Record-Breaking Microsoft Patch Fixes Over 970 Vulnerabilities

Microsoft's September 2026 Patch Tuesday release addresses a record-breaking 974 security vulnerabilities, including 723 affecting Windows. The patch update was published on September 8, 2026, and is considered a priority for users and IT teams due to the presence of two Windows flaws with detected exploitation.

The number of vulnerabilities fixed in this patch cycle is significantly higher than usual, following a summer of unusually large Microsoft security releases. According to The Verge, security-focused AI models have contributed to the discovery of these vulnerabilities at an accelerated rate, allowing Microsoft to identify and fix more issues in each release.

Microsoft flags CVE-2026-85880 and CVE-2026-81963 as having exploitation detected, indicating that users should prioritize patching these vulnerabilities. The company's official Security Update Guide lists the 974 affected CVEs, with Windows accounting for 723 of them, followed by Office, SQL Server, Developer Tools, and SharePoint Server.

UAE organizations running Windows fleets are advised to test the release against their usual business applications and deploy it through supported update channels as quickly as possible. While AI-assisted discovery has contributed to successive record-sized Patch Tuesday cycles, the updates are not optional and should be treated with urgency.