Microsoft's Patch Tuesday Sets Record with Over 900 Vulnerabilities Disclosed
Microsoft's latest Patch Tuesday release has set a new record for vulnerabilities disclosed in a single month, surpassing 900 for the first time. The company released fixes for 973 bugs, with two of them, CVE-2026-81963 and CVE-2026-85880, being exploited by hackers.
CISA confirmed that these two vulnerabilities are being actively exploited, with federal agencies having until September 22 to patch them. Tenable's Satnam Narang explained that CVE-2026-81963 affects a component used to install Windows updates and CVE-2026-85880 impacts a messaging system in Windows.
The sheer number of vulnerabilities disclosed this month has raised concerns about the potential for chained attacks. Cybersecurity researchers have warned that the use of artificial intelligence code-review tools could lead to an influx of minor vulnerabilities that can be combined for more severe threats.