Microsoft patches actively exploited Windows zero-day CVE-2026-96951, a Mark of the Web bypass with CVSS 8.8. CISA sets October 16 deadline for https://deafnews.it/en/article/cve-2026-96951-microsoft-patches-actively-exploited-motw-zero-day-as-cisa-sets-three-day-deadline
DeafNewsCVE-2026-96951: Microsoft Patches Actively Exploited MotW Zero-Day as CISA Sets Three-Day Deadline | DeafNewsMicrosoft patched CVE-2026-96951 on October 13, 2026, a Windows Shell zero-day bypassing Mark of the Web with a CVSS 8.8 score. CISA added it to the Known Exploited Vulnerabilities catalog with a three-day remediation deadline for federal agencies by October 16.