Microsoft Tackles Nearly 1,000 Security Flaws with Record-Breaking Patch Tuesday

Microsoft's September Patch Tuesday is one of its largest ever, addressing nearly 1,000 security flaws in Windows 10 and Windows 11. The update tackles a total of 974 vulnerabilities, with 438 being elevation of privilege vulnerabilities, 258 remote code execution vulnerabilities, and 19 security feature bypass vulnerabilities.

The update also targets two actively exploited zero-days: CVE-2026-85880 and CVE-2026-81963. These vulnerabilities had previously been leveraged by attackers to gain elevated system privileges.

Microsoft began using AI vulnerability detection in July, which led to a record-breaking Patch Tuesday that month, addressing 622 security vulnerabilities. The use of AI has raised questions about its potential risks and benefits in the field of cybersecurity.