Microsoft Releases Record September 2026 Security Update Patching 966 Vulnerabilities

Software major Microsoft released its September 2026 Patch Tuesday update on September 8, 2026, delivering patches for a record-breaking 966 vulnerabilities across Windows, Office, and enterprise software. The massive update includes 105 flaws classified as "Critical" and addresses two zero-day vulnerabilities that were actively being exploited in wild cyberattacks prior to the fix. The first zero-day vulnerability, tracked as CVE-2026-81963, exists in the Windows Update Stack and allows malicious actors to elevate privileges to SYSTEM status. The second exploited flaw, CVE-2026-85880, affects the Windows Advanced Local Procedure Call (ALPC) component and similarly enables unauthorized privilege escalation. Cybersecurity experts noted that Microsoft's ability to uncover such a high volume of vulnerabilities stems in part from its newly deployed AI-driven flaw detection systems. Cybersecurity agencies and IT administrators worldwide have been advised to prioritize applying the September security patches immediately, as the zero-day vulnerabilities expose enterprise networks and personal computers to remote takeover risks. The record patch count underscores the increasing sophistication of automated threat discovery and the continuous struggle to secure complex operating system software against global cyber threats.