Back Isc.Sans.Edu

September 2026 Microsoft Patch Tuesday, (Tue, Sep 8th)

Isc.Sans.Edu • September 8, 2026

This month, Microsoft released patches for a record-breaking 973 vulnerabilities, including 113 rated critical. It is by far the largest Patch Tuesday to date, well ahead of the high of 664 set in July 2026. Two vulnerabilities are listed as exploited in the wild, while none were publicly disclosed before Patch Tuesday. Notable fixes include Windows privilege escalation and critical RCEs in Skype for Business, MSMQ and RRAS.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft September 2026 Patch Tuesday: Record 974 Vulnerabilities Addressed On September 8, 2026, Microsoft released a record-breaking 974 patches for vulnerabilities across its products, including two actively exploited zero-day vulnerabilities: CVE-2026-81963 and CVE-2026-85880. These vulnerabilities allow local attackers to escalate privileges to SYSTEM level, posing significant risks to affected systems. The update includes 723 vulnerabilities in Windows, 111 in Office, and others across various Microsoft services. The scale of this release reflects a growing trend of increased vulnerability disclosures, attributed in part to AI-assisted discovery methods. Organizations are urged to prioritize patching these critical vulnerabilities to mitigate potential exploitation. The overall patch count surpasses previous months, indicating a new norm in vulnerability management. The urgency for remediation is heightened due to the confirmed exploitation of the zero-day vulnerabilities in the wild. 76 sources 73

September 2026 Microsoft Patch Tuesday, (Tue, Sep 8th)

The full story

Extracted Entities

CWE Weaknesses (1)

Platforms (4)