Microsoft's September 2026 Patch Tuesday Addresses Record 974 CVEs, Including Two Zero-Days

Microsoft has released its September 2026 Patch Tuesday updates, addressing a record 974 Common Vulnerabilities and Exposures (CVEs). This extensive release includes two zero-day vulnerabilities (CVE-2026-85880 and CVE-2026-81963) that are already being actively exploited in the wild, along with 20 vulnerabilities identified as potentially wormable. The volume of this month's security updates highlights a growing challenge for organizations in managing and prioritizing vulnerability remediation.