Microsoft Patch Tuesday Fixes 966 Vulnerabilities, Including 2 Exploited 0-Days

Hackread • September 9, 2026

Share: View original

This website uses a security service to protect against malicious bots. This page is displayed while the website verifies you are not a bot.

Verification successful. Waiting for hackread.com to respond

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft September 2026 Patch Tuesday: Record 974 Vulnerabilities Addressed On September 8, 2026, Microsoft released a record-breaking 974 patches for vulnerabilities across its products, including two actively exploited zero-day vulnerabilities: CVE-2026-81963 and CVE-2026-85880. These vulnerabilities allow local attackers to escalate privileges to SYSTEM level, posing significant risks to affected systems. The update includes 723 vulnerabilities in Windows, 111 in Office, and others across various Microsoft services. The scale of this release reflects a growing trend of increased vulnerability disclosures, attributed in part to AI-assisted discovery methods. Organizations are urged to prioritize patching these critical vulnerabilities to mitigate potential exploitation. The overall patch count surpasses previous months, indicating a new norm in vulnerability management. The urgency for remediation is heightened due to the confirmed exploitation of the zero-day vulnerabilities in the wild. 97 sources 73

Extracted Entities

Domains (1)