Microsoft Patches Record 974 Vulnerabilities in September Update

Microsoft's September 2026 security update addresses 974 vulnerabilities, including 105 classified as critical, marking the company's largest Patch Tuesday release to date.

The update includes fixes for two actively exploited zero-day vulnerabilities, CVE-2026-81963 and CVE-2026-85880, which allow attackers to gain SYSTEM-level privileges on Windows devices.

The vulnerabilities affect the Windows Update Stack and Advanced Local Procedure Call (ALPC) mechanism, with incident-response teams noting their use in real-world attack chains.