{
  "id": 6762118,
  "title": "Microsoft Patches 974 Flaws in One Day, Two Windows Zero-Days Already Exploited",
  "url": "https://urgent.news/2026/09/11/microsoft-patches-974-flaws-in-one-day-two-windows-zero-days-already",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-11T14:06:06.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/etairos/microsoft-patches-974-flaws-in-one-day-two-windows-zero-days-already-exploited-2fn5"
  },
  "original_language": "en",
  "account": "Microsoft released 974 patches on September 8, 2026, in the largest Patch Tuesday release ever. Two Windows privilege escalation flaws, CVE-2026-85880 and CVE-2026-81963, were already being exploited in the wild. Both vulnerabilities allow attackers to gain SYSTEM-level access without user interaction. The two zero-day flaws are local, meaning attackers must first gain access to the system. Microsoft added both to the Known Exploited Vulnerabilities catalog, with a remediation deadline of September 22, 2026. The patches addressed 723 vulnerabilities in Windows, 111 in Office and Office 2016, 62 in SQL Server, and 22 in developer tools. Over 110 of the patches carry a critical rating, with most being for privilege escalation, remote code execution, and information disclosure. Both zero-day vulnerabilities are considered high severity, with CVSS scores of 7.8. The patches are critical for system security and should be applied immediately to mitigate the risk of exploitation.",
  "summary": "TL;DR what: Microsoft's September 2026 Patch Tuesday fixed 974 vulnerabilities, the largest single release ever, including two Windows privilege escalation flaws already exploited in the wild. Microsoft shipped fixes for 974 vulnerabilities on September 8, 2026, the largest Patch Tuesday on record. Counting 25 non-Microsoft CVEs routed through the same update channel, the total reaches 999. Two…",
  "key_points": [
    "Microsoft released 974 patches on September 8, 2026, in largest Patch Tuesday release ever.",
    "Two Windows privilege escalation flaws, CVE-2026-85880 and CVE-2026-81963, already exploited.",
    "Both zero-day vulnerabilities considered high severity with CVSS scores of 7.8."
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}