Microsoft's record October Patch Tuesday addressed 1,413 vulnerabilities including three zero-days, one an actively exploited Windows Shell remote code execution flaw added to CISA's Known Exploited Vulnerabilities catalogue — a command-injection security-feature bypass (CVE-2026-96951) that lets an unauthorised attacker defeat the Mark-of-the-Web check over the network.