Microsoft Unveils Largest-Ever Patch Tuesday Update with 974 Vulnerability Fixes

Microsoft released its largest-ever Patch Tuesday update on September 2026, addressing 974 security vulnerabilities across various products.

The updates cover critical and important-severity issues in Windows HTTP.sys, Windows Hyper-V, GitHub Copilot, Visual Studio Code, Data Sharing Service Client, Entra ID, Microsoft Exchange Server, and more.

Among the patched vulnerabilities are two that have been exploited in the wild, according to Qualys. CISA added several of these vulnerabilities to its Known Exploited Vulnerabilities Catalog, urging users to patch them before September 22, 2026.

Adobe also released nine advisories addressing 170 vulnerabilities across various products, including Adobe Experience Manager, ColdFusion, Photoshop, Illustrator, Animate, Commerce, Acrobat Reader, and Campaign Classic. Fifty of these vulnerabilities are rated critical.