The disruptive update addressed 1,413 vulnerabilities across various enterprise products, surpassing the previous annual record of 1,261 common vulnerabilities and exposures established in 2020. Among the fixes is a patch for a Windows Shell zero-day (CVE-2026-96951) that is currently being used by attackers to bypass Mark of the Web defenses.
