ZDNET’s key takeaways
- The October Windows Update fixes more than 1,400 security flaws.
- This marks the last supported update from Microsoft for Windows 24H2.
- The update also fixes issues with File Explorer and Bluetooth.
Microsoft continues to break bug-squashing records, with October’s Windows Update patching more than 1,400 security vulnerabilities. As usual, the actual number of bug fixes varies based on which ones are counted, but hovers around 1,410.
Also: How to upgrade your ‘incompatible’ Windows 10 PC to Windows 11 – for free
Released Tuesday, the latest update is also the first official one for Windows 11 26H2 and the last for Windows 11 24H2 Home and Pro editions. Plus, it solves specific issues with built-in features like File Explorer and Bluetooth, and even lets you remap Copilot keyboard keys to trigger a different action.
As usual, the updates are for all supported versions of Windows 11. These include all editions of Windows 11 26H2, 26H1, 25H2, and 24H2, as well as 23H2 Enterprise and Education. Windows 10 PCs enrolled in Microsoft’s Extended Security Updates (ESU) program also receive the latest security patches.
With such a large collection of bug fixes, you’ll want to install this one. In Windows 11, go to Settings and select Windows Update. You will find the update already installed and just waiting for a reboot. If not, click the button to check for updates to download and install them. In Windows 10, go to Settings, select Windows Update, and install the latest.
Each new annual version of Windows, such as 24H2 or 23H2, loses support after 24 months, which means no more security updates or bug fixes. With Windows 11 24H2 hitting this milestone, you need to jump to the latest version to keep your PC updated. For that, go to Windows Update and check for updates. You should see a notice telling you that Windows 11, version 26H2 is available. Click the link to download and install it.
Also: My favorite Windows app makes moving to a new PC so easy
The same deadline applies to Windows 11 23H2 Enterprise and Education editions, which will reach the end of support next month on November 10. Here, you or your organization must also update Windows to the latest version to stay protected.
Critical Vulnerability and Zero Days
Specifically, the October update fixes 80 critical vulnerabilities in two zero days, according to patch management provider Action1 in a new advisory.
One of the zero days has already been exploited in the wild. Designated as CVE-2026-96951, this could allow a remote attacker to bypass security protections by exploiting a flaw in the Windows Shell.
Also: I tried the free Microsoft Word clone on Linux
“This vulnerability poses a serious security threat because it allows attackers to bypass an important Windows security defense designed to protect users from potentially dangerous files,” Action1 said in its advisory. “Attackers could widely exploit this weakness by convincing users to open specially crafted files or interact with malicious content. Successful exploitation could weaken Windows security protections and increase the risk of malicious content reaching users without the expected security warnings.”
Labeled CVE-2026-108398, the other zero-day was publicly disclosed before the fix was rolled out and could let an attacker past security measures by exploiting a flaw in Microsoft’s .net Framework.
In addition to the security patches, the October update fixes several bugs in File Explorer. You can now more easily preview downloaded files using the Preview Panel. File Explorer also now preserves the state of sections (expanded or collapsed), so you can pick up where you left off more quickly. Plus, thumbnail previews for cloud-based files in the details panel will make it more reliable.
Also: Microsoft’s new Nvidia PCs are cool for extreme power users
For those of you struggling with Bluetooth issues, the update also improves the accuracy and stability of connected Bluetooth devices and accessories.
Last but not least, the update provides a new setting in Windows 11 that allows you to reset the Copilot key. Instead of triggering Microsoft’s AI, the key can function as the real Ctrl key or the right-click context menu on the desktop and in File Explorer.