Microsoft Breaks Patch Tuesday Record with 974-CVE Deluge
Microsoft said more than 1 in 10 flaws were critical as AI-assisted discovery drove its largest-ever monthly security update.
- On Tuesday, Microsoft released a record 974 fixes across its product suite, including two actively exploited zero-day vulnerabilities affecting Windows and other critical systems.
- This record-breaking volume, up from 622 patches in July, reflects a continuing trend of AI-assisted vulnerability discovery accelerating Microsoft's disclosure rate.
- Adobe issued 10 bulletins addressing 172 CVEs, including the StyleSmuggler zero-day in Magento and Adobe Commerce, while the Cybersecurity and Infrastructure Security Agency set September 11 and September 22 deadlines for patches.
- Researchers emphasize separating immediate threats from standard updates; CVE-2026-81963 and CVE-2026-85880 enable privilege escalation in Windows Update Stack and Windows Advanced Local Procedure Call.
- Google patched CVE-2026-85046 in Chrome on September 3, yet Microsoft has not published an advisory, leaving experts to assume the vulnerability remains unpatched in Edge.
30 Articles
30 Articles
Record September Patch Tuesday: 974 flaws, two exploited
Microsoft’s September Patch Tuesday fixes 974 security flaws across its products, according to the company’s release notes. Attackers were already exploiting two of them before the patches landed on Tuesday. Both zero-days let an attacker who already has a foothold on a Windows machine gain higher privileges. One sits in the Windows Update Stack (CVE-2026-81963), […] This story continues at The Next Web
Microsoft closed more vulnerabilities in September than ever in a month. Two of them already exploit attackers. What Windows users should do now.
Microsoft's Record 974 Patches Signal New Era of AI-Driven Vulnerability Flood
Microsoft's September 2026 Patch Tuesday fixed a record 974 vulnerabilities, including two actively exploited zero-days in Windows components. AI tools drive the surge in discovered flaws, forcing defenders to prioritize amid unprecedented volume. The trend shows no signs of slowing.
The Register
IT Security News - cybersecurity, infosecurity newsMicrosoft breaks Patch Tuesday record with 974-CVE deluge
Adobe also brought goodies to the patch party and they deserve immediate attention
CyberScoopcybernoz.comMicrosoft discloses two actively exploited zero-days among 974 vulnerabilities
While the vendor hit another monthly record, it hasn’t resulted in a flood of active exploits. Researchers encourage customers to focus on their specific areas of risk and exposure.
Coverage Details
Bias Distribution
- 67% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
