October 2026 Patch Tuesday: Exploited Windows Flaw and 24H2 Cutoff
Efraim Ray
Microsoft's October 13, 2026 Patch Tuesday fixed more than 1,400 security flaws, including a Windows Shell bug that attackers were already using. The same update was the last one for Windows 11 version 24H2 Home and Pro, and Office 2021 reached end of support that day too. If your shop, school or office runs Windows, this is the week to update and check your versions.
Key takeaways
- Install the October 13, 2026 Windows update now. It fixes CVE-2026-96951, a Mark of the Web bypass that Microsoft says was exploited in attacks.
- Windows 11 24H2 Home and Pro got its final security update this month. Move to 25H2 or 26H2 to keep getting fixes.
- Office 2021 and Office LTSC 2021 stopped getting security updates on October 13, 2026.
What Happened
On the second Tuesday of each month, Microsoft releases security fixes, and this batch is a record. BleepingComputer counts 1,411 flaws, while SecurityWeek counts 1,413 CVEs, with 1,102 in Windows, 134 in Office and 36 in SharePoint Server. Both say AI tools finding more bugs is the main reason.
Three of the flaws are "zero-days," meaning they were known or attacked before a fix existed. The one that matters most is CVE-2026-96951, a Windows Shell security feature bypass rated 8.8 out of 10. Microsoft says it was exploited in attacks, and CISA added it to its Known Exploited Vulnerabilities list with an October 16 fix deadline for US federal agencies. The other two (CVE-2026-108398 in .NET Framework and CVE-2026-92707 in MessagePack-CSharp) were publicly disclosed but not reported as exploited.
So what is "Mark of the Web"? When you download a file or save an email attachment, Windows quietly tags it as coming from the internet. SmartScreen and Office Protected View use that tag to warn you or open the file in a safe, read-only mode. This flaw let a specially crafted file get around that protection. An attacker still needs you to open the file, for example one sent by email or instant message.
Why It Matters
The bigger issue for many of my clients is not the zero-day itself. Microsoft's support page for update KB5127648 says Windows 11 version 24H2 Home and Pro "has reached end of updates," and this October update is its last. A 24H2 laptop keeps working, but new fixes will not reach it. Office 2021 and Office LTSC 2021 also reached end of support on October 13, 2026, and Windows 11 23H2 Enterprise, Education and IoT Enterprise stop getting updates on November 10, 2026.
| Product | Status after Oct 13, 2026 | What to do |
|---|---|---|
| Windows 11 25H2 or 26H2 | Supported | Install the October update |
| Windows 11 24H2 Home and Pro | No more updates | Upgrade to 25H2 or 26H2 |
| Windows 11 23H2 Enterprise and Education | Updates stop Nov 10, 2026 | Plan the upgrade now |
| Office 2021 and Office LTSC 2021 | No more security updates | Move to Office 2024 or Microsoft 365 |
For Philippine businesses
Many laptops sold here come with Windows 11 Home, and owners rarely install the yearly feature upgrade, so many shop, café and cooperative computers are likely on 24H2. One-time Office 2021 licenses are common in small offices, school labs and LGU desks. Run the big upgrades on fiber or office Wi-Fi after hours, not mobile data. Remember that the Data Privacy Act (RA 10173) expects you to protect personal data with reasonable security measures; unsupported software makes that harder to show.
What to Do Now
- Update today. Open Settings, then Windows Update, click Check for updates, install everything and restart.
- Check your version. Press Windows key + R, type
winverand press Enter. If it says 24H2 on a Home or Pro edition, that computer needs an upgrade. - Upgrade 24H2 machines. Back up important files first, then install the newer Windows 11 version offered in Windows Update.
- List your Office 2021 installs. Decide which computers move to Office 2024 or Microsoft 365, and budget for it.
- Be careful with attachments. This bug hid the usual warning, so confirm unexpected files with the sender before opening them.
- Make it monthly. Microsoft's fixes usually land early Wednesday morning Philippine time. Pick one day that week to update every computer.
My take
A record 1,400 fixes sounds scary, but for most small offices the job is the same as every month: update and restart. What worries me more is the quiet end of 24H2 Home and Pro and Office 2021, because those computers look fine while they stop getting protection. Spend one afternoon this week checking every machine with winver.
Frequently Asked Questions
What is the Windows zero-day fixed in October 2026?
It is CVE-2026-96951, a Windows Shell security feature bypass with a CVSS score of 8.8. A specially crafted file can slip past Mark of the Web protections, and Microsoft says attackers used it before the fix. A user still has to be tricked into opening the file.
Is my Windows 11 24H2 laptop still safe to use?
It still works, but Windows 11 24H2 Home and Pro received its last security update on October 13, 2026. Upgrade to version 25H2 or 26H2 through Windows Update so you keep getting fixes.
How do I check which Windows version I have?
Press the Windows key + R, type winver and press Enter. You can also open Settings, then System, then About, and look at the Version line.
What happens to Office 2021 now?
Office 2021 and Office LTSC 2021 reached end of support on October 13, 2026. The apps keep running, but they no longer get security updates, so plan a move to a supported version such as Office 2024 or Microsoft 365.
Can you help me keep the computers in my office or school updated?
Yes. I can check your computers, install the October updates, plan upgrades away from unsupported versions and set up a simple monthly update routine for your team. Contact me here.
Sources
- KB5127648: Windows 11 24H2, 25H2 and 26H2 security update · Microsoft Support, October 13, 2026
- Windows 11 Home and Pro lifecycle · Microsoft Learn, checked October 18, 2026
- Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days · BleepingComputer, October 13, 2026
- Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day · SecurityWeek, October 14, 2026
- Using risk cohorts to prioritize security updates · Microsoft Security Response Center, October 13, 2026
- Microsoft to End Support for Windows 11 24H2, Office 2021, and More in 2026 · TechRepublic, January 8, 2026
Keep Your Office Computers Safe
I help businesses, schools and cooperatives in Bukidnon and across the Philippines update, secure and upgrade their computers before problems start.
Information current as of October 18, 2026.
Comments
Post a Comment