Microsoft September 2026 Patch Tuesday fixes nearly a thousand flaws, including two major zero-days
2026 has been a record year for CVE fixes, but Microsoft just fixed nearly 1,000 of them in one single update.
Microsoft's September 2026 Patch Tuesday released 974 security fixes, marking its largest security update ever. A significant portion, 723 vulnerabilities, were linked to Windows, while Office accounted for 111 issues. The surge in discovered flaws is attributed to the company's enhanced use of AI-assisted tools. This release includes two critical vulnerabilities, CVE-2026-85880 and CVE-2026-81963, that are currently being actively exploited.
Microsoft patched 1,139 CVEs in 2025, nearly double the number patched in 2016, the lowest figure on record. Among the vulnerabilities, 114 were classified as critical, emphasizing the urgency for customers to apply the update. Microsoft's efforts to swiftly address bugs are mirrored by other tech companies such as Adobe, Google, Mozilla, Brave, and even Microsoft's own browser updates, which have been accelerated to a two-week cycle.
Alongside patching exploitable bugs, Microsoft also resolved known issues, including crashes in Teams and Outlook on Arm64 PCs, and upgraded Copilot+ AI components.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
