Microsoft Smashes Record with 974 Vulnerability Fixes in Massive Update
Microsoft has issued its largest-ever security update, patching a record-breaking 974 vulnerabilities across its Windows family and other products. This is more than 10 times the number of flaws fixed in last September's update, which addressed just 86 CVEs.
The entire Windows family received fixes for 723 of these vulnerabilities, while specific builds of Windows 11 24H2 and 25H2 were patched for 611 CVEs. Microsoft attributes this surge in vulnerability reports to the increasing use of AI tools and more efficient researchers.
Security teams are flagging remote code execution risks in Exchange Server, Remote Desktop Services, DNS, DHCP, and SMB as high-priority patching targets. Users should verify their build number after updating: Windows 11 25H2 should show Build 26200.9445 or higher, and 24H2 should show Build 26100.9445 or higher.
Microsoft recommends deploying critical updates within three days to ensure maximum protection against potential threats. This could be the 'new normal' for 2026 and beyond, with monthly totals climbing sharply since mid-year, according to some trackers.