Microsoft Addresses 974 Vulnerabilities, Including Two Zero-Days, in September 2026 Patch Tuesday

Microsoft's September 2026 Patch Tuesday updates have addressed a record 974 vulnerabilities across its product portfolio. Among these are two actively exploited zero-day flaws, CVE-2026-85880 and CVE-2026-81963, which could allow local attackers to elevate privileges to SYSTEM. Additionally, GitLab has patched a critical path traversal vulnerability (CVE-2026-85706) with a CVSS score of 10.0, enabling unauthenticated attackers to read arbitrary files through the repository commits API.