Quick answer: if your PC runs Windows 11 version 24H2 (Home or Pro), it stopped getting security updates after 13 October 2026. Upgrade to 25H2 or 26H2 through Windows Update now. The same day, Microsoft released a record-breaking Patch Tuesday that fixed 1,411 security flaws, including one already being used by attackers.
Here is how to check your version, how to upgrade, and why this month’s update matters.
What changed on 13 October 2026
Windows 11 feature versions get a fixed support period. For 24H2 Home and Pro, that period is over: the October 2026 security update was the last one these editions will receive. Your PC will keep working, but any new security hole found from now on will stay open on 24H2.
| Windows 11 version | Home and Pro support |
|---|---|
| 24H2 | Ended 13 October 2026 |
| 25H2 | Until October 2027 |
| 26H2 (the 2026 Update) | Until at least October 2028 |
Businesses on 24H2 Enterprise or Education get one more year, until October 2027.
How to check your Windows version
- Press Windows + R, type
winverand press Enter. A small window shows your version, for example “Version 24H2”. - Or open Settings → System → About and look under Windows specifications.
If it says 25H2 or 26H2, you are covered. If it says 24H2, follow the steps below.
How to upgrade from 24H2
- Open Settings → Windows Update.
- Turn on “Get the latest updates as soon as they’re available”.
- Click Check for updates. If the feature update to 25H2 or 26H2 is offered, choose Download and install.
- Restart when asked. Set Active hours first if you do not want the restart during work.
This is not a full reinstall. 24H2, 25H2 and 26H2 share the same core, so the upgrade mostly switches on features your PC already has, and usually needs just one restart. Your files and apps stay as they are.
If the update is not offered: Microsoft may be holding it back because of a known compatibility issue with your hardware or drivers. Avoid forcing it with the Update Assistant; wait a few days and check again, and update your drivers from your PC maker’s website in the meantime.
Do not keep pausing updates. Windows lets you pause for up to 35 days, but on 24H2 every paused day is now a day without security fixes.
October 2026 Patch Tuesday: a record 1,411 fixes
Microsoft’s October Patch Tuesday, released on 13 October, fixed 1,411 vulnerabilities, the most ever in a single monthly release. That number does not include 348 flaws fixed earlier in the month.
- 70 are rated critical: 57 remote code execution, 11 elevation of privilege and 2 spoofing.
- Elevation of privilege bugs make up the largest group, at about 677.
- The jump is linked to Microsoft’s growing use of AI tools to find and fix bugs in its own products.
The three zero-days
- CVE-2026-96951, Windows Shell (actively exploited): lets attackers bypass Mark of the Web, the warning Windows shows on files downloaded from the internet. This is the one to patch first.
- CVE-2026-108398, .NET Framework (publicly disclosed): could bypass Windows Defender Application Control. Found by James Forshaw of Google Project Zero.
- CVE-2026-92707, MessagePack-CSharp (publicly disclosed): a denial-of-service flaw.
The updates are KB5127648 and KB5126653 for Windows 11, and KB5126657 for Windows 10 PCs enrolled in Extended Security Updates.
Quick checklist
- Run
winverand note your version. - Install the October 2026 cumulative update if you have not already.
- On 24H2, upgrade to 25H2 or 26H2 now.
- Be careful with downloaded files and email attachments until you are fully patched.
Frequently asked questions
Will my PC stop working after 24H2 support ends?
No. It keeps working, but it no longer receives security updates, which makes it riskier to use online.
Is upgrading from 24H2 to 25H2 or 26H2 free?
Yes. Feature updates are free through Windows Update.
Will I lose my files when I upgrade?
No. The upgrade keeps your files, apps and settings. A backup is still a good habit before any major update.
How long does the upgrade take?
Usually a short download and a single restart, because the versions share the same base.
What is a zero-day vulnerability?
A security flaw that attackers know about, or are already exploiting, before a fix is available.
Sources: Microsoft release information via BleepingComputer; Notebookcheck; FileHippo.
