Microsoft fixes 1,413 flaws, including a Windows zero-day already under attack

Vulnerabilities fixed in October

1,413 flaws

Microsoft's October security update, released Oct 13, fixes 1,413 vulnerabilities across Windows, Office and other products, 75 of them critical, according to the security firm CrowdStrike.

The feature attackers bypass

Mark of the Web

The most urgent is a Windows Shell flaw that attackers are already exploiting to bypass Mark of the Web, the Windows check that flags files from untrusted sources.

Two critical Outlook flaws can be exploited when a crafted email is shown in the Reading Pane, with no sign-in and no action from the user.

Check your Windows version

Windows 11 version 24H2 Home and Pro stopped receiving regular monthly security updates on Oct 13, so devices still running them need an upgrade.

Tech · 19 d ago

Microsoft fixes 1,413 flaws, including a Windows zero-day already under attack

Microsoft's October security update, released Oct 13, fixes 1,413 vulnerabilities across Windows, Office and other products, 75 of them critical, according to the security firm CrowdStrike.

The most urgent is a Windows Shell flaw that attackers are already exploiting to bypass Mark of the Web, the Windows check that flags files from untrusted sources.

Two critical Outlook flaws can be exploited when a crafted email is shown in the Reading Pane, with no sign-in and no action from the user.

Windows 11 version 24H2 Home and Pro stopped receiving regular monthly security updates on Oct 13, so devices still running them need an upgrade.

Microsoft fixes 1,413 flaws, including a Windows zero-day already under attack

Also read