1,410 flaws patched in final Windows 11 24H2 update; first security patch for 26H2 released

Microsoft released its October security update on Tuesday, patching more than 1,400 security flaws across its operating system lineup, according to ZDNET Security. This release marks a significant transition point for Windows 11 users, serving as the final supported update for the 24H2 Home and Pro editions while simultaneously providing the first official security patch for the newer 26H2 version.

The risk

The sheer volume of fixes, hovering around 1,410, surpasses the nearly 1,000 vulnerabilities patched in September, setting a new record for the company, ZDNET reports. Microsoft attributes this increase to its internal AI tool, codenamed MDASH, which uses a multi-model agentic scanning harness to identify issues. The update also resolves specific functional problems with built-in features like File Explorer and Bluetooth, and allows users to remap the Copilot keyboard key.

Who is exposed

The security patches apply to all supported versions of Windows 11, including editions 26H2, 26H1, 25H2, and 24H2, as well as Windows 11 23H2 Enterprise and Education. Windows 10 devices enrolled in the Extended Security Updates program also receive these fixes. However, users on Windows 11 24H2 Home and Pro are now at the end of their support cycle for that specific version and must upgrade to remain protected.

Cost and compliance

Windows 11 23H2 Enterprise and Education editions face an imminent support deadline, reaching end of support on November 10, according to ZDNET. Organizations running these versions must upgrade to the latest Windows release to maintain security compliance and receive future patches. Users on Windows 11 24H2 Home and Pro have already passed this milestone and must move to version 26H2 or later to continue receiving security updates and bug fixes.

What should you do?

Administrators should verify that all supported devices have installed the October update via Windows Update settings. Teams managing Windows 11 24H2 or 23H2 Enterprise/Education deployments must plan immediate upgrades to version 26H2 to avoid losing security coverage. Ensure Windows 10 devices with Extended Security Updates are also patched.

The background in plain language

Software vendors release regular updates to fix security holes that attackers could exploit. When a version reaches its end of support, the vendor stops providing these critical fixes, leaving the system vulnerable to new threats. Upgrading to a newer version ensures you receive ongoing protection. Teams usually prioritize upgrading unsupported systems immediately to maintain security posture. Check whether your organization has a policy for migrating off deprecated operating system versions before their support ends.

What to do and how to stay safe: Microsoft

• Check Windows Update settings on all devices to ensure the October patch is installed.
• Identify any systems running Windows 11 24H2 Home or Pro and schedule an upgrade to 26H2.
• Plan migration paths for Windows 11 23H2 Enterprise and Education devices before November 10.
• Verify that Windows 10 devices with Extended Security Updates are receiving the latest patches.

Step-by-step guide: Mobile Security Architecture: 8 Practices for Device Integrity

General security guidance from the Vector Tribune newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

How many security flaws does the October update fix?

The update patches approximately 1,410 security vulnerabilities across supported Windows versions.

Which Windows versions are no longer supported after this update?

Windows 11 24H2 Home and Pro editions reach end of support with this release.

When does Windows 11 23H2 Enterprise and Education support end?

Support for these editions ends on November 10, requiring an upgrade to stay protected.