Microsoft Breaks Another Patch Tuesday Record
Microsoft's September 2026 Patch Tuesday is its largest ever, fixing a record 966 vulnerabilities, including 105 rated critical and two zero-days already being exploited in attacks. BleepingComputer reports: This Patch Tuesday addresses 105 "Critical" vulnerabilities, 81 of which are remote code execution, 20 are elevation of privileges, 2 are information disclosure, and 1 security feature…
Microsoft's September 2026 Patch Tuesday set a record by addressing 974 security flaws, including two zero-day vulnerabilities that have already been exploited. The vulnerabilities affect various components, with 723 impacting Windows and 111 targeting Office products. Security researchers suggest that Microsoft's use of AI-assisted tools may contribute to the high number of vulnerabilities discovered.
Two vulnerabilities, CVE-2026-81963 and CVE-2026-85880, are classified as actively exploited and can allow attackers to gain SYSTEM-level privileges. These should be prioritized by IT teams. Additionally, 20 vulnerabilities are potentially wormable, with CVE-2026-69730, a DNS server flaw, being particularly concerning. IT teams should focus on patching or mitigating these high-risk vulnerabilities first, followed by other exposed infrastructure components like DHCP, Remote Desktop Services, and Exchange Server.
Written by urgent.news from TechRepublic's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
- Microsoft breaks another patch Tuesday record theverge.com
- Microsoft Fixes 974 Flaws in Record Patch Tuesday techrepublic.com
- Microsoft's September 2026 Patch Tuesday fixes a record ~972 vulnerabilities, bringing its total flaws patched in 2026 to 2,760, more than double from 2025 (Dan Goodin/Ars Technica) arstechnica.com
