Microsoft Patches 1,400+ CVEs in October Cumulative Update, Credits LLMs for Record Bug Volume

Microsoft's October patch set covers more than 1,400 security flaws, surpassing September's prior record of 972 and roughly 10x a normal monthly load, with at least 78 rated critical and CVE-2026-96951 (Windows Shell bypass) already exploited in the wild. Microsoft credits large language models for the surge in bug discovery and remediation. The company has now shipped more than 4,000 CVE fixes in 2026, breaking the 2020 record of 1,261 with two months to spare.