Microsoft September 2026 Patch Tuesday: Record 974 Vulnerabilities Addressed

• •Microsoft released 974 patches, the largest Patch Tuesday ever.
• •Two zero-day vulnerabilities, CVE-2026-81963 and CVE-2026-85880, are actively exploited.
• •The update includes critical vulnerabilities across Windows and Office products.

On September 8, 2026, Microsoft released a record-breaking 974 patches for vulnerabilities across its products, including two actively exploited zero-day vulnerabilities: CVE-2026-81963 and CVE-2026-85880. These vulnerabilities allow local attackers to escalate privileges to SYSTEM level, posing significant risks to affected systems. The update includes 723 vulnerabilities in Windows, 111 in Office, and others across various Microsoft services. The scale of this release reflects a growing trend of increased vulnerability disclosures, attributed in part to AI-assisted discovery methods. Organizations are urged to prioritize patching these critical vulnerabilities to mitigate potential exploitation. The overall patch count surpasses previous months, indicating a new norm in vulnerability management. The urgency for remediation is heightened due to the confirmed exploitation of the zero-day vulnerabilities in the wild.