---
title: "Microsoft Patches 1118 Vulnerabilities in Windows and Software with Massive October Update"
description: "Microsoft released an October security update package addressing 1118 vulnerabilities and introducing a new threat group analysis method for IT professionals."
date: 2026-10-15T13:12:20.680Z
lang: en
url: https://xab.info/en/posts/microsoft-patches-1118-vulnerabilities-windows-software
tags: [microsoft, windows, security-update, cve, software]
author: "Alexander Buran"
publisher: "XAB.info"
---

# Microsoft Patches 1118 Vulnerabilities in Windows and Software with Massive October Update

![Windows security update interface and Microsoft vulnerability list analysis](https://xab.info/media/2026/10/15/microsoft-zalatala-1118-uyazvimostey-windows-po/microsoft-zalatala-1118-uyazvimostey-windows-po-1.webp)

## Key Points

- Microsoft resolved 1118 vulnerabilities as part of the October update package.
- 15 'risk cohorts' were introduced to streamline analytical workflows for IT experts.
- The highest number of vulnerabilities (136) was found in data storage and backup subsystems.

Microsoft has introduced a massive security update package addressing a total of 1118 vulnerabilities across various software products and the Windows operating system. Alongside a record number of closed security gaps, the company implemented a fundamentally new approach to threat classification, dividing them into 15 specialized risk cohorts to optimize IT professionals' workflows.

### The Essence of the New Approach and Risk Cohorts

The traditional security audit process requires administrators and analysts to thoroughly examine each individual vulnerability based on CVE identifiers. This includes assessing severity levels, affected components, attack implementation conditions, and exploitation status. To eliminate duplicate routine work when deploying gigantic patch packages, developers grouped vulnerabilities into so-called "risk cohorts." They are based not on common root causes, but on similar types of analytical checks needed to evaluate the environment.

### Vulnerability Distribution Across Categories

The largest risk cohort in the current package targets Windows file systems, data storage, and backup mechanisms, accounting for 136 vulnerabilities dealing with potentially unsafe data. This is followed by office applications and email clients (135 vulnerabilities), as well as graphics, multimedia, and content processing components (131 vulnerabilities). Additionally, large-scale fixes affected the system kernel (109 entries), installation and deployment services (103 entries), alongside network infrastructure, peripherals, and cryptographic subsystems.

### Contradictory Data

While official figures from the company's latest global release state 1118 fixed vulnerabilities, independent sources and industry reports from previous periods show different scales for monthly patches. For instance, specialized media previously recorded both smaller packages of 173 vulnerabilities and record releases reaching 1400 fixes. Such discrepancies are related to data collection dynamics across various Microsoft software ecosystems and the variability of CVE counting methodologies in monthly support cycles.

### Expert Significance and Limitations

The presented risk cohorts are strictly analytical in nature: they do not replace the official Security Update Guide, do not change patch deployment priorities, and do not cancel the need to check for active exploit deployment. Nevertheless, the new systematic approach allows IT departments to significantly reduce preliminary infrastructure audit time, ensuring a comprehensive understanding of cyber threats across all patch installation stages.

## Fact-Check & Sources

- [Microsoft одним махом залатала 1118 дыр в Windows и другом ПО window-new](https://3dnews.ru/1149892/microsoft-odnim-mahom-zalatala-1118-dir-v-windows-i-drugom-po) - Основной источник по цифре 1118 уязвимостей и группам риска.
- [Последние обновления Windows 10. Microsoft патчит 173 уязвимости в своих продуктах](https://xakep.ru/2025/10/15/october-2025-patches/) - Используется для контекста противоречивых данных по прошлым объемам патчей.
- [Microsoft закрыла рекордные 1400 уязвимости в Windows: обновление нельзя пропускать](https://www.unian.net/techno/software/microsoft-vypustila-vazhnoe-obnovlenie-windows-chto-nuzhno-sdelat-polzovatelyam-13529490.html) - Дополнительный исторический контекст масштабов прошлых обновлений.
- [Microsoft выпустила обновление для устранения уязвимости CVE-2025-59287](https://www.ridus.ru/microsoft-vypustila-obnovlenie-dlya-ustraneniya-uyazvimosti-cve-2025-59287-722169.html) - Подтверждение работы с CVE идентификаторами.

## FAQ

### How many vulnerabilities did Microsoft fix in October?

As part of the October security update package, the company resolved 1118 vulnerabilities.

### What are risk cohorts in the Microsoft update?

These are analytical groupings of vulnerabilities based on environment check types, designed to spare specialists from duplicate work when analyzing individual CVEs.