 11 24H2, move to a supported release through Windows Update so you continue to get security fixes, per ZDNET.
• Prioritize devices that handle external files: because one zero-day can be triggered by specially crafted files, make sure endpoints used for email, downloads, and shared drives are updated first.
• Check Windows 10 ESU status: Windows 10 machines on Microsoft’s Extended Security Updates program will get these patches, so confirm ESU enrollment if you still run Windows 10.
• Reboot and verify: some updates install but wait for a reboot; confirm the system reports no pending updates after restarting.
• Review admin rights and endpoint protections: while applying updates, ensure anti-malware is active and that fewer users have unnecessary administrative access.

If you want to reduce repetitive admin work around updates and routine security tasks, consider where automation and AI can help: find where AI and automation actually fit.

What to watch next and why this matters

ZDNET frames this release as unusually large in scope and a reminder that supported Windows versions must be kept current. The presence of two zero-day fixes, one with active exploitation, increases the urgency for immediate installs.

For organizations, plan regular checks of Windows Update, stagger updates if you have many endpoints, and test critical apps after patching. Small teams should prioritize devices that handle email, file sharing, and public-facing services.

ZDNET’s reporting makes clear: apply the October update promptly, move systems off retiring releases, and verify that updates are fully installed and active to maintain protection.