Microsoft Smashes Patch Tuesday Record with Nearly 1000 Fixes

Microsoft's Patch Tuesday record was shattered this month with nearly 1,000 fixes released. The update addressed just under 1,000 vulnerabilities, a new high for the company. Microsoft itself reported 974 CVEs addressed, while Trend Micro's Zero-Day Initiative put the total at 997.

Action1's Jack Bicer noted that IT and security teams need to quickly separate the vulnerabilities that demand immediate action from those that can follow the normal deployment cycle.

The two Windows patches that should be immediately applied are CVE-2026-85880 and CVE-2026-81963, as they involve vulnerabilities under active exploitation. Microsoft advised customers that these patches are critical due to their potential for privilege escalation.

ZDI recommended applying patches for important flaws in Exchange and SQL Server next, given how they could allow remote code execution and escalation of privilege attacks, respectively.