Skip to content
Today is the monthly 'Windows Update' day, which fixes 966 vulnerabilities and 2 zero ...

Today is the monthly 'Windows Update' day, which fixes 966 vulnerabilities and 2 zero ...

Gigazine • September 9, 2026

The monthly Windows Update, which delivers security updates and bug fixes for Windows, has been released. The Windows Update for Wednesday, September 9, 2026, fixes two zero-day vulnerabilities that are actually being exploited. September 2026 Security Updates (Monthly) The following is a list of security updates for September 2026. Target products maximum severity The biggest impact Related support articles or support web pages Windows 11 v26H1, v25H2, v24H2, v23H2 emergency Remote code execution is possible. v26H1 5124012 v25H2, v24H2 5124008 v23H2 5122880 Windows Server 2025 (including Server Core installation) emergency Remote code execution is possible. 5122871 Windows Server 2022 (including Server Core installation) emergency Remote code execution is possible. 5122882 Windows Server 2019, 2016 (including Server Core installation) emergency Remote code execution is possible. Windows Server 2019 5122876 Windows Server 2016 5123099 Microsoft Office emergency Remote code execution is possible. Microsoft SharePoint important Remote code execution is possible. Microsoft Exchange important Remote code execution is possible. Released: September 2026 Exchange Server Security Updates Microsoft SQL Server emergency Remote code execution is possible. Microsoft .NET important Information leak Microsoft Visual Studio emergency Information leak Microsoft Dynamics 365 emergency Remote code execution is possible. Microsoft Azure emergency Elevation of privileges The two zero-day vulnerabilities fixed in this update are ' CVE-2026-81963 ' and ' CVE-2026-85880 '. CVE-2026-81963 was a privilege escalation vulnerability in the Windows Update stack that could allow an attacker to traverse the file system to access unintended locations and read or overwrite the contents of unexpected files. CVE-2026-85880 is a privilege escalation vulnerability in Windows Advanced Local Procedure Call (ALPC) that allows an attacker to escalate privileges through a buffer overflow attack. In addition, several new features have been implemented . You can now choose where the taskbar appears on the screen—at the bottom, top, left, or right—and an option to make the taskbar smaller has been added. The Start can now be resized to either small or large, and Windows now clearly displays where results came from—apps, settings, files, web results, etc. Additionally, the extended security update 'KB5122878' for Windows 10 is also available . Windows Update is released on the second Tuesday of each month in US time, and the update is scheduled for Wednesday, October 14, 2026, in Japan time.

Today is the monthly 'Windows Update' day, which also addresses zero-day vulnerabilities that have already been exploited.

Today is the monthly Windows Update day, fixing 71 flaws and one exploited zero-day vulnerability

Today is the monthly 'Windows Update' day.

Today is the monthly 'Windows Update' day.

Today the month of the monthly "Windows Update" every month, 8 cases in total

Today is the monthly "Windows Update" monthly, seven cases in total

Today is the monthly 'Windows Update' day.

Today is the monthly “Windows Update” day.

Sep 09, 2026 12:55:00 in Software , Posted by log1p_kr

Extracted Entities