Microsoft Security Update Addresses Active Exploits

On September 8, 2026, Microsoft released a security update addressing critical vulnerabilities in its products, notably CVE-2026-85880 and CVE-2026-81963, both of which were confirmed to be actively exploited before the update was issued. The vulnerabilities involve privilege escalation in Windows Advanced Local Procedure Call (ALPC) and the Windows Update stack. Affected customers are urged to apply the updates immediately, as the vulnerabilities were added to the CISA KEV list on the same day. The update includes patches for 38 existing vulnerabilities and updates to one advisory. Microsoft emphasizes the importance of applying these updates promptly to mitigate potential risks. The updates are automatically applied for most users, but manual intervention may be required for some systems. The next scheduled security update is set for October 13, 2026.

Key Points: • Microsoft released critical security updates on September 8, 2026. • CVE-2026-85880 and CVE-2026-81963 are actively exploited vulnerabilities. • Affected users must apply updates immediately to mitigate risks.