Microsoft September 2026 Patch Tuesday fixes a record number of vulnerabilities, including two exploited zero-days
Microsoft released its September security updates with a record patch volume and two Windows privilege-escalation flaws confirmed exploited in the wild. Major security coverage counts 974 CVEs, while some outlets count flaws differently; the core confirmed signal is the record release and two exploited zero-days.
Why trending: Record patch volume plus confirmed exploitation makes this the day’s broadest enterprise patching signal.