Microsoft patches 1,410 flaws, debuts 26H2 security update while ending 24H2 support
The October update addresses over 1,400 vulnerabilities across Windows 11 and 10, marking the final patch for version 24H2 and the debut for 26H2.
Key points
- Microsoft released an update fixing approximately 1,410 security vulnerabilities.
- This is the last supported update for Windows 11 24H2 Home and Pro editions.
- Windows 11 26H2 receives its first official security patch in this release.
Microsoft delivered an October update that resolves approximately 1,410 security flaws across its operating systems, according to ZDNET Security. The release marks a significant milestone for Windows 11 version 24H2, as it is the final supported update for Home and Pro editions of that specific build. Simultaneously, the package provides the first official security patch for the newer Windows 11 26H2 version.
Root cause
The high volume of identified defects stems from Microsoft’s use of an internal tool codenamed MDASH, described as a multi-model agentic scanning harness. This AI-driven system allows the vendor to detect vulnerabilities at a scale that surpasses previous months, including the nearly 1,000 flaws patched in September. The update also addresses non-security issues with File Explorer and Bluetooth functionality.
Attack path
The source material does not detail specific attack vectors or exploit methods for the 1,410 vulnerabilities. It notes that the update includes fixes for two zero-day flaws, though it does not describe how these were being abused or what impact they had on systems prior to the patch.
Affected versions
- Windows 11 26H2, 26H1, 25H2, and 24H2 (all editions)
- Windows 11 23H2 Enterprise and Education
- Windows 10 PCs enrolled in the Extended Security Updates program
Mitigation
- Install the October update via Windows Update settings on all supported devices.
- Upgrade Windows 11 24H2 Home and Pro systems to version 26H2 to maintain support.
- Plan to update Windows 11 23H2 Enterprise and Education before their November 10 end-of-support date.
What it means for organisations
IT leaders must immediately audit their environments for any remaining Windows 11 24H2 Home or Pro installations, as these will cease receiving security patches. Teams should verify that Windows 11 23H2 Enterprise and Education devices are scheduled for upgrade before the November 10 deadline. Procurement and infrastructure groups need to assess the readiness of their fleets for the Windows 11 26H2 rollout, ensuring hardware compatibility and application stability. Communication should be sent to all users regarding the mandatory nature of these upgrades to maintain security compliance.
What to do and how to stay safe: Microsoft
- Check your device's current Windows version and compare it against the supported list.
- Schedule maintenance windows to apply the October update to all eligible machines.
- Identify any Windows 10 devices still on ESU and plan their migration path.
- Monitor internal logs for any errors related to File Explorer or Bluetooth after patching.
General security guidance from the TechSec Observer newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Is Windows 11 24H2 still supported?
No, the October update is the final supported release for Windows 11 24H2 Home and Pro editions.
When does Windows 11 23H2 Enterprise support end?
Support for Windows 11 23H2 Enterprise and Education editions ends on November 10.
What tool did Microsoft use to find these bugs?
Microsoft used an internal AI tool called MDASH, a multi-model agentic scanning harness.
