October 2026 Patch Tuesday: a record 1,400+ flaws, an exploited Windows zero-day and the PCs at your Mexico operation that no longer get patches

On October 13, 2026, Microsoft shipped the largest Patch Tuesday we have seen. Patch Tuesday is the monthly security bundle released on the second Tuesday, and this one fixes between 1,411 and 1,413 flaws depending on who counts: BleepingComputer reports 1,411, The Hacker News says 1,413.

If your headquarters is in Texas, Madrid or Munich, here is the part that matters for your Mexico site. Global patch policies rarely reach every machine in a plant or a branch. This month, those gaps are expensive.

The Windows Shell zero-day: why it cannot wait

A zero-day is a flaw attackers found and used before the vendor fixed it. Of this month’s three, the one to worry about sits in the Windows Shell: the part of Windows that handles the desktop, folders and the files people open all day.

Microsoft confirms it is being exploited. In plain terms, any PC in Mexico without the October update is a target, from the plant manager’s laptop to the shipping desk PC.

What to install today

Device	What it should receive
Supported Windows 11	Cumulative KB5127648 or KB5126653, depending on version
Windows 10 enrolled in ESU	KB5126657
Windows servers	The October cumulative for their version

BleepingComputer covers both Windows 11 updates, and the Windows 10 ESU update shipped as KB5126657, only for enrolled devices.

If your Mexico PCs report to a global Intune or WSUS, filter the compliance report by site. In our experience, machines bought locally are often never enrolled, so they do not show up at all.

Test before rolling it out everywhere

On October 14 Microsoft warned that recent Windows updates may trigger Remote Desktop failures. Remote Desktop (RDP) is how many local teams reach the ERP, the accounting server or a shared PC.

A staged rollout keeps the site running:

1. Two or three test PCs, including one from each team that uses RDP.
2. If a day passes with no complaints, one floor or one branch.
3. Then everyone else, with servers in an after-hours window.

With an exploited zero-day, do not wait a week between rings. One or two days is usually enough to see if something breaks.

The PCs left behind on October 13

The same day, Windows 11 24H2 Home and Pro reached end of support, so did Office 2021, and Windows Server 2022 left mainstream support. Unsupported devices will not get the zero-day fix, no matter how often Windows Update runs.

Situation	How to spot it	Next step
Windows 11 24H2 Home or Pro	Type winver: it says 24H2	Move to 25H2
Windows 10 without ESU	KB5126657 never arrives	ESU or replace
Office 2021	File, Account, About	License plan
Windows Server 2022	Still gets security fixes, no new features	Plan Server 2025

The usual suspects are always the same. The front desk PC nobody turns off. The scale PC on the plant floor. The laptop bought at a local store with Home edition, outside every corporate policy.

Let's talk

What about your Mexico operation?

If nobody can tell you how many PCs at your Mexico site have the October update, that is the first answer you need.

At ProcessBi we build the inventory, run staged patching under a support plan and send field technicians anywhere in Mexico to bring the stragglers up to date, with reports in English and invoicing in MXN or USD.

Book your free assessment — we reply the same business day.