For October's record Microsoft release, prioritize by exploitation evidence, not CVSS alone: (1) CVE-2026-96951 Windows Shell MotW bypass — already exploited and on CISA KEV (due Oct 16); (2) internet-facing edge already in KEV (Ivanti Connect Secure CVE-2026-104935); (3) high-likelihood RCEs Microsoft flags as "Exploitation More Likely" (Exchange, AD DS, MSMQ, Outlook). Use MSRC risk cohorts for shared-boundary bundles, then confirm with VEX. Restart browsers after Chrome updates so sandbox fixes take effect.