October 2026 Patch Tuesday: Microsoft Stopped Sorting by Severity
Microsoft shipped a record 1,410 CVEs on October 13 and, for the first time, grouped them into risk cohorts built around exposure questions instead of severity. The exploited zero-…
Patch Tuesday analysis, security write-ups and practical guides from the team at Patchblox.
Microsoft shipped a record 1,410 CVEs on October 13 and, for the first time, grouped them into risk cohorts built around exposure questions instead of severity. The exploited zero-…
Microsoft shipped roughly 964 CVEs on September 8, a new record. One of the two exploited zero-days was in the Windows Update Stack itself, and the cumulative update broke Remote D…
Microsoft patched roughly 400 CVEs on August 11, but the single flaw confirmed exploited in the wild scored 7.0 and was rated Important: an afd.sys use-after-free used by Lazarus t…
July 2026 brought the biggest Patch Tuesday ever (570 to 622 CVEs depending who's counting), three exploited-or-public zero-days in AD FS, SharePoint, and BitLocker, and a wave of…
Microsoft's June 2026 Patch Tuesday is the largest on record: 200 vulnerabilities, 33 Critical, and three publicly disclosed flaws including a BitLocker bypass. What to prioritize…
Microsoft's May 2026 Patch Tuesday fixes 137 vulnerabilities with no actively exploited zero-days for the first time in months, but includes 31 critical CVEs including a CVSS 9.9 i…
Microsoft's April 2026 Patch Tuesday is the second-largest ever with 163 CVEs, two zero-days including an exploited Microsoft Defender flaw, and a server update that caused domain…
Microsoft's March 2026 Patch Tuesday fixes 84 vulnerabilities including two publicly disclosed zero-days, 8 critical CVEs, and a CVSS 9.8 remote code execution flaw discovered by a…
Microsoft's February 2026 Patch Tuesday addresses 55 vulnerabilities including six actively exploited zero-day flaws targeting Windows Shell, SmartScreen, Word, Desktop Window Mana…
Microsoft's first 2026 Patch Tuesday addresses 114 flaws including one actively exploited zero-day, 8 critical vulnerabilities, and an update that broke Remote Desktop and shutdown…
Microsoft closes out 2025 with 57 security fixes including one actively exploited zero-day, two publicly disclosed vulnerabilities, and a total of 1,129 CVEs patched for the year.