{
  "id": 6370973,
  "title": "Microsoft breaks Patch Tuesday record with 974-CVE deluge",
  "url": "https://urgent.news/2026/09/09/microsoft-breaks-patch-tuesday-record-with-974-cve-deluge-6370973",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-09T00:25:22.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/security/2026/09/09/microsoft-breaks-patch-tuesday-record-with-974-cve-deluge/5295160"
  },
  "original_language": "en",
  "account": "Microsoft delivered a staggering 974 security patches in a single month, surpassing even its own previous record. Among these updates were two vulnerabilities already being exploited by attackers. The month's patch drop follows a trend of increasing security fixes, with Microsoft releasing 421 patches in August and 622 in July. Adobe also made headlines with 10 bulletins addressing 172 CVEs, including a critical zero-day vulnerability known as StyleSmuggler. This flaw allows unauthenticated attackers to execute remote code on Magento and Adobe Commerce platforms. Microsoft's record-breaking 974 CVEs include several high-severity vulnerabilities that could grant attackers administrative privileges. Two of these flaws are already being exploited as zero-days. Microsoft's disclosure of these vulnerabilities has prompted federal agencies to prioritize patching within specific deadlines. However, one vulnerability - CVE-2026-85046 - remains unpatched in Microsoft's Edge browser. Google patched this issue in Chrome, but Microsoft has not published an advisory for it. This omission leaves users uncertain about their protection status.",
  "summary": "Adobe also brought goodies to the patch party and they deserve immediate attention",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 4,
    "also_reported_by": [
      {
        "outlet": "Ars Technica",
        "title": "Why this month's Microsoft patch release is a doozy",
        "url": "https://urgent.news/2026/09/08/why-this-months-microsoft-patch-release-is-a-doozy",
        "published": "2026-09-08T21:11:46.000Z"
      },
      {
        "outlet": "The Record",
        "title": "Microsoft posts nearly 1,000 bugs for Patch Tuesday as CISA warns two being exploited",
        "url": "https://urgent.news/2026/09/08/microsoft-posts-nearly-1-000-bugs-for-patch-tuesday-as-cisa-warns-two",
        "published": "2026-09-08T22:40:00.000Z"
      },
      {
        "outlet": "The Register",
        "title": "Microsoft breaks Patch Tuesday record with 974-CVE deluge",
        "url": "https://urgent.news/2026/09/09/microsoft-breaks-patch-tuesday-record-with-974-cve-deluge",
        "published": "2026-09-09T00:25:22.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}